SUSE-SU-2026:23241-1
Vulnerability from csaf_suse - Published: 2026-08-18 20:43 - Updated: 2026-09-14 12:51Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46040: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (bsc#1267472).
- CVE-2026-46064: ibmasm: fix heap over-read in ibmasm_send_i2o_message() (bsc#1267497).
- CVE-2026-46068: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).
- CVE-2026-46086: net: bridge: use a stable FDB dst snapshot in RCU readers (bsc#1267524).
- CVE-2026-46089: zram: do not forget to endio for partial discard requests (bsc#1267445).
- CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (bsc#1267502).
- CVE-2026-46132: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (bsc#1267616).
- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
- CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
- CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
- CVE-2026-46191: fbcon: Avoid OOB font access if console rotation fails (bsc#1267690).
- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
- CVE-2026-46207: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691).
- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678).
- CVE-2026-46249: octeontx2-af: Fix PF driver crash with kexec kernel booting (bsc#1267683).
- CVE-2026-46265: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662).
- CVE-2026-46292: pmdomain: core: Fix detach procedure for virtual devices in genpd (bsc#1267943).
- CVE-2026-46294: dm: fix a buffer overflow in ioctl processing (bsc#1267939).
- CVE-2026-46306: flow_dissector: do not dissect PPPoE PFC frames (bsc#1267986).
- CVE-2026-46321: tun: free page on short-frame rejection in tun_xdp_one() (bsc#1268024).
- CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).
- CVE-2026-52910: pf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
- CVE-2026-52915: netfilter: ip6t_hbh: reject oversized option lists (bsc#1269001).
- CVE-2026-52921: netfilter: ipset: stop hash:* range iteration at end (bsc#1269024).
- CVE-2026-52927: netfilter: ebtables: fix OOB read in compat_mtw_from_user (bsc#1269027).
- CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates (bsc#1269003).
- CVE-2026-52937: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR (bsc#1268983).
- CVE-2026-52941: net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint (bsc#1268966).
- CVE-2026-52942: netfilter: nf_log: validate MAC header was set before dumping it (bsc#1268967).
- CVE-2026-52947: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (bsc#1269115).
- CVE-2026-52953: iommu/vt-d: Fix oops due to out of scope access (bsc#1269133).
- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
- CVE-2026-52970: netfilter: nft_ct: fix missing expect put in obj eval (bsc#1269229).
- CVE-2026-52974: net: tls: fix strparser anchor skb leak on offload RX setup failure (bsc#1269233).
- CVE-2026-52981: neigh: let neigh_xmit take skb ownership (bsc#1269254).
- CVE-2026-52984: net/sched: netem: fix queue limit check to include reordered packets (bsc#1269272).
- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
- CVE-2026-52988: rculist: add list_splice_rcu() for private lists (bsc#1269362).
- CVE-2026-52991: sched/psi: fix race between file release and pressure write (bsc#1269134).
- CVE-2026-52995: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).
- CVE-2026-52998: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (bsc#1269118).
- CVE-2026-52999: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (bsc#1269119).
- CVE-2026-53000: netfilter: nat: use kfree_rcu to release ops (bsc#1269117).
- CVE-2026-53002: netfilter: conntrack: remove sprintf usage (bsc#1269112).
- CVE-2026-53003: pppoe: drop PFC frames (bsc#1269111).
- CVE-2026-53004: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (bsc#1269106).
- CVE-2026-53006: ipv6: fix possible UAF in icmpv6_rcv() (bsc#1269104).
- CVE-2026-53009: ice: fix double-free of tx_buf skb (bsc#1269098).
- CVE-2026-53011: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (bsc#1269094).
- CVE-2026-53012: nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1269154).
- CVE-2026-53013: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF (bsc#1269095).
- CVE-2026-53032: bpf: Fix NULL deref in map_kptr_match_type for scalar regs (bsc#1269138).
- CVE-2026-53062: dm cache policy smq: fix missing locks in invalidating cache blocks (bsc#1269658).
- CVE-2026-53063: dm cache: fix write hang in passthrough mode (bsc#1269659).
- CVE-2026-53064: dm cache: fix null-deref with concurrent writes in passthrough mode (bsc#1269132).
- CVE-2026-53069: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).
- CVE-2026-53074: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (bsc#1269688).
- CVE-2026-53083: bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1269964).
- CVE-2026-53088: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (bsc#1269185).
- CVE-2026-53106: bpf: Do not allow deleting local storage in NMI (bsc#1269990).
- CVE-2026-53107: wifi: libertas: use USB anchors for tracking in-flight URBs (bsc#1269991).
- CVE-2026-53123: md: wake raid456 reshape waiters before suspend (bsc#1269643).
- CVE-2026-53129: fs/mbcache: cancel shrink work before destroying the cache (bsc#1269633).
- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
- CVE-2026-53132: vsock/virtio: fix potential unbounded skb queue (bsc#1269290).
- CVE-2026-53134: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).
- CVE-2026-53175: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714).
- CVE-2026-53183: mptcp: allow subflow rcv wnd to shrink (bsc#1269376).
- CVE-2026-53184: udp: clear skb->dev before running a sockmap verdict (bsc#1269689).
- CVE-2026-53185: zram: fix use-after-free in zram_bvec_write_partial() (bsc#1269660).
- CVE-2026-53186: RDMA/srp: bound SRP_RSP sense copy by the received length (bsc#1269663).
- CVE-2026-53189: mm/huge_memory: update file PMD counter before folio_put() (bsc#1269797).
- CVE-2026-53212: netfilter: nft_tunnel: fix use-after-free on object destroy (bsc#1269672).
- CVE-2026-53218: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (bsc#1269273).
- CVE-2026-53221: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (bsc#1269318).
- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
- CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (bsc#1269711).
- CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (bsc#1269877).
- CVE-2026-53230: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (bsc#1269270).
- CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1269994).
- CVE-2026-53239: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (bsc#1269677).
- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
- CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).
- CVE-2026-53252: adaption to srcu change of hci_dev in hci_sysfs (bsc#1269307).
- CVE-2026-53262: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() (bsc#1270000).
- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
- CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (bsc#1269257).
- CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (bsc#1269240).
- CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (bsc#1269810).
- CVE-2026-53289: ice: fix NULL pointer dereference in ice_reset_all_vfs() (bsc#1269694).
- CVE-2026-53291: ALSA: hda/conexant: Fix missing error check for jack detection (bsc#1269697).
- CVE-2026-53345: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying (bsc#1270132).
- CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs" (bsc#1270230).
- CVE-2026-53355: net: rds: clear i_sends on setup unwind (bsc#1270249).
- CVE-2026-53369: udf: reject descriptors with oversized CRC length (bsc#1271818).
- CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
- CVE-2026-53392: NFSv4/flexfiles: reject zero filehandle version count (bsc#1271826).
- CVE-2026-53393: nfsd: Don't reset the write verifier on a commit EAGAIN (bsc#1271858).
- CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure (bsc#1271869).
- CVE-2026-53398: NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1271870).
- CVE-2026-53399: nfsd: release layout stid on setlease failure (bsc#1271832).
- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).
- CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
- CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
- CVE-2026-63809: bpf: NUL-terminate replaced sysctl value (bsc#1272296).
- CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
- CVE-2026-63901: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501).
- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).
- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
- CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
- CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).
- CVE-2026-63962: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (bsc#1272482).
- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).
- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
- CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
- CVE-2026-64025: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).
- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
- CVE-2026-64187: xfs: fail recovery on a committed log item with no regions (bsc#1272204).
- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
- CVE-2026-64298: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (bsc#1273550).
- CVE-2026-64560: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1271912 bsc#1273004).
- CVE-2026-64561: kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (bsc#1273231).
- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).
- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).
The following non security issues were fixed:
- accel/qaic: use sizeof(*trans_hdr) for transaction length check (git-fixes).
- ALSA: hda: codecs: hdmi: disable keep-alive before audio format change (git-fixes).
- ALSA: hda: conexant: Remove mic bias threshold override (git-fixes).
- ALSA: hda: cs35l41: validate and free ACPI mute object (git-fixes).
- ALSA: hda: Fix cached processing coefficient verbs (git-fixes).
- ALSA: lx6464es: fix period byte count for 16-bit streams (git-fixes).
- ALSA: pcm: wake linked drain waiters on unlink (git-fixes).
- ALSA: seq: close a re-opened queue timer in the destructor (git-fixes).
- ALSA: ump: fix double free of out_cvts on rawmidi error (git-fixes).
- ALSA: usb-audio: Clamp frame size in implicit-feedback mode (git-fixes).
- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (git-fixes).
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (git-fixes).
- ALSA: usb-audio: fix use-after-free in ump_to_endpoint() (git-fixes).
- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC (git-fixes).
- ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() (git-fixes).
- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI (git-fixes).
- ASoC: cs35l56: Fix potential probe() deadlock (git-fixes).
- ASoC: cs35l56: Use complete_all() to signal init_completion (git-fixes).
- ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).
- ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).
- ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable() (stable-fixes).
- ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe() (stable-fixes).
- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop (git-fixes).
- ASoC: tas2562: fix broken entries in the volume lookup table (git-fixes).
- ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup (git-fixes).
- ASoC: tas2562: fix DVC coefficient write order (git-fixes).
- ASoC: tas2781: bound firmware description string parsing (git-fixes).
- assoc_array: trim the final shortcut word using the current chunk end (git-fixes).
- batman-adv: dat: fix tie-break for candidate selection (git-fixes).
- batman-adv: fix VLAN priority offset (git-fixes).
- batman-adv: frag: fix primary_if leak on failed linearization (git-fixes).
- batman-adv: frag: free unfragmentable packet (git-fixes).
- batman-adv: tt: avoid request storms during pending request (git-fixes).
- batman-adv: tt: prevent TVLV OOB check overflow (git-fixes).
- bitops: make BYTES_TO_BITS() treewide-available (stable-fixes).
- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (stable-fixes).
- Bluetooth: btintel: Validate length before parsing diagnostics TLV (git-fixes).
- Bluetooth: btrtl: validate firmware patch bounds (git-fixes).
- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB (stable-fixes).
- Bluetooth: btusb: mediatek: remove the unnecessary goto tag (stable-fixes).
- Bluetooth: btusb: validate Realtek vendor event length (git-fixes).
- Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks (git-fixes).
- Bluetooth: hci_sync: Protect UUID list traversal (git-fixes).
- Bluetooth: HIDP: reject frames without a transaction header (git-fixes).
- Bluetooth: HIDP: validate numbered report payloads (git-fixes).
- Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos (git-fixes).
- Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (git-fixes).
- Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync (git-fixes).
- Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (git-fixes).
- Bluetooth: mgmt: Translate HCI reason in Device Disconnected event (git-fixes).
- Bluetooth: qca: fix NVM tag length underflow in TLV parser (git-fixes).
- Bluetooth: RFCOMM: Fix session UAF in set_termios (git-fixes).
- bus: sunxi-rsb: Always check register address validity (git-fixes).
- can: bcm: add missing rcu list annotations and operations (git-fixes).
- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (git-fixes).
- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure (git-fixes).
- can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured (git-fixes).
- can: ctucanfd: add missing MODULE_DEVICE_TABLE() (git-fixes).
- can: ctucanfd: handle bus error interrupts (git-fixes).
- can: ctucanfd: mark error-active controller status valid (git-fixes).
- can: ctucanfd: unmap BAR0 using base address (git-fixes).
- can: ctucanfd: use self-test mode for PRESUME_ACK (git-fixes).
- can: ems_usb: validate CPC message lengths (git-fixes).
- can: esd_usb: kill anchored URBs before freeing netdevs (git-fixes).
- can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure (git-fixes).
- can: isotp: check register_netdevice_notifier() error in module init (git-fixes).
- can: isotp: use unconditional synchronize_rcu() in isotp_release() (git-fixes).
- can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer (git-fixes).
- can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() (git-fixes).
- can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents (git-fixes).
- can: peak_usb: add bounds check for USB channel index (git-fixes).
- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error (git-fixes).
- can: peak_usb: validate uCAN receive record lengths (git-fixes).
- can: softing: fw_parse(): validate firmware record spans (git-fixes).
- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (git-fixes).
- comedi: comedi_parport: deal with premature interrupt (git-fixes).
- dm cache policy smq: check allocation under invalidate lock (git-fixes).
- dm cache: fix missing return in invalidate_committed's error path (git-fixes).
- dmaengine: idxd: fix double free of wq, engine, and group structs (git-fixes).
- dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (git-fixes).
- dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ (git-fixes).
- dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA (git-fixes).
- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() (git-fixes).
- driver core: Guard deferred probe timeout extension with delayed_work_pending() (git-fixes).
- driver core: Use mod_delayed_work to prevent lost deferred probe work (git-fixes).
- Drivers: hv: vmbus: Set DMA coherent mask for VMBus devices (git-fixes).
- drm/amd/display: set new_stream to NULL after release (git-fixes).
- drm/amd/display: use proper context for logging (git-fixes).
- drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) (git-fixes).
- drm/amd/pm: make pp_features read-only when scpm is enabled (stable-fixes).
- drm/amdgpu/gfx8: drop unecessary BUG_ON() (stable-fixes).
- drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() (stable-fixes).
- drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (stable-fixes).
- drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() (stable-fixes).
- drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() (stable-fixes).
- drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() (stable-fixes).
- drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() (stable-fixes).
- drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() (stable-fixes).
- drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() (stable-fixes).
- drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2) (stable-fixes).
- drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older (stable-fixes).
- drm/amdgpu/vce: fix integer overflow in image size (stable-fixes).
- drm/amdgpu/vcn4: avoid rereading IB param length (stable-fixes).
- drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved (stable-fixes).
- drm/amdgpu: fix division by zero with invalid uvd dimensions (stable-fixes).
- drm/amdgpu: Fix VFCT bus number matching with soft filter (stable-fixes).
- drm/amdgpu: invoke pm_genpd_remove() before freeing genpd (stable-fixes).
- drm/amdkfd: Check bounds in allocate_event_notification_slot (stable-fixes).
- drm/amdkfd: free MQD managers on DQM init failures (git-fixes).
- drm/amdkfd: hold event_mutex while checkpointing CRIU events (git-fixes).
- drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs (git-fixes).
- drm/i915/gt: use correct selftest config symbol (git-fixes).
- drm/i915/selftests: Fix GT PM sort comparators (git-fixes).
- drm/mediatek: ovl_adaptor: balance component registrations (git-fixes).
- drm/radeon: fix r100_copy_blit for large BOs (stable-fixes).
- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove (git-fixes).
- drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered (stable-fixes).
- drm/vc4: hvs/v3d: Fix null dereference in unbind (git-fixes).
- drm/vc4: Prevent shader BO mappings from becoming writable (git-fixes).
- drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size (git-fixes).
- drm/vc4: Zero the tile state data array before each BIN job (git-fixes).
- drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker (git-fixes).
- drm/vmwgfx: bound DMA command body size against suffix pointer (git-fixes).
- drm/vmwgfx: drop dma_buf reference on foreign-fd prime import (git-fixes).
- drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size (git-fixes).
- drm/vmwgfx: reject DX_BIND_QUERY without a DX context (git-fixes).
- drm/vmwgfx: use check_add_overflow for shader size+offset bound (git-fixes).
- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (git-fixes).
- drm/vmwgfx: validate external BO copy bounds for both stride paths (git-fixes).
- drm/vmwgfx: Validate vmw_surface_metadata::array_size (git-fixes).
- fbcon: fix NULL pointer dereference for a console without vc_data (stable-fixes).
- fbdev/efifb: Replace references to global screen_info by local pointer (stable-fixes).
- fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() (git-fixes).
- fbdev: efifb: fix memory leak in efifb_probe() (git-fixes).
- firewire: net: Fix fragmented datagram reassembly (git-fixes).
- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (git-fixes).
- firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context (git-fixes).
- firmware_loader: introduce __free() cleanup hanler (stable-fixes).
- gpio: eic-sprd: use raw_spinlock_t in the irq startup path (git-fixes).
- gpio: mlxbf3: fail probe if gpiochip registration fails (git-fixes).
- gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (git-fixes).
- gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path (git-fixes).
- gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings (stable-fixes).
- HID: add haptics page defines (stable-fixes).
- HID: Intel-ish-hid: Ishtp: Fix sensor reads after ACPI S3 suspend (bsc#1266468).
- HID: playstation: validate num_touch_reports in DualShock 4 reports (stable-fixes).
- hrtimers: Introduce hrtimer_setup() to replace hrtimer_init() (bsc#1271912).
- hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (git-fixes).
- hwmon: (adt7470) Fix cache updated before hardware write on I2C error (git-fixes).
- hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read (git-fixes).
- hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors (git-fixes).
- hwmon: (adt7470) Fix PWM auto temp state array and bounds check (git-fixes).
- hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks (git-fixes).
- hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() (git-fixes).
- hwmon: (adt7470) Use cached PWM frequency value (git-fixes).
- hwmon: (asus-ec-sensors) add missed handle for ENOMEM (git-fixes).
- hwmon: (asus-ec-sensors) fix EC read intervals (git-fixes).
- hwmon: (asus-ec-sensors) fix looping over banks while reading from EC (git-fixes).
- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop (git-fixes).
- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop (git-fixes).
- hwmon: (lm90) Only report alarms if driver is ready (git-fixes).
- hwmon: (nct6775-core) Prevent access to unsupported weight registers (git-fixes).
- hwmon: (npcm750-pwm-fan): stop fan timer on device detach (git-fixes).
- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop (git-fixes).
- hwmon: (pmbus) Fix return value from pmbus_update_byte_data() (git-fixes).
- hwmon: (pmbus/core) notify on the hwmon device, not the i2c client (git-fixes).
- hwmon: (w83627hf) remove VID sysfs files on error and remove (stable-fixes).
- hwmon: (w83793) remove vrm sysfs file on probe failure (stable-fixes).
- hwmon: occ: validate poll response sensor blocks (git-fixes).
- i2c: amd-mp2: Unregister callback on adapter add failure (git-fixes).
- i2c: imx: Cancel hrtimer before clearing slave pointer (git-fixes).
- i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (git-fixes).
- i2c: imx: Fix slave registration race and error handling (git-fixes).
- i2c: imx: separate atomic, dma and non-dma use case (stable-fixes).
- i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock (git-fixes).
- i2c: mediatek: fix WRRD for SoCs without auto_restart option (git-fixes).
- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() (git-fixes).
- i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue (git-fixes).
- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring (git-fixes).
- ice: don't check has_ready_bitmap in E810 functions (bsc#1269981).
- ice: factor out ice_ptp_rebuild_owner() (bsc#1269981).
- ice: fix PTP Call Trace during PTP release (bsc#1269981).
- ice: Fix PTP NULL pointer dereference during VSI rebuild (bsc#1269981).
- ice: introduce PTP state machine (bsc#1269981).
- ice: pass reset type to PTP reset functions (bsc#1269981).
- ice: rename ice_ptp_tx_cfg_intr (bsc#1269981).
- ice: rename verify_cached to has_ready_bitmap (bsc#1269981).
- ice: stop destroying and reinitalizing Tx tracker during reset (bsc#1269981).
- ieee802154: admin-gate legacy LLSEC dump operations (git-fixes).
- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation (git-fixes).
- ieee802154: ca8210: fix cas_ctl leak on spi_async failure (git-fixes).
- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit (git-fixes).
- ieee802154: fix kernel-infoleak in dgram_recvmsg() (git-fixes).
- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() (git-fixes).
- iio: common: st_sensors: honour channel endianness in read_axis_data (git-fixes).
- Input: atkbd - validate scancode in firmware keymap entries (git-fixes).
- Input: elan_i2c - prevent division by zero and arithmetic underflow (git-fixes).
- Input: goodix - clamp the device-reported contact count (git-fixes).
- Input: iforce - bound the device-reported force-feedback effect index (git-fixes).
- Input: ims-pcu - add response length checks (git-fixes).
- Input: ims-pcu - fix DMA mapping violation in line setup (git-fixes).
- Input: ims-pcu - fix firmware leak in async update (git-fixes).
- Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() (git-fixes).
- Input: ims-pcu - fix logic error in packet reset (git-fixes).
- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging (git-fixes).
- Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing (git-fixes).
- Input: ims-pcu - fix race condition in reset_device sysfs callback (git-fixes).
- Input: ims-pcu - fix type confusion in CDC union descriptor parsing (git-fixes).
- Input: ims-pcu - fix use-after-free and double-free in disconnect (git-fixes).
- Input: ims-pcu - release data interface on disconnect (git-fixes).
- Input: ims-pcu - validate control endpoint type (git-fixes).
- Input: maple_keyb - set driver data before registering input device (stable-fixes).
- Input: maplecontrol - set driver data before registering input device (stable-fixes).
- Input: maplemouse - set driver data before registering input device (stable-fixes).
- Input: rmi4 - fix bit count in bitmap_copy() (git-fixes).
- Input: rmi4 - fix limit in rmi_register_desc_has_subpacket() (git-fixes).
- Input: rmi4 - fix memory leak in rmi_set_attn_data() (git-fixes).
- Input: rmi4 - fix num_subpackets overflow in register descriptor (git-fixes).
- Input: rmi4 - fix register descriptor address calculation (git-fixes).
- Input: rmi4 - fix type overflow in register counts (git-fixes).
- Input: rmi4 - initialize attn_fifo properly (stable-fixes).
- Input: rmi4 - iterative IRQ handler (git-fixes).
- Input: rmi4 - refactor F12 probe function (stable-fixes).
- Input: rmi4 - refactor register descriptor parsing (git-fixes).
- Input: rmi4 - tolerate short register descriptor structure (git-fixes).
- Input: rmi4 - use local presence map in rmi_read_register_desc() (stable-fixes).
- Input: serio - define serio_pause_rx guard to pause and resume serio ports (stable-fixes).
- Input: synaptics-rmi4 - add support for querying DPM value (F12) (stable-fixes).
- Input: synaptics-rmi4 - fix crash when DPM query is not supported (git-fixes).
- Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure (git-fixes).
- Input: touchwin - reset the packet index on every complete packet (git-fixes).
- intel_th: fix MSC output device reference leak (git-fixes).
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (git-fixes).
- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (git-fixes).
- KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (git-fixes).
- KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN (git-fixes).
- KVM: x86/mmu: Fix use-after-free on vendor module reload (git-fixes).
- KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots (git-fixes).
- KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls (git-fixes).
- KVM: x86: Fix SRCU list traversal in kvm_fire_mask_notifiers() (git-fixes).
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (git-fixes).
- KVM: x86: hyper-v: Bound the bank index when querying sparse banks (git-fixes).
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (git-fixes).
- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (git-fixes).
- mac802154: hold an interface reference across the scan worker (git-fixes).
- mac802154: llsec: reject frames shorter than the authentication tag (git-fixes).
- media: airspy: Return queued buffers on start_streaming() failure (git-fixes).
- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() (git-fixes).
- media: cedrus: clean up media device on probe failure (git-fixes).
- media: cx231xx: fix devres lifetime (git-fixes).
- media: cx23885: add ioremap return check and cleanup (git-fixes).
- media: meson: vdec: Fix memory leak in error path of vdec_open (git-fixes).
- media: msi2500: Return queued buffers on start_streaming() failure (git-fixes).
- media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe (git-fixes).
- media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure (git-fixes).
- media: nxp: imx8-isi: Convert to platform remove callback returning void (stable-fixes).
- media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path (git-fixes).
- media: nxp: imx8-isi: Fix potential out-of-bounds issues (git-fixes).
- media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding (git-fixes).
- media: nxp: imx8-isi: Fix use-after-free on remove (git-fixes).
- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code (stable-fixes).
- media: pwc: Drain fill_buf on start_streaming() failure (git-fixes).
- media: pwc: Return queued buffers on start_streaming() failure (git-fixes).
- media: qcom: venus: drop extra padding in NV12 raw size calculation (git-fixes).
- media: qcom: venus: relax encoder frame/blur dimension steps on v4 (git-fixes).
- media: qcom: venus: relax encoder frame/blur step size on v6 (git-fixes).
- media: radio-si476x: Unregister v4l2_device on probe failure (git-fixes).
- media: rockchip: rga: fix too small buffer size (git-fixes).
- media: rtl2832: fix use-after-free in rtl2832_remove() (git-fixes).
- media: rtl2832_sdr: Return queued buffers on start_streaming() failure (git-fixes).
- media: saa7134: Fix a possible memory leak in saa7134_video_init1 (git-fixes).
- media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe (git-fixes).
- media: stm32: dcmi: unregister notifier on probe failure (git-fixes).
- media: sun4i-csi: Return queued buffers on start_streaming() failure (git-fixes).
- media: tegra-video: vi: fix invalid u32 return value in format lookup (git-fixes).
- media: uvcvideo: Avoid partial metadata buffers (git-fixes).
- media: uvcvideo: Fix buffer sequence in frame gaps (git-fixes).
- media: uvcvideo: Fix sequence number when no EOF (git-fixes).
- media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() (git-fixes).
- media: vivid: add vivid_update_reduced_fps() (git-fixes).
- media: vivid: check for vb2_is_busy() when toggling caps (git-fixes).
- mei: bus: access mei_device under device_lock on cleanup (git-fixes).
- memstick: ms_block: reject a card that reports too many blocks (git-fixes).
- mfd: cros_ec: Delay dev_set_drvdata() until probe success (git-fixes).
- mfd: sm501: Fix reference leak on failed device registration (git-fixes).
- mfd: tps6586x: Fix OF node refcount (git-fixes).
- mkspec-dtb: Skip missing DTBs.
- mm: convert pagecache_isize_extended to use a folio (bsc#1272920).
- mm: zero range of eof folio exposed by inode size extension (bsc#1272920).
- mmc: vub300: defer reset until cmd_mutex is unlocked (git-fixes).
- mtd: mchp23k256: use SPI match data for chip caps (git-fixes).
- mtd: mtdswap: remove debugfs stats file on teardown (git-fixes).
- mtd: nand: mtk-ecc: stop on ECC idle timeouts (git-fixes).
- mtd: onenand: samsung: report DMA completion timeouts (git-fixes).
- mtd: rawnand: Add a helper for calculating a page index (stable-fixes).
- mtd: rawnand: Ensure all continuous terms are always in sync (git-fixes).
- mtd: rawnand: fsl_ifc: return errors for failed page reads (git-fixes).
- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout (git-fixes).
- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout (git-fixes).
- mtd: rawnand: Pause continuous reads at block boundaries (git-fixes).
- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (bsc#1271866).
- net/x25: fix use-after-free in x25_kill_by_neigh() (git-fixes).
- net: mana: Add Interrupt Moderation support (bsc#1271368).
- net: mana: Return error code from mana_create_rxq() (git-fixes).
- net: thunderbolt: Fix frags overflow by bounding frame_count (git-fixes).
- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() (git-fixes).
- net: usb: lan78xx: move functions to avoid forward definitions (stable-fixes).
- net: wwan: t7xx: check skb_clone in control TX (git-fixes).
- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure (git-fixes).
- phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask (git-fixes).
- phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB (git-fixes).
- phy: zynqmp: use read-modify-write for SERDES scrambler bypass (git-fixes).
- pinctrl-amd: Don't clear S4 wake bits at probe (git-fixes).
- pinctrl: bm1880: add missing select GENERIC_PINCONF (git-fixes).
- pinctrl: devicetree: don't free uninitialized dev_name on error path (git-fixes).
- pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 (git-fixes).
- pkspec-dtb: Fix dtb-al rename.
- platform/x86/amd/pmc: Add delay_suspend module parameter (stable-fixes).
- platform/x86/amd/pmc: Avoid logging "(null)" for DMI values (git-fixes).
- platform/x86/amd/pmc: Check for intermediate wakeup in function (stable-fixes).
- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops (stable-fixes).
- platform/x86/amd/pmc: Don't log during intermediate wakeups (stable-fixes).
- platform/x86: dell-smbios: Move request functions for reuse (stable-fixes).
- posix-cpu-timers: Cleanup the firing logic (bsc#1271912).
- posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del() (bsc#1271912).
- posix-cpu-timers: Do not arm SIGEV_NONE timers (bsc#1271912).
- posix-cpu-timers: Handle interval timers correctly in timer_get() (bsc#1271912).
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (bsc#1271912).
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (bsc#1271912).
- posix-cpu-timers: Make k_itimer::it_active consistent (bsc#1271912).
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (bsc#1271912).
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (bsc#1271912).
- posix-cpu-timers: Simplify posix_cpu_timer_set() (bsc#1271912).
- posix-cpu-timers: Split up posix_cpu_timer_get() (bsc#1271912).
- posix-cpu-timers: Use @now instead of @val for clarity (bsc#1271912).
- posix-timers: Add proper state tracking (bsc#1271912).
- posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).
- posix-timers: Clarify posix_timer_fn() comments (bsc#1271912).
- posix-timers: Clear overrun in common_timer_set() (bsc#1271912).
- posix-timers: Consolidate signal queueing (bsc#1271912).
- posix-timers: Consolidate timer setup (bsc#1271912).
- posix-timers: Cure si_sys_private race (bsc#1271912).
- posix-timers: Document common_clock_get() correctly (bsc#1271912).
- posix-timers: Expand timer_arm() callbacks with a boolean return value (bsc#1271912).
- posix-timers: Polish coding style in a few places (bsc#1271912).
- posix-timers: Retrieve interval in common timer_settime() code (bsc#1271912).
- power: supply: bq25890: fix the -10 C NTC lookup entry (git-fixes).
- RDMA/mana_ib: initialize err for empty send WR lists (git-fixes).
- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets (git-fixes).
- remoteproc: qcom: Fix leak when custom dump_segments addition fails (git-fixes).
- reset: sunxi: fix memory region leak on ioremap failure (git-fixes).
- Revert "Input: rmi4 - fix register descriptor address calculation" (stable-fixes).
- sched/psi: Create the psimon kthread outside of cgroup_mutex (bsc#1269134).
- sctp: validate embedded address parameter length (git-fixes).
- selftests/alsa: Fix memory leak in find_controls error path (git-fixes).
- serial: 8250_mid: Disable DMA for selected platforms (git-fixes).
- serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms (git-fixes).
- serial: 8250_mid: Remove 8250_pci usage (stable-fixes).
- serial: sc16is7xx: implement gpio get_direction() callback (git-fixes).
- slimbus: Convert to platform remove callback returning void (stable-fixes).
- slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock (git-fixes).
- slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD (git-fixes).
- slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership (git-fixes).
- slimbus: qcom-ngd-ctrl: Fix probe error path ordering (git-fixes).
- slimbus: qcom-ngd-ctrl: Fix up platform_driver registration (git-fixes).
- slimbus: qcom-ngd-ctrl: Initialize controller resources in controller (git-fixes).
- slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd (git-fixes).
- staging: media: atomisp: reduce load_primary_binaries() stack usage (git-fixes).
- staging: rtl8723bs: core: move constants to right side in comparison (stable-fixes).
- staging: rtl8723bs: fix inverted HT40 secondary channel offset (git-fixes).
- time: Switch to hrtimer_setup() (bsc#1271912).
- usb: cdc_acm: Add quirk for Uniden BC125AT scanner (stable-fixes).
- usb: chipidea: fix usage_count leak when autosuspend_delay is negative (git-fixes).
- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub (stable-fixes).
- usb: core: port: Deattach Type-C connector on component unbind (git-fixes).
- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback (git-fixes).
- usb: gadget: f_midi: cancel pending IN work before freeing the midi object (git-fixes).
- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() (git-fixes).
- USB: gadget: fsl-udc: fix device name leak on probe failure (git-fixes).
- usb: gadget: function: rndis: add length check for header (stable-fixes).
- usb: gadget: function: rndis: add length check to response query (stable-fixes).
- usb: gadget: printer: fix infinite loop in printer_read() (git-fixes).
- USB: gadget: snps-udc: fix device name leak on probe failure (git-fixes).
- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown (git-fixes).
- usb: gadget: udc: Fix use-after-free in gadget_match_driver (stable-fixes).
- usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer (git-fixes).
- USB: iowarrior: fix use-after-free on disconnect race (git-fixes).
- usb: iowarrior: remove inherent race with minor number (stable-fixes).
- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD (stable-fixes).
- USB: serial: io_edgeport: cap received transmit credits (git-fixes).
- USB: serial: io_ti: reject oversized boot-mode firmware (git-fixes).
- USB: serial: keyspan_pda: fix data loss on receive throttling (git-fixes).
- USB: serial: mxuport: validate firmware header size (git-fixes).
- USB: serial: option: add Telit Cinterion FE990D50 compositions (stable-fixes).
- wan: wanxl: Only reset hardware after BAR mapping (git-fixes).
- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (git-fixes).
- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() (git-fixes).
- wifi: ath6kl: fix OOB access from firmware ADDBA window size (git-fixes).
- wifi: ath6kl: fix OOB read from firmware IE lengths in connect event (git-fixes).
- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler (git-fixes).
- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (git-fixes).
- wifi: ath10k: fix skb leak on incomplete msdu during rx pop (git-fixes).
- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin (git-fixes).
- wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() (git-fixes).
- wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).
- wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).
- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning (git-fixes).
- wifi: brcmfmac: initialize SDIO data work before cleanup (git-fixes).
- wifi: brcmfmac: make release_scratchbuffers idempotent (git-fixes).
- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (git-fixes).
- wifi: carl9170: fix buffer overflow in rx_stream failover path (git-fixes).
- wifi: carl9170: fix OOB read from off-by-two in TX status handler (git-fixes).
- wifi: cfg80211: bound element ID read when checking non-inheritance (git-fixes).
- wifi: cfg80211: cancel sched scan results work on unregister (git-fixes).
- wifi: cfg80211: reject unsupported PMSR FTM location requests (git-fixes).
- wifi: cfg80211: validate PMSR FTM preamble range (git-fixes).
- wifi: cfg80211: validate PMSR measurement type data (git-fixes).
- wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() (git-fixes).
- wifi: iwlwifi: mvm: fix flushing during quiet CSA (bsc#1272600).
- wifi: iwlwifi: mvm: fix read in wake packet notification handler (git-fixes).
- wifi: iwlwifi: mvm: validate SAR GEO response payload size (git-fixes).
- wifi: libertas: fix memory leak in helper_firmware_cb() (git-fixes).
- wifi: mac80211: fix memory leak in ieee80211_register_hw() (git-fixes).
- wifi: mac80211: free ack status frame on TX header build failure (git-fixes).
- wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock (git-fixes).
- wifi: mac80211: recalculate TIM when a station enters power save (git-fixes).
- wifi: mac80211: tear down new links on vif update error path (git-fixes).
- wifi: mac80211: validate individual TWT params before driver setup (git-fixes).
- wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() (git-fixes).
- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses (git-fixes).
- wifi: mt76: mt7915: guard HE capability lookups (git-fixes).
- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses (git-fixes).
- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (git-fixes).
- wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() (git-fixes).
- wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() (git-fixes).
- wifi: mwifiex: bound uAP association event IEs to the event buffer (git-fixes).
- wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (git-fixes).
- wifi: mwifiex: fix permanently busy scans after multiple roam iterations (git-fixes).
- wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (git-fixes).
- wifi: nl80211: free RNR data on MBSSID mismatch (git-fixes).
- wifi: nl80211: validate nested MBSSID IE blobs (git-fixes).
- wifi: p54: validate RX frame length in p54_rx_eeprom_readback() (git-fixes).
- wifi: rt2x00: avoid full teardown before work setup in probe (git-fixes).
- wifi: wilc1000: validate assoc response length before subtracting header (git-fixes).
Patchnames: SUSE-SLE-Micro-6.0-kernel-572
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
critical
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
critical
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
4.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
critical
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.3 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
4.9 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.2 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
8.6 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
8.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.3 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.2 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.3 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.2 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.2 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
8.7 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
4.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
4.1 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
5.7 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
4.6 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
References
2702 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).\n- CVE-2025-68818: scsi: Revert \"scsi: qla2xxx: Perform lockless command completion in abort path\" (bsc#1256675).\n- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).\n- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk-\u003esk_socket in sk_psock_verdict_data_ready() (bsc#1264007).\n- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don\u0027t return non-matching entry on expiry (bsc#1264601).\n- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).\n- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).\n- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).\n- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).\n- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).\n- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).\n- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).\n- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).\n- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).\n- CVE-2026-43266: EFI/CPER: don\u0027t go past the ARM processor CPER record buffer (bsc#1264418).\n- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).\n- CVE-2026-43308: btrfs: don\u0027t BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).\n- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).\n- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov-\u003einit() fails (bsc#1264832).\n- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).\n- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).\n- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).\n- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).\n- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).\n- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).\n- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).\n- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).\n- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).\n- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).\n- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).\n- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).\n- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).\n- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).\n- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).\n- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).\n- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).\n- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).\n- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).\n- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).\n- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).\n- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).\n- CVE-2026-46040: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (bsc#1267472).\n- CVE-2026-46064: ibmasm: fix heap over-read in ibmasm_send_i2o_message() (bsc#1267497).\n- CVE-2026-46068: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).\n- CVE-2026-46086: net: bridge: use a stable FDB dst snapshot in RCU readers (bsc#1267524).\n- CVE-2026-46089: zram: do not forget to endio for partial discard requests (bsc#1267445).\n- CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (bsc#1267502).\n- CVE-2026-46132: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (bsc#1267616).\n- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).\n- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).\n- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).\n- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).\n- CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).\n- CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).\n- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).\n- CVE-2026-46191: fbcon: Avoid OOB font access if console rotation fails (bsc#1267690).\n- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).\n- CVE-2026-46207: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691).\n- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).\n- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678).\n- CVE-2026-46249: octeontx2-af: Fix PF driver crash with kexec kernel booting (bsc#1267683).\n- CVE-2026-46265: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662).\n- CVE-2026-46292: pmdomain: core: Fix detach procedure for virtual devices in genpd (bsc#1267943).\n- CVE-2026-46294: dm: fix a buffer overflow in ioctl processing (bsc#1267939).\n- CVE-2026-46306: flow_dissector: do not dissect PPPoE PFC frames (bsc#1267986).\n- CVE-2026-46321: tun: free page on short-frame rejection in tun_xdp_one() (bsc#1268024).\n- CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).\n- CVE-2026-52910: pf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).\n- CVE-2026-52915: netfilter: ip6t_hbh: reject oversized option lists (bsc#1269001).\n- CVE-2026-52921: netfilter: ipset: stop hash:* range iteration at end (bsc#1269024).\n- CVE-2026-52927: netfilter: ebtables: fix OOB read in compat_mtw_from_user (bsc#1269027).\n- CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates (bsc#1269003).\n- CVE-2026-52937: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR (bsc#1268983).\n- CVE-2026-52941: net/smc: avoid NULL deref of conn-\u003elnk in smc_msg_event tracepoint (bsc#1268966).\n- CVE-2026-52942: netfilter: nf_log: validate MAC header was set before dumping it (bsc#1268967).\n- CVE-2026-52947: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (bsc#1269115).\n- CVE-2026-52953: iommu/vt-d: Fix oops due to out of scope access (bsc#1269133).\n- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).\n- CVE-2026-52970: netfilter: nft_ct: fix missing expect put in obj eval (bsc#1269229).\n- CVE-2026-52974: net: tls: fix strparser anchor skb leak on offload RX setup failure (bsc#1269233).\n- CVE-2026-52981: neigh: let neigh_xmit take skb ownership (bsc#1269254).\n- CVE-2026-52984: net/sched: netem: fix queue limit check to include reordered packets (bsc#1269272).\n- CVE-2026-52986: netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul (bsc#1269289).\n- CVE-2026-52988: rculist: add list_splice_rcu() for private lists (bsc#1269362).\n- CVE-2026-52991: sched/psi: fix race between file release and pressure write (bsc#1269134).\n- CVE-2026-52995: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).\n- CVE-2026-52998: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (bsc#1269118).\n- CVE-2026-52999: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (bsc#1269119).\n- CVE-2026-53000: netfilter: nat: use kfree_rcu to release ops (bsc#1269117).\n- CVE-2026-53002: netfilter: conntrack: remove sprintf usage (bsc#1269112).\n- CVE-2026-53003: pppoe: drop PFC frames (bsc#1269111).\n- CVE-2026-53004: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (bsc#1269106).\n- CVE-2026-53006: ipv6: fix possible UAF in icmpv6_rcv() (bsc#1269104).\n- CVE-2026-53009: ice: fix double-free of tx_buf skb (bsc#1269098).\n- CVE-2026-53011: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (bsc#1269094).\n- CVE-2026-53012: nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1269154).\n- CVE-2026-53013: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF (bsc#1269095).\n- CVE-2026-53032: bpf: Fix NULL deref in map_kptr_match_type for scalar regs (bsc#1269138).\n- CVE-2026-53062: dm cache policy smq: fix missing locks in invalidating cache blocks (bsc#1269658).\n- CVE-2026-53063: dm cache: fix write hang in passthrough mode (bsc#1269659).\n- CVE-2026-53064: dm cache: fix null-deref with concurrent writes in passthrough mode (bsc#1269132).\n- CVE-2026-53069: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).\n- CVE-2026-53074: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (bsc#1269688).\n- CVE-2026-53083: bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1269964).\n- CVE-2026-53088: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (bsc#1269185).\n- CVE-2026-53106: bpf: Do not allow deleting local storage in NMI (bsc#1269990).\n- CVE-2026-53107: wifi: libertas: use USB anchors for tracking in-flight URBs (bsc#1269991).\n- CVE-2026-53123: md: wake raid456 reshape waiters before suspend (bsc#1269643).\n- CVE-2026-53129: fs/mbcache: cancel shrink work before destroying the cache (bsc#1269633).\n- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).\n- CVE-2026-53132: vsock/virtio: fix potential unbounded skb queue (bsc#1269290).\n- CVE-2026-53134: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).\n- CVE-2026-53175: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714).\n- CVE-2026-53183: mptcp: allow subflow rcv wnd to shrink (bsc#1269376).\n- CVE-2026-53184: udp: clear skb-\u003edev before running a sockmap verdict (bsc#1269689).\n- CVE-2026-53185: zram: fix use-after-free in zram_bvec_write_partial() (bsc#1269660).\n- CVE-2026-53186: RDMA/srp: bound SRP_RSP sense copy by the received length (bsc#1269663).\n- CVE-2026-53189: mm/huge_memory: update file PMD counter before folio_put() (bsc#1269797).\n- CVE-2026-53212: netfilter: nft_tunnel: fix use-after-free on object destroy (bsc#1269672).\n- CVE-2026-53218: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (bsc#1269273).\n- CVE-2026-53221: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (bsc#1269318).\n- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).\n- CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (bsc#1269711).\n- CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (bsc#1269877).\n- CVE-2026-53230: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (bsc#1269270).\n- CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1269994).\n- CVE-2026-53239: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (bsc#1269677).\n- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).\n- CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).\n- CVE-2026-53252: adaption to srcu change of hci_dev in hci_sysfs (bsc#1269307).\n- CVE-2026-53262: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() (bsc#1270000).\n- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).\n- CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (bsc#1269257).\n- CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (bsc#1269240).\n- CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (bsc#1269810).\n- CVE-2026-53289: ice: fix NULL pointer dereference in ice_reset_all_vfs() (bsc#1269694).\n- CVE-2026-53291: ALSA: hda/conexant: Fix missing error check for jack detection (bsc#1269697).\n- CVE-2026-53345: KVM: Don\u0027t WARN if memory is dirtied without a vCPU when the VM is dying (bsc#1270132).\n- CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs\" (bsc#1270230).\n- CVE-2026-53355: net: rds: clear i_sends on setup unwind (bsc#1270249).\n- CVE-2026-53369: udf: reject descriptors with oversized CRC length (bsc#1271818).\n- CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).\n- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).\n- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).\n- CVE-2026-53392: NFSv4/flexfiles: reject zero filehandle version count (bsc#1271826).\n- CVE-2026-53393: nfsd: Don\u0027t reset the write verifier on a commit EAGAIN (bsc#1271858).\n- CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure (bsc#1271869).\n- CVE-2026-53398: NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1271870).\n- CVE-2026-53399: nfsd: release layout stid on setlease failure (bsc#1271832).\n- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).\n- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).\n- CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).\n- CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).\n- CVE-2026-63809: bpf: NUL-terminate replaced sysctl value (bsc#1272296).\n- CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).\n- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).\n- CVE-2026-63901: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501).\n- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).\n- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).\n- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).\n- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).\n- CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).\n- CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).\n- CVE-2026-63962: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (bsc#1272482).\n- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).\n- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).\n- CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).\n- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).\n- CVE-2026-64025: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).\n- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).\n- CVE-2026-64187: xfs: fail recovery on a committed log item with no regions (bsc#1272204).\n- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).\n- CVE-2026-64298: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (bsc#1273550).\n- CVE-2026-64560: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1271912 bsc#1273004).\n- CVE-2026-64561: kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (bsc#1273231).\n- CVE-2026-64564: sctp: don\u0027t free the ASCONF\u0027s own transport in DEL-IP processing (bsc#1274072).\n- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).\n\nThe following non security issues were fixed:\n\n- accel/qaic: use sizeof(*trans_hdr) for transaction length check (git-fixes).\n- ALSA: hda: codecs: hdmi: disable keep-alive before audio format change (git-fixes).\n- ALSA: hda: conexant: Remove mic bias threshold override (git-fixes).\n- ALSA: hda: cs35l41: validate and free ACPI mute object (git-fixes).\n- ALSA: hda: Fix cached processing coefficient verbs (git-fixes).\n- ALSA: lx6464es: fix period byte count for 16-bit streams (git-fixes).\n- ALSA: pcm: wake linked drain waiters on unlink (git-fixes).\n- ALSA: seq: close a re-opened queue timer in the destructor (git-fixes).\n- ALSA: ump: fix double free of out_cvts on rawmidi error (git-fixes).\n- ALSA: usb-audio: Clamp frame size in implicit-feedback mode (git-fixes).\n- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (git-fixes).\n- ALSA: usb-audio: fix use-after-free in ump_to_endpoint() (git-fixes).\n- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC (git-fixes).\n- ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() (git-fixes).\n- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI (git-fixes).\n- ASoC: cs35l56: Fix potential probe() deadlock (git-fixes).\n- ASoC: cs35l56: Use complete_all() to signal init_completion (git-fixes).\n- ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable() (stable-fixes).\n- ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe() (stable-fixes).\n- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop (git-fixes).\n- ASoC: tas2562: fix broken entries in the volume lookup table (git-fixes).\n- ASoC: tas2562: fix deprecated \u0027shut-down\u0027 GPIO always cleared after lookup (git-fixes).\n- ASoC: tas2562: fix DVC coefficient write order (git-fixes).\n- ASoC: tas2781: bound firmware description string parsing (git-fixes).\n- assoc_array: trim the final shortcut word using the current chunk end (git-fixes).\n- batman-adv: dat: fix tie-break for candidate selection (git-fixes).\n- batman-adv: fix VLAN priority offset (git-fixes).\n- batman-adv: frag: fix primary_if leak on failed linearization (git-fixes).\n- batman-adv: frag: free unfragmentable packet (git-fixes).\n- batman-adv: tt: avoid request storms during pending request (git-fixes).\n- batman-adv: tt: prevent TVLV OOB check overflow (git-fixes).\n- bitops: make BYTES_TO_BITS() treewide-available (stable-fixes).\n- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (stable-fixes).\n- Bluetooth: btintel: Validate length before parsing diagnostics TLV (git-fixes).\n- Bluetooth: btrtl: validate firmware patch bounds (git-fixes).\n- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB (stable-fixes).\n- Bluetooth: btusb: mediatek: remove the unnecessary goto tag (stable-fixes).\n- Bluetooth: btusb: validate Realtek vendor event length (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks (git-fixes).\n- Bluetooth: hci_sync: Protect UUID list traversal (git-fixes).\n- Bluetooth: HIDP: reject frames without a transaction header (git-fixes).\n- Bluetooth: HIDP: validate numbered report payloads (git-fixes).\n- Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos (git-fixes).\n- Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (git-fixes).\n- Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync (git-fixes).\n- Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (git-fixes).\n- Bluetooth: mgmt: Translate HCI reason in Device Disconnected event (git-fixes).\n- Bluetooth: qca: fix NVM tag length underflow in TLV parser (git-fixes).\n- Bluetooth: RFCOMM: Fix session UAF in set_termios (git-fixes).\n- bus: sunxi-rsb: Always check register address validity (git-fixes).\n- can: bcm: add missing rcu list annotations and operations (git-fixes).\n- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (git-fixes).\n- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure (git-fixes).\n- can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured (git-fixes).\n- can: ctucanfd: add missing MODULE_DEVICE_TABLE() (git-fixes).\n- can: ctucanfd: handle bus error interrupts (git-fixes).\n- can: ctucanfd: mark error-active controller status valid (git-fixes).\n- can: ctucanfd: unmap BAR0 using base address (git-fixes).\n- can: ctucanfd: use self-test mode for PRESUME_ACK (git-fixes).\n- can: ems_usb: validate CPC message lengths (git-fixes).\n- can: esd_usb: kill anchored URBs before freeing netdevs (git-fixes).\n- can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure (git-fixes).\n- can: isotp: check register_netdevice_notifier() error in module init (git-fixes).\n- can: isotp: use unconditional synchronize_rcu() in isotp_release() (git-fixes).\n- can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer (git-fixes).\n- can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() (git-fixes).\n- can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents (git-fixes).\n- can: peak_usb: add bounds check for USB channel index (git-fixes).\n- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error (git-fixes).\n- can: peak_usb: validate uCAN receive record lengths (git-fixes).\n- can: softing: fw_parse(): validate firmware record spans (git-fixes).\n- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (git-fixes).\n- comedi: comedi_parport: deal with premature interrupt (git-fixes).\n- dm cache policy smq: check allocation under invalidate lock (git-fixes).\n- dm cache: fix missing return in invalidate_committed\u0027s error path (git-fixes).\n- dmaengine: idxd: fix double free of wq, engine, and group structs (git-fixes).\n- dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (git-fixes).\n- dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ (git-fixes).\n- dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA (git-fixes).\n- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() (git-fixes).\n- driver core: Guard deferred probe timeout extension with delayed_work_pending() (git-fixes).\n- driver core: Use mod_delayed_work to prevent lost deferred probe work (git-fixes).\n- Drivers: hv: vmbus: Set DMA coherent mask for VMBus devices (git-fixes).\n- drm/amd/display: set new_stream to NULL after release (git-fixes).\n- drm/amd/display: use proper context for logging (git-fixes).\n- drm/amd/pm/ci: Don\u0027t disable MCLK DPM on Bonaire 0x6658 (R7 260X) (git-fixes).\n- drm/amd/pm: make pp_features read-only when scpm is enabled (stable-fixes).\n- drm/amdgpu/gfx8: drop unecessary BUG_ON() (stable-fixes).\n- drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() (stable-fixes).\n- drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (stable-fixes).\n- drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() (stable-fixes).\n- drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() (stable-fixes).\n- drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() (stable-fixes).\n- drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() (stable-fixes).\n- drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() (stable-fixes).\n- drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() (stable-fixes).\n- drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn\u0027t at 0 (v2) (stable-fixes).\n- drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older (stable-fixes).\n- drm/amdgpu/vce: fix integer overflow in image size (stable-fixes).\n- drm/amdgpu/vcn4: avoid rereading IB param length (stable-fixes).\n- drm/amdgpu: fix bo-\u003epin leaking in amdgpu_bo_create_reserved (stable-fixes).\n- drm/amdgpu: fix division by zero with invalid uvd dimensions (stable-fixes).\n- drm/amdgpu: Fix VFCT bus number matching with soft filter (stable-fixes).\n- drm/amdgpu: invoke pm_genpd_remove() before freeing genpd (stable-fixes).\n- drm/amdkfd: Check bounds in allocate_event_notification_slot (stable-fixes).\n- drm/amdkfd: free MQD managers on DQM init failures (git-fixes).\n- drm/amdkfd: hold event_mutex while checkpointing CRIU events (git-fixes).\n- drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs (git-fixes).\n- drm/i915/gt: use correct selftest config symbol (git-fixes).\n- drm/i915/selftests: Fix GT PM sort comparators (git-fixes).\n- drm/mediatek: ovl_adaptor: balance component registrations (git-fixes).\n- drm/radeon: fix r100_copy_blit for large BOs (stable-fixes).\n- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove (git-fixes).\n- drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered (stable-fixes).\n- drm/vc4: hvs/v3d: Fix null dereference in unbind (git-fixes).\n- drm/vc4: Prevent shader BO mappings from becoming writable (git-fixes).\n- drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size (git-fixes).\n- drm/vc4: Zero the tile state data array before each BIN job (git-fixes).\n- drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker (git-fixes).\n- drm/vmwgfx: bound DMA command body size against suffix pointer (git-fixes).\n- drm/vmwgfx: drop dma_buf reference on foreign-fd prime import (git-fixes).\n- drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size (git-fixes).\n- drm/vmwgfx: reject DX_BIND_QUERY without a DX context (git-fixes).\n- drm/vmwgfx: use check_add_overflow for shader size+offset bound (git-fixes).\n- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (git-fixes).\n- drm/vmwgfx: validate external BO copy bounds for both stride paths (git-fixes).\n- drm/vmwgfx: Validate vmw_surface_metadata::array_size (git-fixes).\n- fbcon: fix NULL pointer dereference for a console without vc_data (stable-fixes).\n- fbdev/efifb: Replace references to global screen_info by local pointer (stable-fixes).\n- fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() (git-fixes).\n- fbdev: efifb: fix memory leak in efifb_probe() (git-fixes).\n- firewire: net: Fix fragmented datagram reassembly (git-fixes).\n- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (git-fixes).\n- firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context (git-fixes).\n- firmware_loader: introduce __free() cleanup hanler (stable-fixes).\n- gpio: eic-sprd: use raw_spinlock_t in the irq startup path (git-fixes).\n- gpio: mlxbf3: fail probe if gpiochip registration fails (git-fixes).\n- gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (git-fixes).\n- gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path (git-fixes).\n- gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings (stable-fixes).\n- HID: add haptics page defines (stable-fixes).\n- HID: Intel-ish-hid: Ishtp: Fix sensor reads after ACPI S3 suspend (bsc#1266468).\n- HID: playstation: validate num_touch_reports in DualShock 4 reports (stable-fixes).\n- hrtimers: Introduce hrtimer_setup() to replace hrtimer_init() (bsc#1271912).\n- hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (git-fixes).\n- hwmon: (adt7470) Fix cache updated before hardware write on I2C error (git-fixes).\n- hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read (git-fixes).\n- hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors (git-fixes).\n- hwmon: (adt7470) Fix PWM auto temp state array and bounds check (git-fixes).\n- hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks (git-fixes).\n- hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() (git-fixes).\n- hwmon: (adt7470) Use cached PWM frequency value (git-fixes).\n- hwmon: (asus-ec-sensors) add missed handle for ENOMEM (git-fixes).\n- hwmon: (asus-ec-sensors) fix EC read intervals (git-fixes).\n- hwmon: (asus-ec-sensors) fix looping over banks while reading from EC (git-fixes).\n- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (lm90) Only report alarms if driver is ready (git-fixes).\n- hwmon: (nct6775-core) Prevent access to unsupported weight registers (git-fixes).\n- hwmon: (npcm750-pwm-fan): stop fan timer on device detach (git-fixes).\n- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (pmbus) Fix return value from pmbus_update_byte_data() (git-fixes).\n- hwmon: (pmbus/core) notify on the hwmon device, not the i2c client (git-fixes).\n- hwmon: (w83627hf) remove VID sysfs files on error and remove (stable-fixes).\n- hwmon: (w83793) remove vrm sysfs file on probe failure (stable-fixes).\n- hwmon: occ: validate poll response sensor blocks (git-fixes).\n- i2c: amd-mp2: Unregister callback on adapter add failure (git-fixes).\n- i2c: imx: Cancel hrtimer before clearing slave pointer (git-fixes).\n- i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (git-fixes).\n- i2c: imx: Fix slave registration race and error handling (git-fixes).\n- i2c: imx: separate atomic, dma and non-dma use case (stable-fixes).\n- i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock (git-fixes).\n- i2c: mediatek: fix WRRD for SoCs without auto_restart option (git-fixes).\n- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() (git-fixes).\n- i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue (git-fixes).\n- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring (git-fixes).\n- ice: don\u0027t check has_ready_bitmap in E810 functions (bsc#1269981).\n- ice: factor out ice_ptp_rebuild_owner() (bsc#1269981).\n- ice: fix PTP Call Trace during PTP release (bsc#1269981).\n- ice: Fix PTP NULL pointer dereference during VSI rebuild (bsc#1269981).\n- ice: introduce PTP state machine (bsc#1269981).\n- ice: pass reset type to PTP reset functions (bsc#1269981).\n- ice: rename ice_ptp_tx_cfg_intr (bsc#1269981).\n- ice: rename verify_cached to has_ready_bitmap (bsc#1269981).\n- ice: stop destroying and reinitalizing Tx tracker during reset (bsc#1269981).\n- ieee802154: admin-gate legacy LLSEC dump operations (git-fixes).\n- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation (git-fixes).\n- ieee802154: ca8210: fix cas_ctl leak on spi_async failure (git-fixes).\n- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit (git-fixes).\n- ieee802154: fix kernel-infoleak in dgram_recvmsg() (git-fixes).\n- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() (git-fixes).\n- iio: common: st_sensors: honour channel endianness in read_axis_data (git-fixes).\n- Input: atkbd - validate scancode in firmware keymap entries (git-fixes).\n- Input: elan_i2c - prevent division by zero and arithmetic underflow (git-fixes).\n- Input: goodix - clamp the device-reported contact count (git-fixes).\n- Input: iforce - bound the device-reported force-feedback effect index (git-fixes).\n- Input: ims-pcu - add response length checks (git-fixes).\n- Input: ims-pcu - fix DMA mapping violation in line setup (git-fixes).\n- Input: ims-pcu - fix firmware leak in async update (git-fixes).\n- Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() (git-fixes).\n- Input: ims-pcu - fix logic error in packet reset (git-fixes).\n- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging (git-fixes).\n- Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix race condition in reset_device sysfs callback (git-fixes).\n- Input: ims-pcu - fix type confusion in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix use-after-free and double-free in disconnect (git-fixes).\n- Input: ims-pcu - release data interface on disconnect (git-fixes).\n- Input: ims-pcu - validate control endpoint type (git-fixes).\n- Input: maple_keyb - set driver data before registering input device (stable-fixes).\n- Input: maplecontrol - set driver data before registering input device (stable-fixes).\n- Input: maplemouse - set driver data before registering input device (stable-fixes).\n- Input: rmi4 - fix bit count in bitmap_copy() (git-fixes).\n- Input: rmi4 - fix limit in rmi_register_desc_has_subpacket() (git-fixes).\n- Input: rmi4 - fix memory leak in rmi_set_attn_data() (git-fixes).\n- Input: rmi4 - fix num_subpackets overflow in register descriptor (git-fixes).\n- Input: rmi4 - fix register descriptor address calculation (git-fixes).\n- Input: rmi4 - fix type overflow in register counts (git-fixes).\n- Input: rmi4 - initialize attn_fifo properly (stable-fixes).\n- Input: rmi4 - iterative IRQ handler (git-fixes).\n- Input: rmi4 - refactor F12 probe function (stable-fixes).\n- Input: rmi4 - refactor register descriptor parsing (git-fixes).\n- Input: rmi4 - tolerate short register descriptor structure (git-fixes).\n- Input: rmi4 - use local presence map in rmi_read_register_desc() (stable-fixes).\n- Input: serio - define serio_pause_rx guard to pause and resume serio ports (stable-fixes).\n- Input: synaptics-rmi4 - add support for querying DPM value (F12) (stable-fixes).\n- Input: synaptics-rmi4 - fix crash when DPM query is not supported (git-fixes).\n- Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure (git-fixes).\n- Input: touchwin - reset the packet index on every complete packet (git-fixes).\n- intel_th: fix MSC output device reference leak (git-fixes).\n- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (git-fixes).\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (git-fixes).\n- KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (git-fixes).\n- KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN (git-fixes).\n- KVM: x86/mmu: Fix use-after-free on vendor module reload (git-fixes).\n- KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots (git-fixes).\n- KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls (git-fixes).\n- KVM: x86: Fix SRCU list traversal in kvm_fire_mask_notifiers() (git-fixes).\n- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (git-fixes).\n- KVM: x86: hyper-v: Bound the bank index when querying sparse banks (git-fixes).\n- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (git-fixes).\n- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (git-fixes).\n- mac802154: hold an interface reference across the scan worker (git-fixes).\n- mac802154: llsec: reject frames shorter than the authentication tag (git-fixes).\n- media: airspy: Return queued buffers on start_streaming() failure (git-fixes).\n- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() (git-fixes).\n- media: cedrus: clean up media device on probe failure (git-fixes).\n- media: cx231xx: fix devres lifetime (git-fixes).\n- media: cx23885: add ioremap return check and cleanup (git-fixes).\n- media: meson: vdec: Fix memory leak in error path of vdec_open (git-fixes).\n- media: msi2500: Return queued buffers on start_streaming() failure (git-fixes).\n- media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe (git-fixes).\n- media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure (git-fixes).\n- media: nxp: imx8-isi: Convert to platform remove callback returning void (stable-fixes).\n- media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path (git-fixes).\n- media: nxp: imx8-isi: Fix potential out-of-bounds issues (git-fixes).\n- media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding (git-fixes).\n- media: nxp: imx8-isi: Fix use-after-free on remove (git-fixes).\n- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code (stable-fixes).\n- media: pwc: Drain fill_buf on start_streaming() failure (git-fixes).\n- media: pwc: Return queued buffers on start_streaming() failure (git-fixes).\n- media: qcom: venus: drop extra padding in NV12 raw size calculation (git-fixes).\n- media: qcom: venus: relax encoder frame/blur dimension steps on v4 (git-fixes).\n- media: qcom: venus: relax encoder frame/blur step size on v6 (git-fixes).\n- media: radio-si476x: Unregister v4l2_device on probe failure (git-fixes).\n- media: rockchip: rga: fix too small buffer size (git-fixes).\n- media: rtl2832: fix use-after-free in rtl2832_remove() (git-fixes).\n- media: rtl2832_sdr: Return queued buffers on start_streaming() failure (git-fixes).\n- media: saa7134: Fix a possible memory leak in saa7134_video_init1 (git-fixes).\n- media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe (git-fixes).\n- media: stm32: dcmi: unregister notifier on probe failure (git-fixes).\n- media: sun4i-csi: Return queued buffers on start_streaming() failure (git-fixes).\n- media: tegra-video: vi: fix invalid u32 return value in format lookup (git-fixes).\n- media: uvcvideo: Avoid partial metadata buffers (git-fixes).\n- media: uvcvideo: Fix buffer sequence in frame gaps (git-fixes).\n- media: uvcvideo: Fix sequence number when no EOF (git-fixes).\n- media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() (git-fixes).\n- media: vivid: add vivid_update_reduced_fps() (git-fixes).\n- media: vivid: check for vb2_is_busy() when toggling caps (git-fixes).\n- mei: bus: access mei_device under device_lock on cleanup (git-fixes).\n- memstick: ms_block: reject a card that reports too many blocks (git-fixes).\n- mfd: cros_ec: Delay dev_set_drvdata() until probe success (git-fixes).\n- mfd: sm501: Fix reference leak on failed device registration (git-fixes).\n- mfd: tps6586x: Fix OF node refcount (git-fixes).\n- mkspec-dtb: Skip missing DTBs.\n- mm: convert pagecache_isize_extended to use a folio (bsc#1272920).\n- mm: zero range of eof folio exposed by inode size extension (bsc#1272920).\n- mmc: vub300: defer reset until cmd_mutex is unlocked (git-fixes).\n- mtd: mchp23k256: use SPI match data for chip caps (git-fixes).\n- mtd: mtdswap: remove debugfs stats file on teardown (git-fixes).\n- mtd: nand: mtk-ecc: stop on ECC idle timeouts (git-fixes).\n- mtd: onenand: samsung: report DMA completion timeouts (git-fixes).\n- mtd: rawnand: Add a helper for calculating a page index (stable-fixes).\n- mtd: rawnand: Ensure all continuous terms are always in sync (git-fixes).\n- mtd: rawnand: fsl_ifc: return errors for failed page reads (git-fixes).\n- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout (git-fixes).\n- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout (git-fixes).\n- mtd: rawnand: Pause continuous reads at block boundaries (git-fixes).\n- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (bsc#1271866).\n- net/x25: fix use-after-free in x25_kill_by_neigh() (git-fixes).\n- net: mana: Add Interrupt Moderation support (bsc#1271368).\n- net: mana: Return error code from mana_create_rxq() (git-fixes).\n- net: thunderbolt: Fix frags overflow by bounding frame_count (git-fixes).\n- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() (git-fixes).\n- net: usb: lan78xx: move functions to avoid forward definitions (stable-fixes).\n- net: wwan: t7xx: check skb_clone in control TX (git-fixes).\n- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure (git-fixes).\n- phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask (git-fixes).\n- phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB (git-fixes).\n- phy: zynqmp: use read-modify-write for SERDES scrambler bypass (git-fixes).\n- pinctrl-amd: Don\u0027t clear S4 wake bits at probe (git-fixes).\n- pinctrl: bm1880: add missing select GENERIC_PINCONF (git-fixes).\n- pinctrl: devicetree: don\u0027t free uninitialized dev_name on error path (git-fixes).\n- pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 (git-fixes).\n- pkspec-dtb: Fix dtb-al rename.\n- platform/x86/amd/pmc: Add delay_suspend module parameter (stable-fixes).\n- platform/x86/amd/pmc: Avoid logging \"(null)\" for DMI values (git-fixes).\n- platform/x86/amd/pmc: Check for intermediate wakeup in function (stable-fixes).\n- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops (stable-fixes).\n- platform/x86/amd/pmc: Don\u0027t log during intermediate wakeups (stable-fixes).\n- platform/x86: dell-smbios: Move request functions for reuse (stable-fixes).\n- posix-cpu-timers: Cleanup the firing logic (bsc#1271912).\n- posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del() (bsc#1271912).\n- posix-cpu-timers: Do not arm SIGEV_NONE timers (bsc#1271912).\n- posix-cpu-timers: Handle interval timers correctly in timer_get() (bsc#1271912).\n- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (bsc#1271912).\n- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (bsc#1271912).\n- posix-cpu-timers: Make k_itimer::it_active consistent (bsc#1271912).\n- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (bsc#1271912).\n- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (bsc#1271912).\n- posix-cpu-timers: Simplify posix_cpu_timer_set() (bsc#1271912).\n- posix-cpu-timers: Split up posix_cpu_timer_get() (bsc#1271912).\n- posix-cpu-timers: Use @now instead of @val for clarity (bsc#1271912).\n- posix-timers: Add proper state tracking (bsc#1271912).\n- posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).\n- posix-timers: Clarify posix_timer_fn() comments (bsc#1271912).\n- posix-timers: Clear overrun in common_timer_set() (bsc#1271912).\n- posix-timers: Consolidate signal queueing (bsc#1271912).\n- posix-timers: Consolidate timer setup (bsc#1271912).\n- posix-timers: Cure si_sys_private race (bsc#1271912).\n- posix-timers: Document common_clock_get() correctly (bsc#1271912).\n- posix-timers: Expand timer_arm() callbacks with a boolean return value (bsc#1271912).\n- posix-timers: Polish coding style in a few places (bsc#1271912).\n- posix-timers: Retrieve interval in common timer_settime() code (bsc#1271912).\n- power: supply: bq25890: fix the -10 C NTC lookup entry (git-fixes).\n- RDMA/mana_ib: initialize err for empty send WR lists (git-fixes).\n- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets (git-fixes).\n- remoteproc: qcom: Fix leak when custom dump_segments addition fails (git-fixes).\n- reset: sunxi: fix memory region leak on ioremap failure (git-fixes).\n- Revert \"Input: rmi4 - fix register descriptor address calculation\" (stable-fixes).\n- sched/psi: Create the psimon kthread outside of cgroup_mutex (bsc#1269134).\n- sctp: validate embedded address parameter length (git-fixes).\n- selftests/alsa: Fix memory leak in find_controls error path (git-fixes).\n- serial: 8250_mid: Disable DMA for selected platforms (git-fixes).\n- serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms (git-fixes).\n- serial: 8250_mid: Remove 8250_pci usage (stable-fixes).\n- serial: sc16is7xx: implement gpio get_direction() callback (git-fixes).\n- slimbus: Convert to platform remove callback returning void (stable-fixes).\n- slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl-\u003elock (git-fixes).\n- slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD (git-fixes).\n- slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership (git-fixes).\n- slimbus: qcom-ngd-ctrl: Fix probe error path ordering (git-fixes).\n- slimbus: qcom-ngd-ctrl: Fix up platform_driver registration (git-fixes).\n- slimbus: qcom-ngd-ctrl: Initialize controller resources in controller (git-fixes).\n- slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd (git-fixes).\n- staging: media: atomisp: reduce load_primary_binaries() stack usage (git-fixes).\n- staging: rtl8723bs: core: move constants to right side in comparison (stable-fixes).\n- staging: rtl8723bs: fix inverted HT40 secondary channel offset (git-fixes).\n- time: Switch to hrtimer_setup() (bsc#1271912).\n- usb: cdc_acm: Add quirk for Uniden BC125AT scanner (stable-fixes).\n- usb: chipidea: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub (stable-fixes).\n- usb: core: port: Deattach Type-C connector on component unbind (git-fixes).\n- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback (git-fixes).\n- usb: gadget: f_midi: cancel pending IN work before freeing the midi object (git-fixes).\n- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() (git-fixes).\n- USB: gadget: fsl-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: function: rndis: add length check for header (stable-fixes).\n- usb: gadget: function: rndis: add length check to response query (stable-fixes).\n- usb: gadget: printer: fix infinite loop in printer_read() (git-fixes).\n- USB: gadget: snps-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown (git-fixes).\n- usb: gadget: udc: Fix use-after-free in gadget_match_driver (stable-fixes).\n- usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect race (git-fixes).\n- usb: iowarrior: remove inherent race with minor number (stable-fixes).\n- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD (stable-fixes).\n- USB: serial: io_edgeport: cap received transmit credits (git-fixes).\n- USB: serial: io_ti: reject oversized boot-mode firmware (git-fixes).\n- USB: serial: keyspan_pda: fix data loss on receive throttling (git-fixes).\n- USB: serial: mxuport: validate firmware header size (git-fixes).\n- USB: serial: option: add Telit Cinterion FE990D50 compositions (stable-fixes).\n- wan: wanxl: Only reset hardware after BAR mapping (git-fixes).\n- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (git-fixes).\n- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() (git-fixes).\n- wifi: ath6kl: fix OOB access from firmware ADDBA window size (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware IE lengths in connect event (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler (git-fixes).\n- wifi: ath9k: hif_usb: don\u0027t dereference hif_dev after re-arming firmware request (git-fixes).\n- wifi: ath10k: fix skb leak on incomplete msdu during rx pop (git-fixes).\n- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin (git-fixes).\n- wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() (git-fixes).\n- wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning (git-fixes).\n- wifi: brcmfmac: initialize SDIO data work before cleanup (git-fixes).\n- wifi: brcmfmac: make release_scratchbuffers idempotent (git-fixes).\n- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (git-fixes).\n- wifi: carl9170: fix buffer overflow in rx_stream failover path (git-fixes).\n- wifi: carl9170: fix OOB read from off-by-two in TX status handler (git-fixes).\n- wifi: cfg80211: bound element ID read when checking non-inheritance (git-fixes).\n- wifi: cfg80211: cancel sched scan results work on unregister (git-fixes).\n- wifi: cfg80211: reject unsupported PMSR FTM location requests (git-fixes).\n- wifi: cfg80211: validate PMSR FTM preamble range (git-fixes).\n- wifi: cfg80211: validate PMSR measurement type data (git-fixes).\n- wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() (git-fixes).\n- wifi: iwlwifi: mvm: fix flushing during quiet CSA (bsc#1272600).\n- wifi: iwlwifi: mvm: fix read in wake packet notification handler (git-fixes).\n- wifi: iwlwifi: mvm: validate SAR GEO response payload size (git-fixes).\n- wifi: libertas: fix memory leak in helper_firmware_cb() (git-fixes).\n- wifi: mac80211: fix memory leak in ieee80211_register_hw() (git-fixes).\n- wifi: mac80211: free ack status frame on TX header build failure (git-fixes).\n- wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock (git-fixes).\n- wifi: mac80211: recalculate TIM when a station enters power save (git-fixes).\n- wifi: mac80211: tear down new links on vif update error path (git-fixes).\n- wifi: mac80211: validate individual TWT params before driver setup (git-fixes).\n- wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() (git-fixes).\n- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7915: guard HE capability lookups (git-fixes).\n- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() (git-fixes).\n- wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() (git-fixes).\n- wifi: mwifiex: bound uAP association event IEs to the event buffer (git-fixes).\n- wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (git-fixes).\n- wifi: mwifiex: fix permanently busy scans after multiple roam iterations (git-fixes).\n- wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (git-fixes).\n- wifi: nl80211: free RNR data on MBSSID mismatch (git-fixes).\n- wifi: nl80211: validate nested MBSSID IE blobs (git-fixes).\n- wifi: p54: validate RX frame length in p54_rx_eeprom_readback() (git-fixes).\n- wifi: rt2x00: avoid full teardown before work setup in probe (git-fixes).\n- wifi: wilc1000: validate assoc response length before subtracting header (git-fixes).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-kernel-572",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23241-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:23241-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623241-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:23241-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-August/049582.html"
},
{
"category": "self",
"summary": "SUSE Bug 1185845",
"url": "https://bugzilla.suse.com/1185845"
},
{
"category": "self",
"summary": "SUSE Bug 1239511",
"url": "https://bugzilla.suse.com/1239511"
},
{
"category": "self",
"summary": "SUSE Bug 1243603",
"url": "https://bugzilla.suse.com/1243603"
},
{
"category": "self",
"summary": "SUSE Bug 1246182",
"url": "https://bugzilla.suse.com/1246182"
},
{
"category": "self",
"summary": "SUSE Bug 1247455",
"url": "https://bugzilla.suse.com/1247455"
},
{
"category": "self",
"summary": "SUSE Bug 1253262",
"url": "https://bugzilla.suse.com/1253262"
},
{
"category": "self",
"summary": "SUSE Bug 1253674",
"url": "https://bugzilla.suse.com/1253674"
},
{
"category": "self",
"summary": "SUSE Bug 1255357",
"url": "https://bugzilla.suse.com/1255357"
},
{
"category": "self",
"summary": "SUSE Bug 1255703",
"url": "https://bugzilla.suse.com/1255703"
},
{
"category": "self",
"summary": "SUSE Bug 1256675",
"url": "https://bugzilla.suse.com/1256675"
},
{
"category": "self",
"summary": "SUSE Bug 1257777",
"url": "https://bugzilla.suse.com/1257777"
},
{
"category": "self",
"summary": "SUSE Bug 1257815",
"url": "https://bugzilla.suse.com/1257815"
},
{
"category": "self",
"summary": "SUSE Bug 1258718",
"url": "https://bugzilla.suse.com/1258718"
},
{
"category": "self",
"summary": "SUSE Bug 1260012",
"url": "https://bugzilla.suse.com/1260012"
},
{
"category": "self",
"summary": "SUSE Bug 1260347",
"url": "https://bugzilla.suse.com/1260347"
},
{
"category": "self",
"summary": "SUSE Bug 1262391",
"url": "https://bugzilla.suse.com/1262391"
},
{
"category": "self",
"summary": "SUSE Bug 1262573",
"url": "https://bugzilla.suse.com/1262573"
},
{
"category": "self",
"summary": "SUSE Bug 1262603",
"url": "https://bugzilla.suse.com/1262603"
},
{
"category": "self",
"summary": "SUSE Bug 1262605",
"url": "https://bugzilla.suse.com/1262605"
},
{
"category": "self",
"summary": "SUSE Bug 1262614",
"url": "https://bugzilla.suse.com/1262614"
},
{
"category": "self",
"summary": "SUSE Bug 1262637",
"url": "https://bugzilla.suse.com/1262637"
},
{
"category": "self",
"summary": "SUSE Bug 1262639",
"url": "https://bugzilla.suse.com/1262639"
},
{
"category": "self",
"summary": "SUSE Bug 1262649",
"url": "https://bugzilla.suse.com/1262649"
},
{
"category": "self",
"summary": "SUSE Bug 1262653",
"url": "https://bugzilla.suse.com/1262653"
},
{
"category": "self",
"summary": "SUSE Bug 1262658",
"url": "https://bugzilla.suse.com/1262658"
},
{
"category": "self",
"summary": "SUSE Bug 1262659",
"url": "https://bugzilla.suse.com/1262659"
},
{
"category": "self",
"summary": "SUSE Bug 1262723",
"url": "https://bugzilla.suse.com/1262723"
},
{
"category": "self",
"summary": "SUSE Bug 1262745",
"url": "https://bugzilla.suse.com/1262745"
},
{
"category": "self",
"summary": "SUSE Bug 1262751",
"url": "https://bugzilla.suse.com/1262751"
},
{
"category": "self",
"summary": "SUSE Bug 1262757",
"url": "https://bugzilla.suse.com/1262757"
},
{
"category": "self",
"summary": "SUSE Bug 1262768",
"url": "https://bugzilla.suse.com/1262768"
},
{
"category": "self",
"summary": "SUSE Bug 1262771",
"url": "https://bugzilla.suse.com/1262771"
},
{
"category": "self",
"summary": "SUSE Bug 1262992",
"url": "https://bugzilla.suse.com/1262992"
},
{
"category": "self",
"summary": "SUSE Bug 1263008",
"url": "https://bugzilla.suse.com/1263008"
},
{
"category": "self",
"summary": "SUSE Bug 1263010",
"url": "https://bugzilla.suse.com/1263010"
},
{
"category": "self",
"summary": "SUSE Bug 1263011",
"url": "https://bugzilla.suse.com/1263011"
},
{
"category": "self",
"summary": "SUSE Bug 1263013",
"url": "https://bugzilla.suse.com/1263013"
},
{
"category": "self",
"summary": "SUSE Bug 1263014",
"url": "https://bugzilla.suse.com/1263014"
},
{
"category": "self",
"summary": "SUSE Bug 1263016",
"url": "https://bugzilla.suse.com/1263016"
},
{
"category": "self",
"summary": "SUSE Bug 1263020",
"url": "https://bugzilla.suse.com/1263020"
},
{
"category": "self",
"summary": "SUSE Bug 1263025",
"url": "https://bugzilla.suse.com/1263025"
},
{
"category": "self",
"summary": "SUSE Bug 1263030",
"url": "https://bugzilla.suse.com/1263030"
},
{
"category": "self",
"summary": "SUSE Bug 1263031",
"url": "https://bugzilla.suse.com/1263031"
},
{
"category": "self",
"summary": "SUSE Bug 1263045",
"url": "https://bugzilla.suse.com/1263045"
},
{
"category": "self",
"summary": "SUSE Bug 1263055",
"url": "https://bugzilla.suse.com/1263055"
},
{
"category": "self",
"summary": "SUSE Bug 1263068",
"url": "https://bugzilla.suse.com/1263068"
},
{
"category": "self",
"summary": "SUSE Bug 1263073",
"url": "https://bugzilla.suse.com/1263073"
},
{
"category": "self",
"summary": "SUSE Bug 1263075",
"url": "https://bugzilla.suse.com/1263075"
},
{
"category": "self",
"summary": "SUSE Bug 1263097",
"url": "https://bugzilla.suse.com/1263097"
},
{
"category": "self",
"summary": "SUSE Bug 1263111",
"url": "https://bugzilla.suse.com/1263111"
},
{
"category": "self",
"summary": "SUSE Bug 1263128",
"url": "https://bugzilla.suse.com/1263128"
},
{
"category": "self",
"summary": "SUSE Bug 1263134",
"url": "https://bugzilla.suse.com/1263134"
},
{
"category": "self",
"summary": "SUSE Bug 1263139",
"url": "https://bugzilla.suse.com/1263139"
},
{
"category": "self",
"summary": "SUSE Bug 1263142",
"url": "https://bugzilla.suse.com/1263142"
},
{
"category": "self",
"summary": "SUSE Bug 1263145",
"url": "https://bugzilla.suse.com/1263145"
},
{
"category": "self",
"summary": "SUSE Bug 1263167",
"url": "https://bugzilla.suse.com/1263167"
},
{
"category": "self",
"summary": "SUSE Bug 1263173",
"url": "https://bugzilla.suse.com/1263173"
},
{
"category": "self",
"summary": "SUSE Bug 1263175",
"url": "https://bugzilla.suse.com/1263175"
},
{
"category": "self",
"summary": "SUSE Bug 1263491",
"url": "https://bugzilla.suse.com/1263491"
},
{
"category": "self",
"summary": "SUSE Bug 1263493",
"url": "https://bugzilla.suse.com/1263493"
},
{
"category": "self",
"summary": "SUSE Bug 1263495",
"url": "https://bugzilla.suse.com/1263495"
},
{
"category": "self",
"summary": "SUSE Bug 1263539",
"url": "https://bugzilla.suse.com/1263539"
},
{
"category": "self",
"summary": "SUSE Bug 1263562",
"url": "https://bugzilla.suse.com/1263562"
},
{
"category": "self",
"summary": "SUSE Bug 1263598",
"url": "https://bugzilla.suse.com/1263598"
},
{
"category": "self",
"summary": "SUSE Bug 1263657",
"url": "https://bugzilla.suse.com/1263657"
},
{
"category": "self",
"summary": "SUSE Bug 1263718",
"url": "https://bugzilla.suse.com/1263718"
},
{
"category": "self",
"summary": "SUSE Bug 1263776",
"url": "https://bugzilla.suse.com/1263776"
},
{
"category": "self",
"summary": "SUSE Bug 1263777",
"url": "https://bugzilla.suse.com/1263777"
},
{
"category": "self",
"summary": "SUSE Bug 1263778",
"url": "https://bugzilla.suse.com/1263778"
},
{
"category": "self",
"summary": "SUSE Bug 1263780",
"url": "https://bugzilla.suse.com/1263780"
},
{
"category": "self",
"summary": "SUSE Bug 1263782",
"url": "https://bugzilla.suse.com/1263782"
},
{
"category": "self",
"summary": "SUSE Bug 1263785",
"url": "https://bugzilla.suse.com/1263785"
},
{
"category": "self",
"summary": "SUSE Bug 1263786",
"url": "https://bugzilla.suse.com/1263786"
},
{
"category": "self",
"summary": "SUSE Bug 1263788",
"url": "https://bugzilla.suse.com/1263788"
},
{
"category": "self",
"summary": "SUSE Bug 1263806",
"url": "https://bugzilla.suse.com/1263806"
},
{
"category": "self",
"summary": "SUSE Bug 1263876",
"url": "https://bugzilla.suse.com/1263876"
},
{
"category": "self",
"summary": "SUSE Bug 1263904",
"url": "https://bugzilla.suse.com/1263904"
},
{
"category": "self",
"summary": "SUSE Bug 1263905",
"url": "https://bugzilla.suse.com/1263905"
},
{
"category": "self",
"summary": "SUSE Bug 1263911",
"url": "https://bugzilla.suse.com/1263911"
},
{
"category": "self",
"summary": "SUSE Bug 1263923",
"url": "https://bugzilla.suse.com/1263923"
},
{
"category": "self",
"summary": "SUSE Bug 1263975",
"url": "https://bugzilla.suse.com/1263975"
},
{
"category": "self",
"summary": "SUSE Bug 1263999",
"url": "https://bugzilla.suse.com/1263999"
},
{
"category": "self",
"summary": "SUSE Bug 1264006",
"url": "https://bugzilla.suse.com/1264006"
},
{
"category": "self",
"summary": "SUSE Bug 1264007",
"url": "https://bugzilla.suse.com/1264007"
},
{
"category": "self",
"summary": "SUSE Bug 1264008",
"url": "https://bugzilla.suse.com/1264008"
},
{
"category": "self",
"summary": "SUSE Bug 1264009",
"url": "https://bugzilla.suse.com/1264009"
},
{
"category": "self",
"summary": "SUSE Bug 1264013",
"url": "https://bugzilla.suse.com/1264013"
},
{
"category": "self",
"summary": "SUSE Bug 1264019",
"url": "https://bugzilla.suse.com/1264019"
},
{
"category": "self",
"summary": "SUSE Bug 1264030",
"url": "https://bugzilla.suse.com/1264030"
},
{
"category": "self",
"summary": "SUSE Bug 1264032",
"url": "https://bugzilla.suse.com/1264032"
},
{
"category": "self",
"summary": "SUSE Bug 1264033",
"url": "https://bugzilla.suse.com/1264033"
},
{
"category": "self",
"summary": "SUSE Bug 1264035",
"url": "https://bugzilla.suse.com/1264035"
},
{
"category": "self",
"summary": "SUSE Bug 1264039",
"url": "https://bugzilla.suse.com/1264039"
},
{
"category": "self",
"summary": "SUSE Bug 1264041",
"url": "https://bugzilla.suse.com/1264041"
},
{
"category": "self",
"summary": "SUSE Bug 1264044",
"url": "https://bugzilla.suse.com/1264044"
},
{
"category": "self",
"summary": "SUSE Bug 1264048",
"url": "https://bugzilla.suse.com/1264048"
},
{
"category": "self",
"summary": "SUSE Bug 1264053",
"url": "https://bugzilla.suse.com/1264053"
},
{
"category": "self",
"summary": "SUSE Bug 1264065",
"url": "https://bugzilla.suse.com/1264065"
},
{
"category": "self",
"summary": "SUSE Bug 1264070",
"url": "https://bugzilla.suse.com/1264070"
},
{
"category": "self",
"summary": "SUSE Bug 1264071",
"url": "https://bugzilla.suse.com/1264071"
},
{
"category": "self",
"summary": "SUSE Bug 1264073",
"url": "https://bugzilla.suse.com/1264073"
},
{
"category": "self",
"summary": "SUSE Bug 1264074",
"url": "https://bugzilla.suse.com/1264074"
},
{
"category": "self",
"summary": "SUSE Bug 1264075",
"url": "https://bugzilla.suse.com/1264075"
},
{
"category": "self",
"summary": "SUSE Bug 1264076",
"url": "https://bugzilla.suse.com/1264076"
},
{
"category": "self",
"summary": "SUSE Bug 1264079",
"url": "https://bugzilla.suse.com/1264079"
},
{
"category": "self",
"summary": "SUSE Bug 1264088",
"url": "https://bugzilla.suse.com/1264088"
},
{
"category": "self",
"summary": "SUSE Bug 1264089",
"url": "https://bugzilla.suse.com/1264089"
},
{
"category": "self",
"summary": "SUSE Bug 1264090",
"url": "https://bugzilla.suse.com/1264090"
},
{
"category": "self",
"summary": "SUSE Bug 1264100",
"url": "https://bugzilla.suse.com/1264100"
},
{
"category": "self",
"summary": "SUSE Bug 1264101",
"url": "https://bugzilla.suse.com/1264101"
},
{
"category": "self",
"summary": "SUSE Bug 1264110",
"url": "https://bugzilla.suse.com/1264110"
},
{
"category": "self",
"summary": "SUSE Bug 1264122",
"url": "https://bugzilla.suse.com/1264122"
},
{
"category": "self",
"summary": "SUSE Bug 1264125",
"url": "https://bugzilla.suse.com/1264125"
},
{
"category": "self",
"summary": "SUSE Bug 1264129",
"url": "https://bugzilla.suse.com/1264129"
},
{
"category": "self",
"summary": "SUSE Bug 1264142",
"url": "https://bugzilla.suse.com/1264142"
},
{
"category": "self",
"summary": "SUSE Bug 1264184",
"url": "https://bugzilla.suse.com/1264184"
},
{
"category": "self",
"summary": "SUSE Bug 1264188",
"url": "https://bugzilla.suse.com/1264188"
},
{
"category": "self",
"summary": "SUSE Bug 1264189",
"url": "https://bugzilla.suse.com/1264189"
},
{
"category": "self",
"summary": "SUSE Bug 1264190",
"url": "https://bugzilla.suse.com/1264190"
},
{
"category": "self",
"summary": "SUSE Bug 1264197",
"url": "https://bugzilla.suse.com/1264197"
},
{
"category": "self",
"summary": "SUSE Bug 1264237",
"url": "https://bugzilla.suse.com/1264237"
},
{
"category": "self",
"summary": "SUSE Bug 1264247",
"url": "https://bugzilla.suse.com/1264247"
},
{
"category": "self",
"summary": "SUSE Bug 1264257",
"url": "https://bugzilla.suse.com/1264257"
},
{
"category": "self",
"summary": "SUSE Bug 1264296",
"url": "https://bugzilla.suse.com/1264296"
},
{
"category": "self",
"summary": "SUSE Bug 1264308",
"url": "https://bugzilla.suse.com/1264308"
},
{
"category": "self",
"summary": "SUSE Bug 1264313",
"url": "https://bugzilla.suse.com/1264313"
},
{
"category": "self",
"summary": "SUSE Bug 1264315",
"url": "https://bugzilla.suse.com/1264315"
},
{
"category": "self",
"summary": "SUSE Bug 1264319",
"url": "https://bugzilla.suse.com/1264319"
},
{
"category": "self",
"summary": "SUSE Bug 1264321",
"url": "https://bugzilla.suse.com/1264321"
},
{
"category": "self",
"summary": "SUSE Bug 1264322",
"url": "https://bugzilla.suse.com/1264322"
},
{
"category": "self",
"summary": "SUSE Bug 1264331",
"url": "https://bugzilla.suse.com/1264331"
},
{
"category": "self",
"summary": "SUSE Bug 1264333",
"url": "https://bugzilla.suse.com/1264333"
},
{
"category": "self",
"summary": "SUSE Bug 1264336",
"url": "https://bugzilla.suse.com/1264336"
},
{
"category": "self",
"summary": "SUSE Bug 1264338",
"url": "https://bugzilla.suse.com/1264338"
},
{
"category": "self",
"summary": "SUSE Bug 1264340",
"url": "https://bugzilla.suse.com/1264340"
},
{
"category": "self",
"summary": "SUSE Bug 1264365",
"url": "https://bugzilla.suse.com/1264365"
},
{
"category": "self",
"summary": "SUSE Bug 1264377",
"url": "https://bugzilla.suse.com/1264377"
},
{
"category": "self",
"summary": "SUSE Bug 1264379",
"url": "https://bugzilla.suse.com/1264379"
},
{
"category": "self",
"summary": "SUSE Bug 1264386",
"url": "https://bugzilla.suse.com/1264386"
},
{
"category": "self",
"summary": "SUSE Bug 1264387",
"url": "https://bugzilla.suse.com/1264387"
},
{
"category": "self",
"summary": "SUSE Bug 1264388",
"url": "https://bugzilla.suse.com/1264388"
},
{
"category": "self",
"summary": "SUSE Bug 1264414",
"url": "https://bugzilla.suse.com/1264414"
},
{
"category": "self",
"summary": "SUSE Bug 1264416",
"url": "https://bugzilla.suse.com/1264416"
},
{
"category": "self",
"summary": "SUSE Bug 1264417",
"url": "https://bugzilla.suse.com/1264417"
},
{
"category": "self",
"summary": "SUSE Bug 1264418",
"url": "https://bugzilla.suse.com/1264418"
},
{
"category": "self",
"summary": "SUSE Bug 1264422",
"url": "https://bugzilla.suse.com/1264422"
},
{
"category": "self",
"summary": "SUSE Bug 1264423",
"url": "https://bugzilla.suse.com/1264423"
},
{
"category": "self",
"summary": "SUSE Bug 1264424",
"url": "https://bugzilla.suse.com/1264424"
},
{
"category": "self",
"summary": "SUSE Bug 1264425",
"url": "https://bugzilla.suse.com/1264425"
},
{
"category": "self",
"summary": "SUSE Bug 1264431",
"url": "https://bugzilla.suse.com/1264431"
},
{
"category": "self",
"summary": "SUSE Bug 1264436",
"url": "https://bugzilla.suse.com/1264436"
},
{
"category": "self",
"summary": "SUSE Bug 1264442",
"url": "https://bugzilla.suse.com/1264442"
},
{
"category": "self",
"summary": "SUSE Bug 1264451",
"url": "https://bugzilla.suse.com/1264451"
},
{
"category": "self",
"summary": "SUSE Bug 1264452",
"url": "https://bugzilla.suse.com/1264452"
},
{
"category": "self",
"summary": "SUSE Bug 1264473",
"url": "https://bugzilla.suse.com/1264473"
},
{
"category": "self",
"summary": "SUSE Bug 1264479",
"url": "https://bugzilla.suse.com/1264479"
},
{
"category": "self",
"summary": "SUSE Bug 1264480",
"url": "https://bugzilla.suse.com/1264480"
},
{
"category": "self",
"summary": "SUSE Bug 1264526",
"url": "https://bugzilla.suse.com/1264526"
},
{
"category": "self",
"summary": "SUSE Bug 1264532",
"url": "https://bugzilla.suse.com/1264532"
},
{
"category": "self",
"summary": "SUSE Bug 1264534",
"url": "https://bugzilla.suse.com/1264534"
},
{
"category": "self",
"summary": "SUSE Bug 1264537",
"url": "https://bugzilla.suse.com/1264537"
},
{
"category": "self",
"summary": "SUSE Bug 1264538",
"url": "https://bugzilla.suse.com/1264538"
},
{
"category": "self",
"summary": "SUSE Bug 1264539",
"url": "https://bugzilla.suse.com/1264539"
},
{
"category": "self",
"summary": "SUSE Bug 1264540",
"url": "https://bugzilla.suse.com/1264540"
},
{
"category": "self",
"summary": "SUSE Bug 1264543",
"url": "https://bugzilla.suse.com/1264543"
},
{
"category": "self",
"summary": "SUSE Bug 1264553",
"url": "https://bugzilla.suse.com/1264553"
},
{
"category": "self",
"summary": "SUSE Bug 1264558",
"url": "https://bugzilla.suse.com/1264558"
},
{
"category": "self",
"summary": "SUSE Bug 1264560",
"url": "https://bugzilla.suse.com/1264560"
},
{
"category": "self",
"summary": "SUSE Bug 1264564",
"url": "https://bugzilla.suse.com/1264564"
},
{
"category": "self",
"summary": "SUSE Bug 1264590",
"url": "https://bugzilla.suse.com/1264590"
},
{
"category": "self",
"summary": "SUSE Bug 1264592",
"url": "https://bugzilla.suse.com/1264592"
},
{
"category": "self",
"summary": "SUSE Bug 1264594",
"url": "https://bugzilla.suse.com/1264594"
},
{
"category": "self",
"summary": "SUSE Bug 1264598",
"url": "https://bugzilla.suse.com/1264598"
},
{
"category": "self",
"summary": "SUSE Bug 1264600",
"url": "https://bugzilla.suse.com/1264600"
},
{
"category": "self",
"summary": "SUSE Bug 1264601",
"url": "https://bugzilla.suse.com/1264601"
},
{
"category": "self",
"summary": "SUSE Bug 1264613",
"url": "https://bugzilla.suse.com/1264613"
},
{
"category": "self",
"summary": "SUSE Bug 1264615",
"url": "https://bugzilla.suse.com/1264615"
},
{
"category": "self",
"summary": "SUSE Bug 1264616",
"url": "https://bugzilla.suse.com/1264616"
},
{
"category": "self",
"summary": "SUSE Bug 1264618",
"url": "https://bugzilla.suse.com/1264618"
},
{
"category": "self",
"summary": "SUSE Bug 1264620",
"url": "https://bugzilla.suse.com/1264620"
},
{
"category": "self",
"summary": "SUSE Bug 1264626",
"url": "https://bugzilla.suse.com/1264626"
},
{
"category": "self",
"summary": "SUSE Bug 1264630",
"url": "https://bugzilla.suse.com/1264630"
},
{
"category": "self",
"summary": "SUSE Bug 1264633",
"url": "https://bugzilla.suse.com/1264633"
},
{
"category": "self",
"summary": "SUSE Bug 1264637",
"url": "https://bugzilla.suse.com/1264637"
},
{
"category": "self",
"summary": "SUSE Bug 1264640",
"url": "https://bugzilla.suse.com/1264640"
},
{
"category": "self",
"summary": "SUSE Bug 1264642",
"url": "https://bugzilla.suse.com/1264642"
},
{
"category": "self",
"summary": "SUSE Bug 1264645",
"url": "https://bugzilla.suse.com/1264645"
},
{
"category": "self",
"summary": "SUSE Bug 1264668",
"url": "https://bugzilla.suse.com/1264668"
},
{
"category": "self",
"summary": "SUSE Bug 1264677",
"url": "https://bugzilla.suse.com/1264677"
},
{
"category": "self",
"summary": "SUSE Bug 1264712",
"url": "https://bugzilla.suse.com/1264712"
},
{
"category": "self",
"summary": "SUSE Bug 1264746",
"url": "https://bugzilla.suse.com/1264746"
},
{
"category": "self",
"summary": "SUSE Bug 1264758",
"url": "https://bugzilla.suse.com/1264758"
},
{
"category": "self",
"summary": "SUSE Bug 1264768",
"url": "https://bugzilla.suse.com/1264768"
},
{
"category": "self",
"summary": "SUSE Bug 1264779",
"url": "https://bugzilla.suse.com/1264779"
},
{
"category": "self",
"summary": "SUSE Bug 1264780",
"url": "https://bugzilla.suse.com/1264780"
},
{
"category": "self",
"summary": "SUSE Bug 1264782",
"url": "https://bugzilla.suse.com/1264782"
},
{
"category": "self",
"summary": "SUSE Bug 1264783",
"url": "https://bugzilla.suse.com/1264783"
},
{
"category": "self",
"summary": "SUSE Bug 1264785",
"url": "https://bugzilla.suse.com/1264785"
},
{
"category": "self",
"summary": "SUSE Bug 1264791",
"url": "https://bugzilla.suse.com/1264791"
},
{
"category": "self",
"summary": "SUSE Bug 1264793",
"url": "https://bugzilla.suse.com/1264793"
},
{
"category": "self",
"summary": "SUSE Bug 1264795",
"url": "https://bugzilla.suse.com/1264795"
},
{
"category": "self",
"summary": "SUSE Bug 1264803",
"url": "https://bugzilla.suse.com/1264803"
},
{
"category": "self",
"summary": "SUSE Bug 1264809",
"url": "https://bugzilla.suse.com/1264809"
},
{
"category": "self",
"summary": "SUSE Bug 1264816",
"url": "https://bugzilla.suse.com/1264816"
},
{
"category": "self",
"summary": "SUSE Bug 1264819",
"url": "https://bugzilla.suse.com/1264819"
},
{
"category": "self",
"summary": "SUSE Bug 1264821",
"url": "https://bugzilla.suse.com/1264821"
},
{
"category": "self",
"summary": "SUSE Bug 1264826",
"url": "https://bugzilla.suse.com/1264826"
},
{
"category": "self",
"summary": "SUSE Bug 1264827",
"url": "https://bugzilla.suse.com/1264827"
},
{
"category": "self",
"summary": "SUSE Bug 1264830",
"url": "https://bugzilla.suse.com/1264830"
},
{
"category": "self",
"summary": "SUSE Bug 1264832",
"url": "https://bugzilla.suse.com/1264832"
},
{
"category": "self",
"summary": "SUSE Bug 1264844",
"url": "https://bugzilla.suse.com/1264844"
},
{
"category": "self",
"summary": "SUSE Bug 1264988",
"url": "https://bugzilla.suse.com/1264988"
},
{
"category": "self",
"summary": "SUSE Bug 1264991",
"url": "https://bugzilla.suse.com/1264991"
},
{
"category": "self",
"summary": "SUSE Bug 1265009",
"url": "https://bugzilla.suse.com/1265009"
},
{
"category": "self",
"summary": "SUSE Bug 1265032",
"url": "https://bugzilla.suse.com/1265032"
},
{
"category": "self",
"summary": "SUSE Bug 1265037",
"url": "https://bugzilla.suse.com/1265037"
},
{
"category": "self",
"summary": "SUSE Bug 1265047",
"url": "https://bugzilla.suse.com/1265047"
},
{
"category": "self",
"summary": "SUSE Bug 1265054",
"url": "https://bugzilla.suse.com/1265054"
},
{
"category": "self",
"summary": "SUSE Bug 1265074",
"url": "https://bugzilla.suse.com/1265074"
},
{
"category": "self",
"summary": "SUSE Bug 1265078",
"url": "https://bugzilla.suse.com/1265078"
},
{
"category": "self",
"summary": "SUSE Bug 1265080",
"url": "https://bugzilla.suse.com/1265080"
},
{
"category": "self",
"summary": "SUSE Bug 1265089",
"url": "https://bugzilla.suse.com/1265089"
},
{
"category": "self",
"summary": "SUSE Bug 1265092",
"url": "https://bugzilla.suse.com/1265092"
},
{
"category": "self",
"summary": "SUSE Bug 1265093",
"url": "https://bugzilla.suse.com/1265093"
},
{
"category": "self",
"summary": "SUSE Bug 1265096",
"url": "https://bugzilla.suse.com/1265096"
},
{
"category": "self",
"summary": "SUSE Bug 1265100",
"url": "https://bugzilla.suse.com/1265100"
},
{
"category": "self",
"summary": "SUSE Bug 1265101",
"url": "https://bugzilla.suse.com/1265101"
},
{
"category": "self",
"summary": "SUSE Bug 1265102",
"url": "https://bugzilla.suse.com/1265102"
},
{
"category": "self",
"summary": "SUSE Bug 1265105",
"url": "https://bugzilla.suse.com/1265105"
},
{
"category": "self",
"summary": "SUSE Bug 1265133",
"url": "https://bugzilla.suse.com/1265133"
},
{
"category": "self",
"summary": "SUSE Bug 1265138",
"url": "https://bugzilla.suse.com/1265138"
},
{
"category": "self",
"summary": "SUSE Bug 1265141",
"url": "https://bugzilla.suse.com/1265141"
},
{
"category": "self",
"summary": "SUSE Bug 1265249",
"url": "https://bugzilla.suse.com/1265249"
},
{
"category": "self",
"summary": "SUSE Bug 1265257",
"url": "https://bugzilla.suse.com/1265257"
},
{
"category": "self",
"summary": "SUSE Bug 1265264",
"url": "https://bugzilla.suse.com/1265264"
},
{
"category": "self",
"summary": "SUSE Bug 1265308",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "self",
"summary": "SUSE Bug 1265627",
"url": "https://bugzilla.suse.com/1265627"
},
{
"category": "self",
"summary": "SUSE Bug 1266000",
"url": "https://bugzilla.suse.com/1266000"
},
{
"category": "self",
"summary": "SUSE Bug 1266003",
"url": "https://bugzilla.suse.com/1266003"
},
{
"category": "self",
"summary": "SUSE Bug 1266238",
"url": "https://bugzilla.suse.com/1266238"
},
{
"category": "self",
"summary": "SUSE Bug 1266290",
"url": "https://bugzilla.suse.com/1266290"
},
{
"category": "self",
"summary": "SUSE Bug 1266399",
"url": "https://bugzilla.suse.com/1266399"
},
{
"category": "self",
"summary": "SUSE Bug 1266411",
"url": "https://bugzilla.suse.com/1266411"
},
{
"category": "self",
"summary": "SUSE Bug 1266412",
"url": "https://bugzilla.suse.com/1266412"
},
{
"category": "self",
"summary": "SUSE Bug 1266467",
"url": "https://bugzilla.suse.com/1266467"
},
{
"category": "self",
"summary": "SUSE Bug 1266468",
"url": "https://bugzilla.suse.com/1266468"
},
{
"category": "self",
"summary": "SUSE Bug 1266677",
"url": "https://bugzilla.suse.com/1266677"
},
{
"category": "self",
"summary": "SUSE Bug 1266679",
"url": "https://bugzilla.suse.com/1266679"
},
{
"category": "self",
"summary": "SUSE Bug 1266684",
"url": "https://bugzilla.suse.com/1266684"
},
{
"category": "self",
"summary": "SUSE Bug 1266685",
"url": "https://bugzilla.suse.com/1266685"
},
{
"category": "self",
"summary": "SUSE Bug 1266688",
"url": "https://bugzilla.suse.com/1266688"
},
{
"category": "self",
"summary": "SUSE Bug 1266692",
"url": "https://bugzilla.suse.com/1266692"
},
{
"category": "self",
"summary": "SUSE Bug 1266695",
"url": "https://bugzilla.suse.com/1266695"
},
{
"category": "self",
"summary": "SUSE Bug 1266703",
"url": "https://bugzilla.suse.com/1266703"
},
{
"category": "self",
"summary": "SUSE Bug 1266707",
"url": "https://bugzilla.suse.com/1266707"
},
{
"category": "self",
"summary": "SUSE Bug 1266710",
"url": "https://bugzilla.suse.com/1266710"
},
{
"category": "self",
"summary": "SUSE Bug 1266715",
"url": "https://bugzilla.suse.com/1266715"
},
{
"category": "self",
"summary": "SUSE Bug 1266721",
"url": "https://bugzilla.suse.com/1266721"
},
{
"category": "self",
"summary": "SUSE Bug 1266729",
"url": "https://bugzilla.suse.com/1266729"
},
{
"category": "self",
"summary": "SUSE Bug 1266732",
"url": "https://bugzilla.suse.com/1266732"
},
{
"category": "self",
"summary": "SUSE Bug 1266739",
"url": "https://bugzilla.suse.com/1266739"
},
{
"category": "self",
"summary": "SUSE Bug 1266741",
"url": "https://bugzilla.suse.com/1266741"
},
{
"category": "self",
"summary": "SUSE Bug 1266743",
"url": "https://bugzilla.suse.com/1266743"
},
{
"category": "self",
"summary": "SUSE Bug 1266744",
"url": "https://bugzilla.suse.com/1266744"
},
{
"category": "self",
"summary": "SUSE Bug 1266751",
"url": "https://bugzilla.suse.com/1266751"
},
{
"category": "self",
"summary": "SUSE Bug 1266755",
"url": "https://bugzilla.suse.com/1266755"
},
{
"category": "self",
"summary": "SUSE Bug 1266758",
"url": "https://bugzilla.suse.com/1266758"
},
{
"category": "self",
"summary": "SUSE Bug 1266762",
"url": "https://bugzilla.suse.com/1266762"
},
{
"category": "self",
"summary": "SUSE Bug 1266774",
"url": "https://bugzilla.suse.com/1266774"
},
{
"category": "self",
"summary": "SUSE Bug 1266777",
"url": "https://bugzilla.suse.com/1266777"
},
{
"category": "self",
"summary": "SUSE Bug 1266780",
"url": "https://bugzilla.suse.com/1266780"
},
{
"category": "self",
"summary": "SUSE Bug 1266806",
"url": "https://bugzilla.suse.com/1266806"
},
{
"category": "self",
"summary": "SUSE Bug 1266813",
"url": "https://bugzilla.suse.com/1266813"
},
{
"category": "self",
"summary": "SUSE Bug 1266831",
"url": "https://bugzilla.suse.com/1266831"
},
{
"category": "self",
"summary": "SUSE Bug 1266832",
"url": "https://bugzilla.suse.com/1266832"
},
{
"category": "self",
"summary": "SUSE Bug 1266834",
"url": "https://bugzilla.suse.com/1266834"
},
{
"category": "self",
"summary": "SUSE Bug 1266836",
"url": "https://bugzilla.suse.com/1266836"
},
{
"category": "self",
"summary": "SUSE Bug 1266842",
"url": "https://bugzilla.suse.com/1266842"
},
{
"category": "self",
"summary": "SUSE Bug 1266846",
"url": "https://bugzilla.suse.com/1266846"
},
{
"category": "self",
"summary": "SUSE Bug 1266850",
"url": "https://bugzilla.suse.com/1266850"
},
{
"category": "self",
"summary": "SUSE Bug 1266854",
"url": "https://bugzilla.suse.com/1266854"
},
{
"category": "self",
"summary": "SUSE Bug 1266855",
"url": "https://bugzilla.suse.com/1266855"
},
{
"category": "self",
"summary": "SUSE Bug 1266863",
"url": "https://bugzilla.suse.com/1266863"
},
{
"category": "self",
"summary": "SUSE Bug 1266864",
"url": "https://bugzilla.suse.com/1266864"
},
{
"category": "self",
"summary": "SUSE Bug 1266869",
"url": "https://bugzilla.suse.com/1266869"
},
{
"category": "self",
"summary": "SUSE Bug 1266872",
"url": "https://bugzilla.suse.com/1266872"
},
{
"category": "self",
"summary": "SUSE Bug 1266876",
"url": "https://bugzilla.suse.com/1266876"
},
{
"category": "self",
"summary": "SUSE Bug 1266879",
"url": "https://bugzilla.suse.com/1266879"
},
{
"category": "self",
"summary": "SUSE Bug 1266880",
"url": "https://bugzilla.suse.com/1266880"
},
{
"category": "self",
"summary": "SUSE Bug 1266884",
"url": "https://bugzilla.suse.com/1266884"
},
{
"category": "self",
"summary": "SUSE Bug 1266886",
"url": "https://bugzilla.suse.com/1266886"
},
{
"category": "self",
"summary": "SUSE Bug 1266890",
"url": "https://bugzilla.suse.com/1266890"
},
{
"category": "self",
"summary": "SUSE Bug 1266891",
"url": "https://bugzilla.suse.com/1266891"
},
{
"category": "self",
"summary": "SUSE Bug 1266894",
"url": "https://bugzilla.suse.com/1266894"
},
{
"category": "self",
"summary": "SUSE Bug 1266896",
"url": "https://bugzilla.suse.com/1266896"
},
{
"category": "self",
"summary": "SUSE Bug 1266898",
"url": "https://bugzilla.suse.com/1266898"
},
{
"category": "self",
"summary": "SUSE Bug 1266900",
"url": "https://bugzilla.suse.com/1266900"
},
{
"category": "self",
"summary": "SUSE Bug 1266904",
"url": "https://bugzilla.suse.com/1266904"
},
{
"category": "self",
"summary": "SUSE Bug 1266908",
"url": "https://bugzilla.suse.com/1266908"
},
{
"category": "self",
"summary": "SUSE Bug 1266910",
"url": "https://bugzilla.suse.com/1266910"
},
{
"category": "self",
"summary": "SUSE Bug 1266913",
"url": "https://bugzilla.suse.com/1266913"
},
{
"category": "self",
"summary": "SUSE Bug 1266917",
"url": "https://bugzilla.suse.com/1266917"
},
{
"category": "self",
"summary": "SUSE Bug 1266918",
"url": "https://bugzilla.suse.com/1266918"
},
{
"category": "self",
"summary": "SUSE Bug 1266920",
"url": "https://bugzilla.suse.com/1266920"
},
{
"category": "self",
"summary": "SUSE Bug 1266939",
"url": "https://bugzilla.suse.com/1266939"
},
{
"category": "self",
"summary": "SUSE Bug 1266947",
"url": "https://bugzilla.suse.com/1266947"
},
{
"category": "self",
"summary": "SUSE Bug 1267021",
"url": "https://bugzilla.suse.com/1267021"
},
{
"category": "self",
"summary": "SUSE Bug 1267025",
"url": "https://bugzilla.suse.com/1267025"
},
{
"category": "self",
"summary": "SUSE Bug 1267027",
"url": "https://bugzilla.suse.com/1267027"
},
{
"category": "self",
"summary": "SUSE Bug 1267198",
"url": "https://bugzilla.suse.com/1267198"
},
{
"category": "self",
"summary": "SUSE Bug 1267203",
"url": "https://bugzilla.suse.com/1267203"
},
{
"category": "self",
"summary": "SUSE Bug 1267204",
"url": "https://bugzilla.suse.com/1267204"
},
{
"category": "self",
"summary": "SUSE Bug 1267210",
"url": "https://bugzilla.suse.com/1267210"
},
{
"category": "self",
"summary": "SUSE Bug 1267226",
"url": "https://bugzilla.suse.com/1267226"
},
{
"category": "self",
"summary": "SUSE Bug 1267367",
"url": "https://bugzilla.suse.com/1267367"
},
{
"category": "self",
"summary": "SUSE Bug 1267375",
"url": "https://bugzilla.suse.com/1267375"
},
{
"category": "self",
"summary": "SUSE Bug 1267384",
"url": "https://bugzilla.suse.com/1267384"
},
{
"category": "self",
"summary": "SUSE Bug 1267432",
"url": "https://bugzilla.suse.com/1267432"
},
{
"category": "self",
"summary": "SUSE Bug 1267435",
"url": "https://bugzilla.suse.com/1267435"
},
{
"category": "self",
"summary": "SUSE Bug 1267436",
"url": "https://bugzilla.suse.com/1267436"
},
{
"category": "self",
"summary": "SUSE Bug 1267439",
"url": "https://bugzilla.suse.com/1267439"
},
{
"category": "self",
"summary": "SUSE Bug 1267445",
"url": "https://bugzilla.suse.com/1267445"
},
{
"category": "self",
"summary": "SUSE Bug 1267448",
"url": "https://bugzilla.suse.com/1267448"
},
{
"category": "self",
"summary": "SUSE Bug 1267449",
"url": "https://bugzilla.suse.com/1267449"
},
{
"category": "self",
"summary": "SUSE Bug 1267466",
"url": "https://bugzilla.suse.com/1267466"
},
{
"category": "self",
"summary": "SUSE Bug 1267472",
"url": "https://bugzilla.suse.com/1267472"
},
{
"category": "self",
"summary": "SUSE Bug 1267473",
"url": "https://bugzilla.suse.com/1267473"
},
{
"category": "self",
"summary": "SUSE Bug 1267479",
"url": "https://bugzilla.suse.com/1267479"
},
{
"category": "self",
"summary": "SUSE Bug 1267491",
"url": "https://bugzilla.suse.com/1267491"
},
{
"category": "self",
"summary": "SUSE Bug 1267496",
"url": "https://bugzilla.suse.com/1267496"
},
{
"category": "self",
"summary": "SUSE Bug 1267497",
"url": "https://bugzilla.suse.com/1267497"
},
{
"category": "self",
"summary": "SUSE Bug 1267502",
"url": "https://bugzilla.suse.com/1267502"
},
{
"category": "self",
"summary": "SUSE Bug 1267524",
"url": "https://bugzilla.suse.com/1267524"
},
{
"category": "self",
"summary": "SUSE Bug 1267555",
"url": "https://bugzilla.suse.com/1267555"
},
{
"category": "self",
"summary": "SUSE Bug 1267565",
"url": "https://bugzilla.suse.com/1267565"
},
{
"category": "self",
"summary": "SUSE Bug 1267570",
"url": "https://bugzilla.suse.com/1267570"
},
{
"category": "self",
"summary": "SUSE Bug 1267571",
"url": "https://bugzilla.suse.com/1267571"
},
{
"category": "self",
"summary": "SUSE Bug 1267583",
"url": "https://bugzilla.suse.com/1267583"
},
{
"category": "self",
"summary": "SUSE Bug 1267584",
"url": "https://bugzilla.suse.com/1267584"
},
{
"category": "self",
"summary": "SUSE Bug 1267592",
"url": "https://bugzilla.suse.com/1267592"
},
{
"category": "self",
"summary": "SUSE Bug 1267595",
"url": "https://bugzilla.suse.com/1267595"
},
{
"category": "self",
"summary": "SUSE Bug 1267596",
"url": "https://bugzilla.suse.com/1267596"
},
{
"category": "self",
"summary": "SUSE Bug 1267615",
"url": "https://bugzilla.suse.com/1267615"
},
{
"category": "self",
"summary": "SUSE Bug 1267616",
"url": "https://bugzilla.suse.com/1267616"
},
{
"category": "self",
"summary": "SUSE Bug 1267623",
"url": "https://bugzilla.suse.com/1267623"
},
{
"category": "self",
"summary": "SUSE Bug 1267627",
"url": "https://bugzilla.suse.com/1267627"
},
{
"category": "self",
"summary": "SUSE Bug 1267630",
"url": "https://bugzilla.suse.com/1267630"
},
{
"category": "self",
"summary": "SUSE Bug 1267632",
"url": "https://bugzilla.suse.com/1267632"
},
{
"category": "self",
"summary": "SUSE Bug 1267636",
"url": "https://bugzilla.suse.com/1267636"
},
{
"category": "self",
"summary": "SUSE Bug 1267638",
"url": "https://bugzilla.suse.com/1267638"
},
{
"category": "self",
"summary": "SUSE Bug 1267643",
"url": "https://bugzilla.suse.com/1267643"
},
{
"category": "self",
"summary": "SUSE Bug 1267646",
"url": "https://bugzilla.suse.com/1267646"
},
{
"category": "self",
"summary": "SUSE Bug 1267649",
"url": "https://bugzilla.suse.com/1267649"
},
{
"category": "self",
"summary": "SUSE Bug 1267656",
"url": "https://bugzilla.suse.com/1267656"
},
{
"category": "self",
"summary": "SUSE Bug 1267661",
"url": "https://bugzilla.suse.com/1267661"
},
{
"category": "self",
"summary": "SUSE Bug 1267662",
"url": "https://bugzilla.suse.com/1267662"
},
{
"category": "self",
"summary": "SUSE Bug 1267666",
"url": "https://bugzilla.suse.com/1267666"
},
{
"category": "self",
"summary": "SUSE Bug 1267667",
"url": "https://bugzilla.suse.com/1267667"
},
{
"category": "self",
"summary": "SUSE Bug 1267669",
"url": "https://bugzilla.suse.com/1267669"
},
{
"category": "self",
"summary": "SUSE Bug 1267676",
"url": "https://bugzilla.suse.com/1267676"
},
{
"category": "self",
"summary": "SUSE Bug 1267678",
"url": "https://bugzilla.suse.com/1267678"
},
{
"category": "self",
"summary": "SUSE Bug 1267680",
"url": "https://bugzilla.suse.com/1267680"
},
{
"category": "self",
"summary": "SUSE Bug 1267682",
"url": "https://bugzilla.suse.com/1267682"
},
{
"category": "self",
"summary": "SUSE Bug 1267683",
"url": "https://bugzilla.suse.com/1267683"
},
{
"category": "self",
"summary": "SUSE Bug 1267689",
"url": "https://bugzilla.suse.com/1267689"
},
{
"category": "self",
"summary": "SUSE Bug 1267690",
"url": "https://bugzilla.suse.com/1267690"
},
{
"category": "self",
"summary": "SUSE Bug 1267691",
"url": "https://bugzilla.suse.com/1267691"
},
{
"category": "self",
"summary": "SUSE Bug 1267693",
"url": "https://bugzilla.suse.com/1267693"
},
{
"category": "self",
"summary": "SUSE Bug 1267701",
"url": "https://bugzilla.suse.com/1267701"
},
{
"category": "self",
"summary": "SUSE Bug 1267702",
"url": "https://bugzilla.suse.com/1267702"
},
{
"category": "self",
"summary": "SUSE Bug 1267704",
"url": "https://bugzilla.suse.com/1267704"
},
{
"category": "self",
"summary": "SUSE Bug 1267712",
"url": "https://bugzilla.suse.com/1267712"
},
{
"category": "self",
"summary": "SUSE Bug 1267714",
"url": "https://bugzilla.suse.com/1267714"
},
{
"category": "self",
"summary": "SUSE Bug 1267715",
"url": "https://bugzilla.suse.com/1267715"
},
{
"category": "self",
"summary": "SUSE Bug 1267719",
"url": "https://bugzilla.suse.com/1267719"
},
{
"category": "self",
"summary": "SUSE Bug 1267725",
"url": "https://bugzilla.suse.com/1267725"
},
{
"category": "self",
"summary": "SUSE Bug 1267728",
"url": "https://bugzilla.suse.com/1267728"
},
{
"category": "self",
"summary": "SUSE Bug 1267922",
"url": "https://bugzilla.suse.com/1267922"
},
{
"category": "self",
"summary": "SUSE Bug 1267939",
"url": "https://bugzilla.suse.com/1267939"
},
{
"category": "self",
"summary": "SUSE Bug 1267943",
"url": "https://bugzilla.suse.com/1267943"
},
{
"category": "self",
"summary": "SUSE Bug 1267948",
"url": "https://bugzilla.suse.com/1267948"
},
{
"category": "self",
"summary": "SUSE Bug 1267968",
"url": "https://bugzilla.suse.com/1267968"
},
{
"category": "self",
"summary": "SUSE Bug 1267986",
"url": "https://bugzilla.suse.com/1267986"
},
{
"category": "self",
"summary": "SUSE Bug 1267987",
"url": "https://bugzilla.suse.com/1267987"
},
{
"category": "self",
"summary": "SUSE Bug 1267990",
"url": "https://bugzilla.suse.com/1267990"
},
{
"category": "self",
"summary": "SUSE Bug 1267995",
"url": "https://bugzilla.suse.com/1267995"
},
{
"category": "self",
"summary": "SUSE Bug 1268024",
"url": "https://bugzilla.suse.com/1268024"
},
{
"category": "self",
"summary": "SUSE Bug 1268029",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "self",
"summary": "SUSE Bug 1268220",
"url": "https://bugzilla.suse.com/1268220"
},
{
"category": "self",
"summary": "SUSE Bug 1268221",
"url": "https://bugzilla.suse.com/1268221"
},
{
"category": "self",
"summary": "SUSE Bug 1268223",
"url": "https://bugzilla.suse.com/1268223"
},
{
"category": "self",
"summary": "SUSE Bug 1268307",
"url": "https://bugzilla.suse.com/1268307"
},
{
"category": "self",
"summary": "SUSE Bug 1268659",
"url": "https://bugzilla.suse.com/1268659"
},
{
"category": "self",
"summary": "SUSE Bug 1268966",
"url": "https://bugzilla.suse.com/1268966"
},
{
"category": "self",
"summary": "SUSE Bug 1268967",
"url": "https://bugzilla.suse.com/1268967"
},
{
"category": "self",
"summary": "SUSE Bug 1268981",
"url": "https://bugzilla.suse.com/1268981"
},
{
"category": "self",
"summary": "SUSE Bug 1268983",
"url": "https://bugzilla.suse.com/1268983"
},
{
"category": "self",
"summary": "SUSE Bug 1268986",
"url": "https://bugzilla.suse.com/1268986"
},
{
"category": "self",
"summary": "SUSE Bug 1269001",
"url": "https://bugzilla.suse.com/1269001"
},
{
"category": "self",
"summary": "SUSE Bug 1269002",
"url": "https://bugzilla.suse.com/1269002"
},
{
"category": "self",
"summary": "SUSE Bug 1269003",
"url": "https://bugzilla.suse.com/1269003"
},
{
"category": "self",
"summary": "SUSE Bug 1269008",
"url": "https://bugzilla.suse.com/1269008"
},
{
"category": "self",
"summary": "SUSE Bug 1269024",
"url": "https://bugzilla.suse.com/1269024"
},
{
"category": "self",
"summary": "SUSE Bug 1269025",
"url": "https://bugzilla.suse.com/1269025"
},
{
"category": "self",
"summary": "SUSE Bug 1269027",
"url": "https://bugzilla.suse.com/1269027"
},
{
"category": "self",
"summary": "SUSE Bug 1269030",
"url": "https://bugzilla.suse.com/1269030"
},
{
"category": "self",
"summary": "SUSE Bug 1269031",
"url": "https://bugzilla.suse.com/1269031"
},
{
"category": "self",
"summary": "SUSE Bug 1269081",
"url": "https://bugzilla.suse.com/1269081"
},
{
"category": "self",
"summary": "SUSE Bug 1269094",
"url": "https://bugzilla.suse.com/1269094"
},
{
"category": "self",
"summary": "SUSE Bug 1269095",
"url": "https://bugzilla.suse.com/1269095"
},
{
"category": "self",
"summary": "SUSE Bug 1269098",
"url": "https://bugzilla.suse.com/1269098"
},
{
"category": "self",
"summary": "SUSE Bug 1269104",
"url": "https://bugzilla.suse.com/1269104"
},
{
"category": "self",
"summary": "SUSE Bug 1269106",
"url": "https://bugzilla.suse.com/1269106"
},
{
"category": "self",
"summary": "SUSE Bug 1269111",
"url": "https://bugzilla.suse.com/1269111"
},
{
"category": "self",
"summary": "SUSE Bug 1269112",
"url": "https://bugzilla.suse.com/1269112"
},
{
"category": "self",
"summary": "SUSE Bug 1269115",
"url": "https://bugzilla.suse.com/1269115"
},
{
"category": "self",
"summary": "SUSE Bug 1269116",
"url": "https://bugzilla.suse.com/1269116"
},
{
"category": "self",
"summary": "SUSE Bug 1269117",
"url": "https://bugzilla.suse.com/1269117"
},
{
"category": "self",
"summary": "SUSE Bug 1269118",
"url": "https://bugzilla.suse.com/1269118"
},
{
"category": "self",
"summary": "SUSE Bug 1269119",
"url": "https://bugzilla.suse.com/1269119"
},
{
"category": "self",
"summary": "SUSE Bug 1269124",
"url": "https://bugzilla.suse.com/1269124"
},
{
"category": "self",
"summary": "SUSE Bug 1269131",
"url": "https://bugzilla.suse.com/1269131"
},
{
"category": "self",
"summary": "SUSE Bug 1269132",
"url": "https://bugzilla.suse.com/1269132"
},
{
"category": "self",
"summary": "SUSE Bug 1269133",
"url": "https://bugzilla.suse.com/1269133"
},
{
"category": "self",
"summary": "SUSE Bug 1269134",
"url": "https://bugzilla.suse.com/1269134"
},
{
"category": "self",
"summary": "SUSE Bug 1269138",
"url": "https://bugzilla.suse.com/1269138"
},
{
"category": "self",
"summary": "SUSE Bug 1269141",
"url": "https://bugzilla.suse.com/1269141"
},
{
"category": "self",
"summary": "SUSE Bug 1269153",
"url": "https://bugzilla.suse.com/1269153"
},
{
"category": "self",
"summary": "SUSE Bug 1269154",
"url": "https://bugzilla.suse.com/1269154"
},
{
"category": "self",
"summary": "SUSE Bug 1269177",
"url": "https://bugzilla.suse.com/1269177"
},
{
"category": "self",
"summary": "SUSE Bug 1269178",
"url": "https://bugzilla.suse.com/1269178"
},
{
"category": "self",
"summary": "SUSE Bug 1269181",
"url": "https://bugzilla.suse.com/1269181"
},
{
"category": "self",
"summary": "SUSE Bug 1269185",
"url": "https://bugzilla.suse.com/1269185"
},
{
"category": "self",
"summary": "SUSE Bug 1269186",
"url": "https://bugzilla.suse.com/1269186"
},
{
"category": "self",
"summary": "SUSE Bug 1269187",
"url": "https://bugzilla.suse.com/1269187"
},
{
"category": "self",
"summary": "SUSE Bug 1269229",
"url": "https://bugzilla.suse.com/1269229"
},
{
"category": "self",
"summary": "SUSE Bug 1269233",
"url": "https://bugzilla.suse.com/1269233"
},
{
"category": "self",
"summary": "SUSE Bug 1269236",
"url": "https://bugzilla.suse.com/1269236"
},
{
"category": "self",
"summary": "SUSE Bug 1269240",
"url": "https://bugzilla.suse.com/1269240"
},
{
"category": "self",
"summary": "SUSE Bug 1269245",
"url": "https://bugzilla.suse.com/1269245"
},
{
"category": "self",
"summary": "SUSE Bug 1269254",
"url": "https://bugzilla.suse.com/1269254"
},
{
"category": "self",
"summary": "SUSE Bug 1269255",
"url": "https://bugzilla.suse.com/1269255"
},
{
"category": "self",
"summary": "SUSE Bug 1269257",
"url": "https://bugzilla.suse.com/1269257"
},
{
"category": "self",
"summary": "SUSE Bug 1269258",
"url": "https://bugzilla.suse.com/1269258"
},
{
"category": "self",
"summary": "SUSE Bug 1269270",
"url": "https://bugzilla.suse.com/1269270"
},
{
"category": "self",
"summary": "SUSE Bug 1269272",
"url": "https://bugzilla.suse.com/1269272"
},
{
"category": "self",
"summary": "SUSE Bug 1269273",
"url": "https://bugzilla.suse.com/1269273"
},
{
"category": "self",
"summary": "SUSE Bug 1269283",
"url": "https://bugzilla.suse.com/1269283"
},
{
"category": "self",
"summary": "SUSE Bug 1269289",
"url": "https://bugzilla.suse.com/1269289"
},
{
"category": "self",
"summary": "SUSE Bug 1269290",
"url": "https://bugzilla.suse.com/1269290"
},
{
"category": "self",
"summary": "SUSE Bug 1269304",
"url": "https://bugzilla.suse.com/1269304"
},
{
"category": "self",
"summary": "SUSE Bug 1269307",
"url": "https://bugzilla.suse.com/1269307"
},
{
"category": "self",
"summary": "SUSE Bug 1269318",
"url": "https://bugzilla.suse.com/1269318"
},
{
"category": "self",
"summary": "SUSE Bug 1269362",
"url": "https://bugzilla.suse.com/1269362"
},
{
"category": "self",
"summary": "SUSE Bug 1269364",
"url": "https://bugzilla.suse.com/1269364"
},
{
"category": "self",
"summary": "SUSE Bug 1269376",
"url": "https://bugzilla.suse.com/1269376"
},
{
"category": "self",
"summary": "SUSE Bug 1269378",
"url": "https://bugzilla.suse.com/1269378"
},
{
"category": "self",
"summary": "SUSE Bug 1269383",
"url": "https://bugzilla.suse.com/1269383"
},
{
"category": "self",
"summary": "SUSE Bug 1269385",
"url": "https://bugzilla.suse.com/1269385"
},
{
"category": "self",
"summary": "SUSE Bug 1269386",
"url": "https://bugzilla.suse.com/1269386"
},
{
"category": "self",
"summary": "SUSE Bug 1269403",
"url": "https://bugzilla.suse.com/1269403"
},
{
"category": "self",
"summary": "SUSE Bug 1269404",
"url": "https://bugzilla.suse.com/1269404"
},
{
"category": "self",
"summary": "SUSE Bug 1269410",
"url": "https://bugzilla.suse.com/1269410"
},
{
"category": "self",
"summary": "SUSE Bug 1269414",
"url": "https://bugzilla.suse.com/1269414"
},
{
"category": "self",
"summary": "SUSE Bug 1269505",
"url": "https://bugzilla.suse.com/1269505"
},
{
"category": "self",
"summary": "SUSE Bug 1269512",
"url": "https://bugzilla.suse.com/1269512"
},
{
"category": "self",
"summary": "SUSE Bug 1269513",
"url": "https://bugzilla.suse.com/1269513"
},
{
"category": "self",
"summary": "SUSE Bug 1269577",
"url": "https://bugzilla.suse.com/1269577"
},
{
"category": "self",
"summary": "SUSE Bug 1269633",
"url": "https://bugzilla.suse.com/1269633"
},
{
"category": "self",
"summary": "SUSE Bug 1269643",
"url": "https://bugzilla.suse.com/1269643"
},
{
"category": "self",
"summary": "SUSE Bug 1269644",
"url": "https://bugzilla.suse.com/1269644"
},
{
"category": "self",
"summary": "SUSE Bug 1269652",
"url": "https://bugzilla.suse.com/1269652"
},
{
"category": "self",
"summary": "SUSE Bug 1269654",
"url": "https://bugzilla.suse.com/1269654"
},
{
"category": "self",
"summary": "SUSE Bug 1269658",
"url": "https://bugzilla.suse.com/1269658"
},
{
"category": "self",
"summary": "SUSE Bug 1269659",
"url": "https://bugzilla.suse.com/1269659"
},
{
"category": "self",
"summary": "SUSE Bug 1269660",
"url": "https://bugzilla.suse.com/1269660"
},
{
"category": "self",
"summary": "SUSE Bug 1269661",
"url": "https://bugzilla.suse.com/1269661"
},
{
"category": "self",
"summary": "SUSE Bug 1269663",
"url": "https://bugzilla.suse.com/1269663"
},
{
"category": "self",
"summary": "SUSE Bug 1269669",
"url": "https://bugzilla.suse.com/1269669"
},
{
"category": "self",
"summary": "SUSE Bug 1269670",
"url": "https://bugzilla.suse.com/1269670"
},
{
"category": "self",
"summary": "SUSE Bug 1269672",
"url": "https://bugzilla.suse.com/1269672"
},
{
"category": "self",
"summary": "SUSE Bug 1269674",
"url": "https://bugzilla.suse.com/1269674"
},
{
"category": "self",
"summary": "SUSE Bug 1269677",
"url": "https://bugzilla.suse.com/1269677"
},
{
"category": "self",
"summary": "SUSE Bug 1269682",
"url": "https://bugzilla.suse.com/1269682"
},
{
"category": "self",
"summary": "SUSE Bug 1269684",
"url": "https://bugzilla.suse.com/1269684"
},
{
"category": "self",
"summary": "SUSE Bug 1269688",
"url": "https://bugzilla.suse.com/1269688"
},
{
"category": "self",
"summary": "SUSE Bug 1269689",
"url": "https://bugzilla.suse.com/1269689"
},
{
"category": "self",
"summary": "SUSE Bug 1269694",
"url": "https://bugzilla.suse.com/1269694"
},
{
"category": "self",
"summary": "SUSE Bug 1269697",
"url": "https://bugzilla.suse.com/1269697"
},
{
"category": "self",
"summary": "SUSE Bug 1269709",
"url": "https://bugzilla.suse.com/1269709"
},
{
"category": "self",
"summary": "SUSE Bug 1269711",
"url": "https://bugzilla.suse.com/1269711"
},
{
"category": "self",
"summary": "SUSE Bug 1269714",
"url": "https://bugzilla.suse.com/1269714"
},
{
"category": "self",
"summary": "SUSE Bug 1269719",
"url": "https://bugzilla.suse.com/1269719"
},
{
"category": "self",
"summary": "SUSE Bug 1269726",
"url": "https://bugzilla.suse.com/1269726"
},
{
"category": "self",
"summary": "SUSE Bug 1269733",
"url": "https://bugzilla.suse.com/1269733"
},
{
"category": "self",
"summary": "SUSE Bug 1269734",
"url": "https://bugzilla.suse.com/1269734"
},
{
"category": "self",
"summary": "SUSE Bug 1269772",
"url": "https://bugzilla.suse.com/1269772"
},
{
"category": "self",
"summary": "SUSE Bug 1269773",
"url": "https://bugzilla.suse.com/1269773"
},
{
"category": "self",
"summary": "SUSE Bug 1269786",
"url": "https://bugzilla.suse.com/1269786"
},
{
"category": "self",
"summary": "SUSE Bug 1269796",
"url": "https://bugzilla.suse.com/1269796"
},
{
"category": "self",
"summary": "SUSE Bug 1269797",
"url": "https://bugzilla.suse.com/1269797"
},
{
"category": "self",
"summary": "SUSE Bug 1269808",
"url": "https://bugzilla.suse.com/1269808"
},
{
"category": "self",
"summary": "SUSE Bug 1269810",
"url": "https://bugzilla.suse.com/1269810"
},
{
"category": "self",
"summary": "SUSE Bug 1269811",
"url": "https://bugzilla.suse.com/1269811"
},
{
"category": "self",
"summary": "SUSE Bug 1269817",
"url": "https://bugzilla.suse.com/1269817"
},
{
"category": "self",
"summary": "SUSE Bug 1269819",
"url": "https://bugzilla.suse.com/1269819"
},
{
"category": "self",
"summary": "SUSE Bug 1269826",
"url": "https://bugzilla.suse.com/1269826"
},
{
"category": "self",
"summary": "SUSE Bug 1269877",
"url": "https://bugzilla.suse.com/1269877"
},
{
"category": "self",
"summary": "SUSE Bug 1269898",
"url": "https://bugzilla.suse.com/1269898"
},
{
"category": "self",
"summary": "SUSE Bug 1269899",
"url": "https://bugzilla.suse.com/1269899"
},
{
"category": "self",
"summary": "SUSE Bug 1269904",
"url": "https://bugzilla.suse.com/1269904"
},
{
"category": "self",
"summary": "SUSE Bug 1269964",
"url": "https://bugzilla.suse.com/1269964"
},
{
"category": "self",
"summary": "SUSE Bug 1269976",
"url": "https://bugzilla.suse.com/1269976"
},
{
"category": "self",
"summary": "SUSE Bug 1269981",
"url": "https://bugzilla.suse.com/1269981"
},
{
"category": "self",
"summary": "SUSE Bug 1269984",
"url": "https://bugzilla.suse.com/1269984"
},
{
"category": "self",
"summary": "SUSE Bug 1269988",
"url": "https://bugzilla.suse.com/1269988"
},
{
"category": "self",
"summary": "SUSE Bug 1269990",
"url": "https://bugzilla.suse.com/1269990"
},
{
"category": "self",
"summary": "SUSE Bug 1269991",
"url": "https://bugzilla.suse.com/1269991"
},
{
"category": "self",
"summary": "SUSE Bug 1269994",
"url": "https://bugzilla.suse.com/1269994"
},
{
"category": "self",
"summary": "SUSE Bug 1269996",
"url": "https://bugzilla.suse.com/1269996"
},
{
"category": "self",
"summary": "SUSE Bug 1269997",
"url": "https://bugzilla.suse.com/1269997"
},
{
"category": "self",
"summary": "SUSE Bug 1269998",
"url": "https://bugzilla.suse.com/1269998"
},
{
"category": "self",
"summary": "SUSE Bug 1270000",
"url": "https://bugzilla.suse.com/1270000"
},
{
"category": "self",
"summary": "SUSE Bug 1270058",
"url": "https://bugzilla.suse.com/1270058"
},
{
"category": "self",
"summary": "SUSE Bug 1270102",
"url": "https://bugzilla.suse.com/1270102"
},
{
"category": "self",
"summary": "SUSE Bug 1270112",
"url": "https://bugzilla.suse.com/1270112"
},
{
"category": "self",
"summary": "SUSE Bug 1270113",
"url": "https://bugzilla.suse.com/1270113"
},
{
"category": "self",
"summary": "SUSE Bug 1270132",
"url": "https://bugzilla.suse.com/1270132"
},
{
"category": "self",
"summary": "SUSE Bug 1270230",
"url": "https://bugzilla.suse.com/1270230"
},
{
"category": "self",
"summary": "SUSE Bug 1270241",
"url": "https://bugzilla.suse.com/1270241"
},
{
"category": "self",
"summary": "SUSE Bug 1270244",
"url": "https://bugzilla.suse.com/1270244"
},
{
"category": "self",
"summary": "SUSE Bug 1270248",
"url": "https://bugzilla.suse.com/1270248"
},
{
"category": "self",
"summary": "SUSE Bug 1270249",
"url": "https://bugzilla.suse.com/1270249"
},
{
"category": "self",
"summary": "SUSE Bug 1270260",
"url": "https://bugzilla.suse.com/1270260"
},
{
"category": "self",
"summary": "SUSE Bug 1271349",
"url": "https://bugzilla.suse.com/1271349"
},
{
"category": "self",
"summary": "SUSE Bug 1271366",
"url": "https://bugzilla.suse.com/1271366"
},
{
"category": "self",
"summary": "SUSE Bug 1271368",
"url": "https://bugzilla.suse.com/1271368"
},
{
"category": "self",
"summary": "SUSE Bug 1271526",
"url": "https://bugzilla.suse.com/1271526"
},
{
"category": "self",
"summary": "SUSE Bug 1271717",
"url": "https://bugzilla.suse.com/1271717"
},
{
"category": "self",
"summary": "SUSE Bug 1271731",
"url": "https://bugzilla.suse.com/1271731"
},
{
"category": "self",
"summary": "SUSE Bug 1271813",
"url": "https://bugzilla.suse.com/1271813"
},
{
"category": "self",
"summary": "SUSE Bug 1271818",
"url": "https://bugzilla.suse.com/1271818"
},
{
"category": "self",
"summary": "SUSE Bug 1271825",
"url": "https://bugzilla.suse.com/1271825"
},
{
"category": "self",
"summary": "SUSE Bug 1271826",
"url": "https://bugzilla.suse.com/1271826"
},
{
"category": "self",
"summary": "SUSE Bug 1271827",
"url": "https://bugzilla.suse.com/1271827"
},
{
"category": "self",
"summary": "SUSE Bug 1271831",
"url": "https://bugzilla.suse.com/1271831"
},
{
"category": "self",
"summary": "SUSE Bug 1271832",
"url": "https://bugzilla.suse.com/1271832"
},
{
"category": "self",
"summary": "SUSE Bug 1271833",
"url": "https://bugzilla.suse.com/1271833"
},
{
"category": "self",
"summary": "SUSE Bug 1271834",
"url": "https://bugzilla.suse.com/1271834"
},
{
"category": "self",
"summary": "SUSE Bug 1271858",
"url": "https://bugzilla.suse.com/1271858"
},
{
"category": "self",
"summary": "SUSE Bug 1271866",
"url": "https://bugzilla.suse.com/1271866"
},
{
"category": "self",
"summary": "SUSE Bug 1271869",
"url": "https://bugzilla.suse.com/1271869"
},
{
"category": "self",
"summary": "SUSE Bug 1271870",
"url": "https://bugzilla.suse.com/1271870"
},
{
"category": "self",
"summary": "SUSE Bug 1271899",
"url": "https://bugzilla.suse.com/1271899"
},
{
"category": "self",
"summary": "SUSE Bug 1271904",
"url": "https://bugzilla.suse.com/1271904"
},
{
"category": "self",
"summary": "SUSE Bug 1271908",
"url": "https://bugzilla.suse.com/1271908"
},
{
"category": "self",
"summary": "SUSE Bug 1271912",
"url": "https://bugzilla.suse.com/1271912"
},
{
"category": "self",
"summary": "SUSE Bug 1271937",
"url": "https://bugzilla.suse.com/1271937"
},
{
"category": "self",
"summary": "SUSE Bug 1271955",
"url": "https://bugzilla.suse.com/1271955"
},
{
"category": "self",
"summary": "SUSE Bug 1271964",
"url": "https://bugzilla.suse.com/1271964"
},
{
"category": "self",
"summary": "SUSE Bug 1271967",
"url": "https://bugzilla.suse.com/1271967"
},
{
"category": "self",
"summary": "SUSE Bug 1272146",
"url": "https://bugzilla.suse.com/1272146"
},
{
"category": "self",
"summary": "SUSE Bug 1272149",
"url": "https://bugzilla.suse.com/1272149"
},
{
"category": "self",
"summary": "SUSE Bug 1272176",
"url": "https://bugzilla.suse.com/1272176"
},
{
"category": "self",
"summary": "SUSE Bug 1272180",
"url": "https://bugzilla.suse.com/1272180"
},
{
"category": "self",
"summary": "SUSE Bug 1272183",
"url": "https://bugzilla.suse.com/1272183"
},
{
"category": "self",
"summary": "SUSE Bug 1272187",
"url": "https://bugzilla.suse.com/1272187"
},
{
"category": "self",
"summary": "SUSE Bug 1272194",
"url": "https://bugzilla.suse.com/1272194"
},
{
"category": "self",
"summary": "SUSE Bug 1272197",
"url": "https://bugzilla.suse.com/1272197"
},
{
"category": "self",
"summary": "SUSE Bug 1272204",
"url": "https://bugzilla.suse.com/1272204"
},
{
"category": "self",
"summary": "SUSE Bug 1272207",
"url": "https://bugzilla.suse.com/1272207"
},
{
"category": "self",
"summary": "SUSE Bug 1272211",
"url": "https://bugzilla.suse.com/1272211"
},
{
"category": "self",
"summary": "SUSE Bug 1272242",
"url": "https://bugzilla.suse.com/1272242"
},
{
"category": "self",
"summary": "SUSE Bug 1272246",
"url": "https://bugzilla.suse.com/1272246"
},
{
"category": "self",
"summary": "SUSE Bug 1272263",
"url": "https://bugzilla.suse.com/1272263"
},
{
"category": "self",
"summary": "SUSE Bug 1272268",
"url": "https://bugzilla.suse.com/1272268"
},
{
"category": "self",
"summary": "SUSE Bug 1272282",
"url": "https://bugzilla.suse.com/1272282"
},
{
"category": "self",
"summary": "SUSE Bug 1272296",
"url": "https://bugzilla.suse.com/1272296"
},
{
"category": "self",
"summary": "SUSE Bug 1272360",
"url": "https://bugzilla.suse.com/1272360"
},
{
"category": "self",
"summary": "SUSE Bug 1272361",
"url": "https://bugzilla.suse.com/1272361"
},
{
"category": "self",
"summary": "SUSE Bug 1272362",
"url": "https://bugzilla.suse.com/1272362"
},
{
"category": "self",
"summary": "SUSE Bug 1272373",
"url": "https://bugzilla.suse.com/1272373"
},
{
"category": "self",
"summary": "SUSE Bug 1272374",
"url": "https://bugzilla.suse.com/1272374"
},
{
"category": "self",
"summary": "SUSE Bug 1272380",
"url": "https://bugzilla.suse.com/1272380"
},
{
"category": "self",
"summary": "SUSE Bug 1272384",
"url": "https://bugzilla.suse.com/1272384"
},
{
"category": "self",
"summary": "SUSE Bug 1272387",
"url": "https://bugzilla.suse.com/1272387"
},
{
"category": "self",
"summary": "SUSE Bug 1272389",
"url": "https://bugzilla.suse.com/1272389"
},
{
"category": "self",
"summary": "SUSE Bug 1272406",
"url": "https://bugzilla.suse.com/1272406"
},
{
"category": "self",
"summary": "SUSE Bug 1272434",
"url": "https://bugzilla.suse.com/1272434"
},
{
"category": "self",
"summary": "SUSE Bug 1272466",
"url": "https://bugzilla.suse.com/1272466"
},
{
"category": "self",
"summary": "SUSE Bug 1272467",
"url": "https://bugzilla.suse.com/1272467"
},
{
"category": "self",
"summary": "SUSE Bug 1272468",
"url": "https://bugzilla.suse.com/1272468"
},
{
"category": "self",
"summary": "SUSE Bug 1272470",
"url": "https://bugzilla.suse.com/1272470"
},
{
"category": "self",
"summary": "SUSE Bug 1272472",
"url": "https://bugzilla.suse.com/1272472"
},
{
"category": "self",
"summary": "SUSE Bug 1272474",
"url": "https://bugzilla.suse.com/1272474"
},
{
"category": "self",
"summary": "SUSE Bug 1272478",
"url": "https://bugzilla.suse.com/1272478"
},
{
"category": "self",
"summary": "SUSE Bug 1272480",
"url": "https://bugzilla.suse.com/1272480"
},
{
"category": "self",
"summary": "SUSE Bug 1272482",
"url": "https://bugzilla.suse.com/1272482"
},
{
"category": "self",
"summary": "SUSE Bug 1272483",
"url": "https://bugzilla.suse.com/1272483"
},
{
"category": "self",
"summary": "SUSE Bug 1272489",
"url": "https://bugzilla.suse.com/1272489"
},
{
"category": "self",
"summary": "SUSE Bug 1272492",
"url": "https://bugzilla.suse.com/1272492"
},
{
"category": "self",
"summary": "SUSE Bug 1272494",
"url": "https://bugzilla.suse.com/1272494"
},
{
"category": "self",
"summary": "SUSE Bug 1272499",
"url": "https://bugzilla.suse.com/1272499"
},
{
"category": "self",
"summary": "SUSE Bug 1272500",
"url": "https://bugzilla.suse.com/1272500"
},
{
"category": "self",
"summary": "SUSE Bug 1272501",
"url": "https://bugzilla.suse.com/1272501"
},
{
"category": "self",
"summary": "SUSE Bug 1272513",
"url": "https://bugzilla.suse.com/1272513"
},
{
"category": "self",
"summary": "SUSE Bug 1272517",
"url": "https://bugzilla.suse.com/1272517"
},
{
"category": "self",
"summary": "SUSE Bug 1272522",
"url": "https://bugzilla.suse.com/1272522"
},
{
"category": "self",
"summary": "SUSE Bug 1272523",
"url": "https://bugzilla.suse.com/1272523"
},
{
"category": "self",
"summary": "SUSE Bug 1272573",
"url": "https://bugzilla.suse.com/1272573"
},
{
"category": "self",
"summary": "SUSE Bug 1272578",
"url": "https://bugzilla.suse.com/1272578"
},
{
"category": "self",
"summary": "SUSE Bug 1272591",
"url": "https://bugzilla.suse.com/1272591"
},
{
"category": "self",
"summary": "SUSE Bug 1272600",
"url": "https://bugzilla.suse.com/1272600"
},
{
"category": "self",
"summary": "SUSE Bug 1272607",
"url": "https://bugzilla.suse.com/1272607"
},
{
"category": "self",
"summary": "SUSE Bug 1272614",
"url": "https://bugzilla.suse.com/1272614"
},
{
"category": "self",
"summary": "SUSE Bug 1272617",
"url": "https://bugzilla.suse.com/1272617"
},
{
"category": "self",
"summary": "SUSE Bug 1272642",
"url": "https://bugzilla.suse.com/1272642"
},
{
"category": "self",
"summary": "SUSE Bug 1272646",
"url": "https://bugzilla.suse.com/1272646"
},
{
"category": "self",
"summary": "SUSE Bug 1272659",
"url": "https://bugzilla.suse.com/1272659"
},
{
"category": "self",
"summary": "SUSE Bug 1272664",
"url": "https://bugzilla.suse.com/1272664"
},
{
"category": "self",
"summary": "SUSE Bug 1272665",
"url": "https://bugzilla.suse.com/1272665"
},
{
"category": "self",
"summary": "SUSE Bug 1272668",
"url": "https://bugzilla.suse.com/1272668"
},
{
"category": "self",
"summary": "SUSE Bug 1272670",
"url": "https://bugzilla.suse.com/1272670"
},
{
"category": "self",
"summary": "SUSE Bug 1272671",
"url": "https://bugzilla.suse.com/1272671"
},
{
"category": "self",
"summary": "SUSE Bug 1272678",
"url": "https://bugzilla.suse.com/1272678"
},
{
"category": "self",
"summary": "SUSE Bug 1272681",
"url": "https://bugzilla.suse.com/1272681"
},
{
"category": "self",
"summary": "SUSE Bug 1272685",
"url": "https://bugzilla.suse.com/1272685"
},
{
"category": "self",
"summary": "SUSE Bug 1272686",
"url": "https://bugzilla.suse.com/1272686"
},
{
"category": "self",
"summary": "SUSE Bug 1272689",
"url": "https://bugzilla.suse.com/1272689"
},
{
"category": "self",
"summary": "SUSE Bug 1272690",
"url": "https://bugzilla.suse.com/1272690"
},
{
"category": "self",
"summary": "SUSE Bug 1272693",
"url": "https://bugzilla.suse.com/1272693"
},
{
"category": "self",
"summary": "SUSE Bug 1272694",
"url": "https://bugzilla.suse.com/1272694"
},
{
"category": "self",
"summary": "SUSE Bug 1272706",
"url": "https://bugzilla.suse.com/1272706"
},
{
"category": "self",
"summary": "SUSE Bug 1272781",
"url": "https://bugzilla.suse.com/1272781"
},
{
"category": "self",
"summary": "SUSE Bug 1272785",
"url": "https://bugzilla.suse.com/1272785"
},
{
"category": "self",
"summary": "SUSE Bug 1272787",
"url": "https://bugzilla.suse.com/1272787"
},
{
"category": "self",
"summary": "SUSE Bug 1272797",
"url": "https://bugzilla.suse.com/1272797"
},
{
"category": "self",
"summary": "SUSE Bug 1272800",
"url": "https://bugzilla.suse.com/1272800"
},
{
"category": "self",
"summary": "SUSE Bug 1272807",
"url": "https://bugzilla.suse.com/1272807"
},
{
"category": "self",
"summary": "SUSE Bug 1272836",
"url": "https://bugzilla.suse.com/1272836"
},
{
"category": "self",
"summary": "SUSE Bug 1272843",
"url": "https://bugzilla.suse.com/1272843"
},
{
"category": "self",
"summary": "SUSE Bug 1272850",
"url": "https://bugzilla.suse.com/1272850"
},
{
"category": "self",
"summary": "SUSE Bug 1272853",
"url": "https://bugzilla.suse.com/1272853"
},
{
"category": "self",
"summary": "SUSE Bug 1272855",
"url": "https://bugzilla.suse.com/1272855"
},
{
"category": "self",
"summary": "SUSE Bug 1272863",
"url": "https://bugzilla.suse.com/1272863"
},
{
"category": "self",
"summary": "SUSE Bug 1272865",
"url": "https://bugzilla.suse.com/1272865"
},
{
"category": "self",
"summary": "SUSE Bug 1272891",
"url": "https://bugzilla.suse.com/1272891"
},
{
"category": "self",
"summary": "SUSE Bug 1272892",
"url": "https://bugzilla.suse.com/1272892"
},
{
"category": "self",
"summary": "SUSE Bug 1272897",
"url": "https://bugzilla.suse.com/1272897"
},
{
"category": "self",
"summary": "SUSE Bug 1272903",
"url": "https://bugzilla.suse.com/1272903"
},
{
"category": "self",
"summary": "SUSE Bug 1272904",
"url": "https://bugzilla.suse.com/1272904"
},
{
"category": "self",
"summary": "SUSE Bug 1272907",
"url": "https://bugzilla.suse.com/1272907"
},
{
"category": "self",
"summary": "SUSE Bug 1272918",
"url": "https://bugzilla.suse.com/1272918"
},
{
"category": "self",
"summary": "SUSE Bug 1272920",
"url": "https://bugzilla.suse.com/1272920"
},
{
"category": "self",
"summary": "SUSE Bug 1272973",
"url": "https://bugzilla.suse.com/1272973"
},
{
"category": "self",
"summary": "SUSE Bug 1273004",
"url": "https://bugzilla.suse.com/1273004"
},
{
"category": "self",
"summary": "SUSE Bug 1273023",
"url": "https://bugzilla.suse.com/1273023"
},
{
"category": "self",
"summary": "SUSE Bug 1273035",
"url": "https://bugzilla.suse.com/1273035"
},
{
"category": "self",
"summary": "SUSE Bug 1273044",
"url": "https://bugzilla.suse.com/1273044"
},
{
"category": "self",
"summary": "SUSE Bug 1273117",
"url": "https://bugzilla.suse.com/1273117"
},
{
"category": "self",
"summary": "SUSE Bug 1273231",
"url": "https://bugzilla.suse.com/1273231"
},
{
"category": "self",
"summary": "SUSE Bug 1273550",
"url": "https://bugzilla.suse.com/1273550"
},
{
"category": "self",
"summary": "SUSE Bug 1274072",
"url": "https://bugzilla.suse.com/1274072"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-20585 page",
"url": "https://www.suse.com/security/cve/CVE-2023-20585/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-10263 page",
"url": "https://www.suse.com/security/cve/CVE-2025-10263/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21845 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21845/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38250 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38250/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38469 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38469/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-40213 page",
"url": "https://www.suse.com/security/cve/CVE-2025-40213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-54518 page",
"url": "https://www.suse.com/security/cve/CVE-2025-54518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68223 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68741 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68818 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-71274 page",
"url": "https://www.suse.com/security/cve/CVE-2025-71274/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-71286 page",
"url": "https://www.suse.com/security/cve/CVE-2025-71286/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-71291 page",
"url": "https://www.suse.com/security/cve/CVE-2025-71291/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-71297 page",
"url": "https://www.suse.com/security/cve/CVE-2025-71297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-71305 page",
"url": "https://www.suse.com/security/cve/CVE-2025-71305/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23097 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23097/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31430 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31430/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31431 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31431/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31439 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31440 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31440/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31441 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31474 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31474/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31482 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31482/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31483 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31483/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31485 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31485/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31497 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31497/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31498 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31509 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31510 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31510/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31511 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31520 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31520/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31522 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31522/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31524 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31524/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31532 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31540 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31540/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31542 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31542/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31545 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31545/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31548 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31549 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31551 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31552 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31552/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31566 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31576 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31578 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31581 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31583 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31585 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31585/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31587 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31587/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31598 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31599 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31603 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31604 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31605 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31605/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31615 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31616 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31617 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31618 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31619 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31623 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31624 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31624/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31625 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31626 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31626/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31627 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31627/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31628 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31628/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31651 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31657 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31659 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31660 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31661 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31667 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31672 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31672/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31678 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31687 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31701 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31720 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31720/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31726 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31727 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31728 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31730 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31747 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31748 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31749 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31749/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31751 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31751/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31754 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31755 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31756 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31759 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31761 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31762 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31763 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31768 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31768/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31770 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31773 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31776 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31778 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31779 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31780 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31781 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43007 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43011 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43016 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43017 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43018 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43020 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43032 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43033 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43043 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43046 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43046/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43047 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43051 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43056 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43058 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43061 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43062 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43064 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43069 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43072 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43072/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43098 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43104 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43105 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43111 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43113 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43114 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43117 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43118 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43123 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43129 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43130 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43133 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43134 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43136 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43137 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43140 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43141 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43143 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43147 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43149 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43152 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43152/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43156 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43159 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43161 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43168 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43169 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43170 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43172 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43180 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43182 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43183 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43196 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43200 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43202 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43203 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43207 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43211 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43216 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43218 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43220 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43221 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43223 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43225 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43230 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43231 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43232 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43236 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43240 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43240/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43241 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43242 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43242/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43244 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43246 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43246/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43251 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43251/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43255 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43255/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43256 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43256/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43257 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43257/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43262 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43264 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43264/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43266 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43266/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43269 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43269/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43270 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43277 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43277/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43279 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43279/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43281 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43281/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43287 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43287/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43291 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43291/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43295 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43295/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43302 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43308 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43309 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43309/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43312 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43313 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43313/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43316 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43316/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43318 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43318/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43324 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43324/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43327 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43327/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43328 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43328/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43340 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43340/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43342 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43342/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43343 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43343/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43352 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43352/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43353 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43353/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43357 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43357/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43370 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43370/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43380 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43380/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43381 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43381/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43382 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43387 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43397 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43412 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43425 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43425/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43426 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43427 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43428 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43428/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43429 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43430 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43430/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43432 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43432/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43436 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43436/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43439 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43440 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43440/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43443 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43443/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43451 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43451/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43459 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43467 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43475 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43475/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43476 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43480 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43488 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43488/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43493 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43493/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43496 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43496/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43497 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43497/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45834 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45835 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45839 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45851 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45860 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45867 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45867/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45868 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45869 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45871 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45871/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45873 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45875 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45875/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45877 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45879 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45880 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45881 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45883 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45885 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45902 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45902/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45904 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45905 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45905/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45911 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45913 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45914 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45915 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45916 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45917 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45919 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45919/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45921 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45923 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45936 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45941 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45944 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45946 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45947 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45954 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45963 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45969 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45973 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45976 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45981 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45982 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45986 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45994 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45994/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45996 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45996/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46003/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46006 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46006/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46009 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46011 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46015 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46016 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46018 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46019 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46023 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46023/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46026 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46027 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46033 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46038 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46038/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46040 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46048 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46049 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46049/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46056 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46058 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46064 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46068 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46075 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46077 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46077/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46080 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46082 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46082/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46084 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46084/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46086 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46088 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46089 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46092 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46092/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46102 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46103 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46108 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46109 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46117 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46122 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46125 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46126 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46128 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46131 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46132 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46136 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46137 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46138 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46143 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46144 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46145 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46146 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46147 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46151 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46152 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46152/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46158 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46163 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46165 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46167 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46167/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46168 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46170 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46174 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46177 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46179 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46180 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46184 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46186 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46187 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46189 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46191 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46193 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46193/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46198 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46199 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46204 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46204/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46205 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46205/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46206 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46206/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46207 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46212 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46218 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46219 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46220 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46225 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46230 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46231 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46232 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46233 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46234 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46235 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46235/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46236 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46238 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46238/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46243 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46245 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46245/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46247 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46247/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46249 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46249/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46252 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46252/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46261 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46261/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46265 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46265/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46267 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46267/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46270 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46275 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46275/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46285 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46285/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46292 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46292/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46294 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46294/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46306 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46306/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46307 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46307/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46312 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46321 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46321/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46324 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46324/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46333/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52910 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52914 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52915 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52916 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52919 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52919/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52921 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52922 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52926 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52927 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52927/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52930 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52931 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52936 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52937 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52941 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52942 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52947 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52948 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52953 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52963 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52964 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52967 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52970 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52974 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52981 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52982 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52984 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52986 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52988 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52989 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52991 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52995 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52998 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53000 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53002 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53003/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53004 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53006 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53006/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53009 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53011 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53012 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53013 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53013/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53022 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53032 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53037 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53045 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53045/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53047 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53056 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53058 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53062 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53063 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53064 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53065 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53066 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53068 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53069 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53070 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53070/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53073 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53074 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53080 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53083 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53088 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53093 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53093/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53098 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53106 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53107 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53112 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53123 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53129 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53131 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53132 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53134 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53136 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53137 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53143 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53144 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53146 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53147 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53148 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53149 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53150 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53158 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53159 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53160 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53161 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53175 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53177 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53183 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53184 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53185 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53186 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53189 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53190 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53192 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53192/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53194 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53195 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53208 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53208/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53209 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53212 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53213 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53218 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53221 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53224 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53225 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53227 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53230 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53236 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53237 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53237/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53239 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53242 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53242/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53246 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53246/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53250 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53250/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53252 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53252/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53254 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53255 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53255/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53262 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53265 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53265/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53267 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53267/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53268 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53268/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53270 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53275 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53275/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53279 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53279/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53289 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53291 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53291/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53293 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53293/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53297 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53313 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53313/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53324 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53324/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53325 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53325/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53329 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53329/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53331 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53331/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53332 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53339 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53339/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53345 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53347 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53347/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53350 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53350/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53354 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53354/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53355 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53355/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53356 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53358 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53358/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53366 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53366/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53369 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53374 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53374/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53375 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53375/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53376 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53376/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53379 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53379/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53382 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53385 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53385/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53388 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53391 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53392 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53393 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53397 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53398 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53399 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53403 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53403/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63794 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63795 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63802 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63806 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63806/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63807 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63809 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63821 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63822 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63824 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63826 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63826/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63829 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63836 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63843 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63843/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63844 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63844/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63845 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63845/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63846 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63846/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63847 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63847/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63848 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63848/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63851 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63852 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63853 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63854 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63855 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63856 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63861 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63862 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63869 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63882 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63884 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63892 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63893 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63895 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63895/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63896 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63897 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63899 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63900 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63901 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63902 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63902/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63903 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63904 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63905 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63905/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63908 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63912 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63915 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63916 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63917 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63919 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63919/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63921 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63922 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63924 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63927 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63927/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63928 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63930 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63931 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63934 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63940 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63942 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63943 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63943/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63945 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63946 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63947 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63948 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63949 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63952 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63957 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63958 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63959 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63960 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63961 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63962 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63964 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63967 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63968 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63971 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63974 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63975 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63976 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63984 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63991 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63994 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63994/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64025 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64025/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64089 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64106 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64174 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64179 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64182 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64183 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64187 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64189 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64191 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64220 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64221 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64223 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64231 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64234 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64242 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64242/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64298 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64298/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64330 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64330/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64336 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64336/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64345 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64347 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64347/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64465 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64530 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64560 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64561 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64564 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64564/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64600 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64600/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2026-09-14T12:51:12Z",
"generator": {
"date": "2026-08-18T20:43:06Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:23241-1",
"initial_release_date": "2026-08-18T20:43:06Z",
"revision_history": [
{
"date": "2026-08-18T20:43:06Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-14T12:51:12Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-rt-6.4.0-51.1.noarch",
"product": {
"name": "kernel-devel-rt-6.4.0-51.1.noarch",
"product_id": "kernel-devel-rt-6.4.0-51.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-rt-6.4.0-51.1.noarch",
"product": {
"name": "kernel-source-rt-6.4.0-51.1.noarch",
"product_id": "kernel-source-rt-6.4.0-51.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-6.4.0-51.1.x86_64",
"product": {
"name": "kernel-rt-6.4.0-51.1.x86_64",
"product_id": "kernel-rt-6.4.0-51.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-livepatch-6.4.0-51.1.x86_64",
"product": {
"name": "kernel-rt-livepatch-6.4.0-51.1.x86_64",
"product_id": "kernel-rt-livepatch-6.4.0-51.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-rt-6.4.0-51.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch"
},
"product_reference": "kernel-devel-rt-6.4.0-51.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-6.4.0-51.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64"
},
"product_reference": "kernel-rt-6.4.0-51.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-livepatch-6.4.0-51.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64"
},
"product_reference": "kernel-rt-livepatch-6.4.0-51.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-rt-6.4.0-51.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
},
"product_reference": "kernel-source-rt-6.4.0-51.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-20585",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-20585"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-20585",
"url": "https://www.suse.com/security/cve/CVE-2023-20585"
},
{
"category": "external",
"summary": "SUSE Bug 1243603 for CVE-2023-20585",
"url": "https://bugzilla.suse.com/1243603"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2023-20585"
},
{
"cve": "CVE-2025-10263",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-10263"
}
],
"notes": [
{
"category": "general",
"text": "Arm C1-Ultra, C1-Premium, Neoverse V3 \u0026 V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 \u0026 X1C, Cortex-A710, Cortex-A78, A78AE \u0026 A78C, Cortex-A77, Cortex-A76 \u0026 A76A may allow writes to resources owned by a higher exception level.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-10263",
"url": "https://www.suse.com/security/cve/CVE-2025-10263"
},
{
"category": "external",
"summary": "SUSE Bug 1266290 for CVE-2025-10263",
"url": "https://bugzilla.suse.com/1266290"
},
{
"category": "external",
"summary": "SUSE Bug 1266954 for CVE-2025-10263",
"url": "https://bugzilla.suse.com/1266954"
},
{
"category": "external",
"summary": "SUSE Bug 1270230 for CVE-2025-10263",
"url": "https://bugzilla.suse.com/1270230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "critical"
}
],
"title": "CVE-2025-10263"
},
{
"cve": "CVE-2025-21845",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21845"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: spi-nor: sst: Fix SST write failure\n\n\u0027commit 18bcb4aa54ea (\"mtd: spi-nor: sst: Factor out common write operation\nto `sst_nor_write_data()`\")\u0027 introduced a bug where only one byte of data\nis written, regardless of the number of bytes passed to\nsst_nor_write_data(), causing a kernel crash during the write operation.\nEnsure the correct number of bytes are written as passed to\nsst_nor_write_data().\n\nCall trace:\n[ 57.400180] ------------[ cut here ]------------\n[ 57.404842] While writing 2 byte written 1 bytes\n[ 57.409493] WARNING: CPU: 0 PID: 737 at drivers/mtd/spi-nor/sst.c:187 sst_nor_write_data+0x6c/0x74\n[ 57.418464] Modules linked in:\n[ 57.421517] CPU: 0 UID: 0 PID: 737 Comm: mtd_debug Not tainted 6.12.0-g5ad04afd91f9 #30\n[ 57.429517] Hardware name: Xilinx Versal A2197 Processor board revA - x-prc-02 revA (DT)\n[ 57.437600] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 57.444557] pc : sst_nor_write_data+0x6c/0x74\n[ 57.448911] lr : sst_nor_write_data+0x6c/0x74\n[ 57.453264] sp : ffff80008232bb40\n[ 57.456570] x29: ffff80008232bb40 x28: 0000000000010000 x27: 0000000000000001\n[ 57.463708] x26: 000000000000ffff x25: 0000000000000000 x24: 0000000000000000\n[ 57.470843] x23: 0000000000010000 x22: ffff80008232bbf0 x21: ffff000816230000\n[ 57.477978] x20: ffff0008056c0080 x19: 0000000000000002 x18: 0000000000000006\n[ 57.485112] x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008232b580\n[ 57.492246] x14: 0000000000000000 x13: ffff8000816d1530 x12: 00000000000004a4\n[ 57.499380] x11: 000000000000018c x10: ffff8000816fd530 x9 : ffff8000816d1530\n[ 57.506515] x8 : 00000000fffff7ff x7 : ffff8000816fd530 x6 : 0000000000000001\n[ 57.513649] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000\n[ 57.520782] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0008049b0000\n[ 57.527916] Call trace:\n[ 57.530354] sst_nor_write_data+0x6c/0x74\n[ 57.534361] sst_nor_write+0xb4/0x18c\n[ 57.538019] mtd_write_oob_std+0x7c/0x88\n[ 57.541941] mtd_write_oob+0x70/0xbc\n[ 57.545511] mtd_write+0x68/0xa8\n[ 57.548733] mtdchar_write+0x10c/0x290\n[ 57.552477] vfs_write+0xb4/0x3a8\n[ 57.555791] ksys_write+0x74/0x10c\n[ 57.559189] __arm64_sys_write+0x1c/0x28\n[ 57.563109] invoke_syscall+0x54/0x11c\n[ 57.566856] el0_svc_common.constprop.0+0xc0/0xe0\n[ 57.571557] do_el0_svc+0x1c/0x28\n[ 57.574868] el0_svc+0x30/0xcc\n[ 57.577921] el0t_64_sync_handler+0x120/0x12c\n[ 57.582276] el0t_64_sync+0x190/0x194\n[ 57.585933] ---[ end trace 0000000000000000 ]---\n\n[pratyush@kernel.org: add Cc stable tag]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21845",
"url": "https://www.suse.com/security/cve/CVE-2025-21845"
},
{
"category": "external",
"summary": "SUSE Bug 1239511 for CVE-2025-21845",
"url": "https://bugzilla.suse.com/1239511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-21845"
},
{
"cve": "CVE-2025-38250",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38250"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix use-after-free in vhci_flush()\n\nsyzbot reported use-after-free in vhci_flush() without repro. [0]\n\nFrom the splat, a thread close()d a vhci file descriptor while\nits device was being used by iotcl() on another thread.\n\nOnce the last fd refcnt is released, vhci_release() calls\nhci_unregister_dev(), hci_free_dev(), and kfree() for struct\nvhci_data, which is set to hci_dev-\u003edev-\u003edriver_data.\n\nThe problem is that there is no synchronisation after unlinking\nhdev from hci_dev_list in hci_unregister_dev(). There might be\nanother thread still accessing the hdev which was fetched before\nthe unlink operation.\n\nWe can use SRCU for such synchronisation.\n\nLet\u0027s run hci_dev_reset() under SRCU and wait for its completion\nin hci_unregister_dev().\n\nAnother option would be to restore hci_dev-\u003edestruct(), which was\nremoved in commit 587ae086f6e4 (\"Bluetooth: Remove unused\nhci-destruct cb\"). However, this would not be a good solution, as\nwe should not run hci_unregister_dev() while there are in-flight\nioctl() requests, which could lead to another data-race KCSAN splat.\n\nNote that other drivers seem to have the same problem, for exmaple,\nvirtbt_remove().\n\n[0]:\nBUG: KASAN: slab-use-after-free in skb_queue_empty_lockless include/linux/skbuff.h:1891 [inline]\nBUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x99/0x360 net/core/skbuff.c:3937\nRead of size 8 at addr ffff88807cb8d858 by task syz.1.219/6718\n\nCPU: 1 UID: 0 PID: 6718 Comm: syz.1.219 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:408 [inline]\n print_report+0xd2/0x2b0 mm/kasan/report.c:521\n kasan_report+0x118/0x150 mm/kasan/report.c:634\n skb_queue_empty_lockless include/linux/skbuff.h:1891 [inline]\n skb_queue_purge_reason+0x99/0x360 net/core/skbuff.c:3937\n skb_queue_purge include/linux/skbuff.h:3368 [inline]\n vhci_flush+0x44/0x50 drivers/bluetooth/hci_vhci.c:69\n hci_dev_do_reset net/bluetooth/hci_core.c:552 [inline]\n hci_dev_reset+0x420/0x5c0 net/bluetooth/hci_core.c:592\n sock_do_ioctl+0xd9/0x300 net/socket.c:1190\n sock_ioctl+0x576/0x790 net/socket.c:1311\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fcf5b98e929\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fcf5c7b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007fcf5bbb6160 RCX: 00007fcf5b98e929\nRDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009\nRBP: 00007fcf5ba10b39 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 00007fcf5bbb6160 R15: 00007ffd6353d528\n \u003c/TASK\u003e\n\nAllocated by task 6535:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x230/0x3d0 mm/slub.c:4359\n kmalloc_noprof include/linux/slab.h:905 [inline]\n kzalloc_noprof include/linux/slab.h:1039 [inline]\n vhci_open+0x57/0x360 drivers/bluetooth/hci_vhci.c:635\n misc_open+0x2bc/0x330 drivers/char/misc.c:161\n chrdev_open+0x4c9/0x5e0 fs/char_dev.c:414\n do_dentry_open+0xdf0/0x1970 fs/open.c:964\n vfs_open+0x3b/0x340 fs/open.c:1094\n do_open fs/namei.c:3887 [inline]\n path_openat+0x2ee5/0x3830 fs/name\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38250",
"url": "https://www.suse.com/security/cve/CVE-2025-38250"
},
{
"category": "external",
"summary": "SUSE Bug 1246182 for CVE-2025-38250",
"url": "https://bugzilla.suse.com/1246182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-38250"
},
{
"cve": "CVE-2025-38469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38469"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls\n\nkvm_xen_schedop_poll does a kmalloc_array() when a VM polls the host\nfor more than one event channel potr (nr_ports \u003e 1).\n\nAfter the kmalloc_array(), the error paths need to go through the\n\"out\" label, but the call to kvm_read_guest_virt() does not.\n\n[Adjusted commit message. - Paolo]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38469",
"url": "https://www.suse.com/security/cve/CVE-2025-38469"
},
{
"category": "external",
"summary": "SUSE Bug 1247455 for CVE-2025-38469",
"url": "https://bugzilla.suse.com/1247455"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-38469"
},
{
"cve": "CVE-2025-40213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-40213"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete\n\nThere is a BUG: KASAN: stack-out-of-bounds in set_mesh_sync due to\nmemcpy from badly declared on-stack flexible array.\n\nAnother crash is in set_mesh_complete() due to double list_del via\nmgmt_pending_valid + mgmt_pending_remove.\n\nUse DEFINE_FLEX to declare the flexible array right, and don\u0027t memcpy\noutside bounds.\n\nAs mgmt_pending_valid removes the cmd from list, use mgmt_pending_free,\nand also report status on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-40213",
"url": "https://www.suse.com/security/cve/CVE-2025-40213"
},
{
"category": "external",
"summary": "SUSE Bug 1253674 for CVE-2025-40213",
"url": "https://bugzilla.suse.com/1253674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-40213"
},
{
"cve": "CVE-2025-54518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-54518"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-54518",
"url": "https://www.suse.com/security/cve/CVE-2025-54518"
},
{
"category": "external",
"summary": "SUSE Bug 1264013 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264013"
},
{
"category": "external",
"summary": "SUSE Bug 1264066 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264066"
},
{
"category": "external",
"summary": "SUSE Bug 1264096 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2025-54518"
},
{
"cve": "CVE-2025-68223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68223"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: delete radeon_fence_process in is_signaled, no deadlock\n\nDelete the attempt to progress the queue when checking if fence is\nsignaled. This avoids deadlock.\n\ndma-fence_ops::signaled can be called with the fence lock in unknown\nstate. For radeon, the fence lock is also the wait queue lock. This can\ncause a self deadlock when signaled() tries to make forward progress on\nthe wait queue. But advancing the queue is unneeded because incorrectly\nreturning false from signaled() is perfectly acceptable.\n\n(cherry picked from commit 527ba26e50ec2ca2be9c7c82f3ad42998a75d0db)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68223",
"url": "https://www.suse.com/security/cve/CVE-2025-68223"
},
{
"category": "external",
"summary": "SUSE Bug 1255357 for CVE-2025-68223",
"url": "https://bugzilla.suse.com/1255357"
},
{
"category": "external",
"summary": "SUSE Bug 1255358 for CVE-2025-68223",
"url": "https://bugzilla.suse.com/1255358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-68223"
},
{
"cve": "CVE-2025-68741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68741"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix improper freeing of purex item\n\nIn qla2xxx_process_purls_iocb(), an item is allocated via\nqla27xx_copy_multiple_pkt(), which internally calls\nqla24xx_alloc_purex_item().\n\nThe qla24xx_alloc_purex_item() function may return a pre-allocated item\nfrom a per-adapter pool for small allocations, instead of dynamically\nallocating memory with kzalloc().\n\nAn error handling path in qla2xxx_process_purls_iocb() incorrectly uses\nkfree() to release the item. If the item was from the pre-allocated\npool, calling kfree() on it is a bug that can lead to memory corruption.\n\nFix this by using the correct deallocation function,\nqla24xx_free_purex_item(), which properly handles both dynamically\nallocated and pre-allocated items.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68741",
"url": "https://www.suse.com/security/cve/CVE-2025-68741"
},
{
"category": "external",
"summary": "SUSE Bug 1255703 for CVE-2025-68741",
"url": "https://bugzilla.suse.com/1255703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-68741"
},
{
"cve": "CVE-2025-68818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68818"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: Revert \"scsi: qla2xxx: Perform lockless command completion in abort path\"\n\nThis reverts commit 0367076b0817d5c75dfb83001ce7ce5c64d803a9.\n\nThe commit being reverted added code to __qla2x00_abort_all_cmds() to\ncall sp-\u003edone() without holding a spinlock. But unlike the older code\nbelow it, this new code failed to check sp-\u003ecmd_type and just assumed\nTYPE_SRB, which results in a jump to an invalid pointer in target-mode\nwith TYPE_TGT_CMD:\n\nqla2xxx [0000:65:00.0]-d034:8: qla24xx_do_nack_work create sess success\n 0000000009f7a79b\nqla2xxx [0000:65:00.0]-5003:8: ISP System Error - mbx1=1ff5h mbx2=10h\n mbx3=0h mbx4=0h mbx5=191h mbx6=0h mbx7=0h.\nqla2xxx [0000:65:00.0]-d01e:8: -\u003e fwdump no buffer\nqla2xxx [0000:65:00.0]-f03a:8: qla_target(0): System error async event\n 0x8002 occurred\nqla2xxx [0000:65:00.0]-00af:8: Performing ISP error recovery -\n ha=0000000058183fda.\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nPF: supervisor instruction fetch in kernel mode\nPF: error_code(0x0010) - not-present page\nPGD 0 P4D 0\nOops: 0010 [#1] SMP\nCPU: 2 PID: 9446 Comm: qla2xxx_8_dpc Tainted: G O 6.1.133 #1\nHardware name: Supermicro Super Server/X11SPL-F, BIOS 4.2 12/15/2023\nRIP: 0010:0x0\nCode: Unable to access opcode bytes at 0xffffffffffffffd6.\nRSP: 0018:ffffc90001f93dc8 EFLAGS: 00010206\nRAX: 0000000000000282 RBX: 0000000000000355 RCX: ffff88810d16a000\nRDX: ffff88810dbadaa8 RSI: 0000000000080000 RDI: ffff888169dc38c0\nRBP: ffff888169dc38c0 R08: 0000000000000001 R09: 0000000000000045\nR10: ffffffffa034bdf0 R11: 0000000000000000 R12: ffff88810800bb40\nR13: 0000000000001aa8 R14: ffff888100136610 R15: ffff8881070f7400\nFS: 0000000000000000(0000) GS:ffff88bf80080000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffffffffffffffd6 CR3: 000000010c8ff006 CR4: 00000000003706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n ? __die+0x4d/0x8b\n ? page_fault_oops+0x91/0x180\n ? trace_buffer_unlock_commit_regs+0x38/0x1a0\n ? exc_page_fault+0x391/0x5e0\n ? asm_exc_page_fault+0x22/0x30\n __qla2x00_abort_all_cmds+0xcb/0x3e0 [qla2xxx_scst]\n qla2x00_abort_all_cmds+0x50/0x70 [qla2xxx_scst]\n qla2x00_abort_isp_cleanup+0x3b7/0x4b0 [qla2xxx_scst]\n qla2x00_abort_isp+0xfd/0x860 [qla2xxx_scst]\n qla2x00_do_dpc+0x581/0xa40 [qla2xxx_scst]\n kthread+0xa8/0xd0\n \u003c/TASK\u003e\n\nThen commit 4475afa2646d (\"scsi: qla2xxx: Complete command early within\nlock\") added the spinlock back, because not having the lock caused a\nrace and a crash. But qla2x00_abort_srb() in the switch below already\nchecks for qla2x00_chip_is_down() and handles it the same way, so the\ncode above the switch is now redundant and still buggy in target-mode.\nRemove it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68818",
"url": "https://www.suse.com/security/cve/CVE-2025-68818"
},
{
"category": "external",
"summary": "SUSE Bug 1256675 for CVE-2025-68818",
"url": "https://bugzilla.suse.com/1256675"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-68818"
},
{
"cve": "CVE-2025-71274",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-71274"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrpmsg: core: fix race in driver_override_show() and use core helper\n\nThe driver_override_show function reads the driver_override string\nwithout holding the device_lock. However, the store function modifies\nand frees the string while holding the device_lock. This creates a race\ncondition where the string can be freed by the store function while\nbeing read by the show function, leading to a use-after-free.\n\nTo fix this, replace the rpmsg_string_attr macro with explicit show and\nstore functions. The new driver_override_store uses the standard\ndriver_set_override helper. Since the introduction of\ndriver_set_override, the comments in include/linux/rpmsg.h have stated\nthat this helper must be used to set or clear driver_override, but the\nimplementation was not updated until now.\n\nBecause driver_set_override modifies and frees the string while holding\nthe device_lock, the new driver_override_show now correctly holds the\ndevice_lock during the read operation to prevent the race.\n\nAdditionally, since rpmsg_string_attr has only ever been used for\ndriver_override, removing the macro simplifies the code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-71274",
"url": "https://www.suse.com/security/cve/CVE-2025-71274"
},
{
"category": "external",
"summary": "SUSE Bug 1264377 for CVE-2025-71274",
"url": "https://bugzilla.suse.com/1264377"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-71274"
},
{
"cve": "CVE-2025-71286",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-71286"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls\n\nThe size of the data behind of scontrol-\u003eipc_control_data for bytes\ncontrols is:\n[1] sizeof(struct sof_ipc4_control_data) + // kernel only struct\n[2] sizeof(struct sof_abi_hdr)) + payload\n\nThe max_size specifies the size of [2] and it is coming from topology.\n\nChange the function to take this into account and allocate adequate amount\nof memory behind scontrol-\u003eipc_control_data.\n\nWith the change we will allocate [1] amount more memory to be able to hold\nthe full size of data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-71286",
"url": "https://www.suse.com/security/cve/CVE-2025-71286"
},
{
"category": "external",
"summary": "SUSE Bug 1264615 for CVE-2025-71286",
"url": "https://bugzilla.suse.com/1264615"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-71286"
},
{
"cve": "CVE-2025-71291",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-71291"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()\n\nIn the function bcm_vk_read(), the pointer entry is checked, indicating\nthat it can be NULL. If entry is NULL and rc is set to -EMSGSIZE, the\nfollowing code may cause null-pointer dereferences:\n\n struct vk_msg_blk tmp_msg = entry-\u003eto_h_msg[0];\n set_msg_id(\u0026tmp_msg, entry-\u003eusr_msg_id);\n tmp_msg.size = entry-\u003eto_h_blks - 1;\n\nTo prevent these possible null-pointer dereferences, copy to_h_msg,\nusr_msg_id, and to_h_blks from iter into temporary variables, and return\nthese temporary variables to the application instead of accessing them\nthrough a potentially NULL entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-71291",
"url": "https://www.suse.com/security/cve/CVE-2025-71291"
},
{
"category": "external",
"summary": "SUSE Bug 1264560 for CVE-2025-71291",
"url": "https://bugzilla.suse.com/1264560"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-71291"
},
{
"cve": "CVE-2025-71297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-71297"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()\n\nrtw8822b_set_antenna() can be called from userspace when the chip is\npowered off. In that case a WARNING is triggered in\nrtw8822b_config_trx_mode() because trying to read the RF registers\nwhen the chip is powered off returns an unexpected value.\n\nCall rtw8822b_config_trx_mode() in rtw8822b_set_antenna() only when\nthe chip is powered on.\n\n------------[ cut here ]------------\nwrite RF mode table fail\nWARNING: CPU: 0 PID: 7183 at rtw8822b.c:824 rtw8822b_config_trx_mode.constprop.0+0x835/0x840 [rtw88_8822b]\nCPU: 0 UID: 0 PID: 7183 Comm: iw Tainted: G W OE 6.17.5-arch1-1 #1 PREEMPT(full) 01c39fc421df2af799dd5e9180b572af860b40c1\nTainted: [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\nHardware name: LENOVO 82KR/LNVNB161216, BIOS HBCN18WW 08/27/2021\nRIP: 0010:rtw8822b_config_trx_mode.constprop.0+0x835/0x840 [rtw88_8822b]\nCall Trace:\n \u003cTASK\u003e\n rtw8822b_set_antenna+0x57/0x70 [rtw88_8822b 370206f42e5890d8d5f48eb358b759efa37c422b]\n rtw_ops_set_antenna+0x50/0x80 [rtw88_core 711c8fb4f686162be4625b1d0b8e8c6a5ac850fb]\n ieee80211_set_antenna+0x60/0x100 [mac80211 f1845d85d2ecacf3b71867635a050ece90486cf3]\n nl80211_set_wiphy+0x384/0xe00 [cfg80211 296485ee85696d2150309a6d21a7fbca83d3dbda]\n ? netdev_run_todo+0x63/0x550\n genl_family_rcv_msg_doit+0xfc/0x160\n genl_rcv_msg+0x1aa/0x2b0\n ? __pfx_nl80211_pre_doit+0x10/0x10 [cfg80211 296485ee85696d2150309a6d21a7fbca83d3dbda]\n ? __pfx_nl80211_set_wiphy+0x10/0x10 [cfg80211 296485ee85696d2150309a6d21a7fbca83d3dbda]\n ? __pfx_nl80211_post_doit+0x10/0x10 [cfg80211 296485ee85696d2150309a6d21a7fbca83d3dbda]\n ? __pfx_genl_rcv_msg+0x10/0x10\n netlink_rcv_skb+0x59/0x110\n genl_rcv+0x28/0x40\n netlink_unicast+0x285/0x3c0\n ? __alloc_skb+0xdb/0x1a0\n netlink_sendmsg+0x20d/0x430\n ____sys_sendmsg+0x39f/0x3d0\n ? import_iovec+0x2f/0x40\n ___sys_sendmsg+0x99/0xe0\n ? refill_obj_stock+0x12e/0x240\n __sys_sendmsg+0x8a/0xf0\n do_syscall_64+0x81/0x970\n ? do_syscall_64+0x81/0x970\n ? ksys_read+0x73/0xf0\n ? do_syscall_64+0x81/0x970\n ? count_memcg_events+0xc2/0x190\n ? handle_mm_fault+0x1d7/0x2d0\n ? do_user_addr_fault+0x21a/0x690\n ? exc_page_fault+0x7e/0x1a0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n \u003c/TASK\u003e\n---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-71297",
"url": "https://www.suse.com/security/cve/CVE-2025-71297"
},
{
"category": "external",
"summary": "SUSE Bug 1264830 for CVE-2025-71297",
"url": "https://bugzilla.suse.com/1264830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-71297"
},
{
"cve": "CVE-2025-71305",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-71305"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/display/dp_mst: Add protection against 0 vcpi\n\nWhen releasing a timeslot there is a slight chance we may end up\nwith the wrong payload mask due to overflow if the delayed_destroy_work\nends up coming into play after a DP 2.1 monitor gets disconnected\nwhich causes vcpi to become 0 then we try to make the payload =\n~BIT(vcpi - 1) which is a negative shift. VCPI id should never\nreally be 0 hence skip changing the payload mask if VCPI is 0.\n\nOtherwise it leads to\n\u003c7\u003e [515.287237] xe 0000:03:00.0: [drm:drm_dp_mst_get_port_malloc\n[drm_display_helper]] port ffff888126ce9000 (3)\n\u003c4\u003e [515.287267] -----------[ cut here ]-----------\n\u003c3\u003e [515.287268] UBSAN: shift-out-of-bounds in\n../drivers/gpu/drm/display/drm_dp_mst_topology.c:4575:36\n\u003c3\u003e [515.287271] shift exponent -1 is negative\n\u003c4\u003e [515.287275] CPU: 7 UID: 0 PID: 3108 Comm: kworker/u64:33 Tainted: G\nS U 6.17.0-rc6-lgci-xe-xe-3795-3e79699fa1b216e92+ #1 PREEMPT(voluntary)\n\u003c4\u003e [515.287279] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER\n\u003c4\u003e [515.287279] Hardware name: ASUS System Product Name/PRIME Z790-P\nWIFI, BIOS 1645 03/15/2024\n\u003c4\u003e [515.287281] Workqueue: drm_dp_mst_wq drm_dp_delayed_destroy_work\n[drm_display_helper]\n\u003c4\u003e [515.287303] Call Trace:\n\u003c4\u003e [515.287304] \u003cTASK\u003e\n\u003c4\u003e [515.287306] dump_stack_lvl+0xc1/0xf0\n\u003c4\u003e [515.287313] dump_stack+0x10/0x20\n\u003c4\u003e [515.287316] __ubsan_handle_shift_out_of_bounds+0x133/0x2e0\n\u003c4\u003e [515.287324] ? drm_atomic_get_private_obj_state+0x186/0x1d0\n\u003c4\u003e [515.287333] drm_dp_atomic_release_time_slots.cold+0x17/0x3d\n[drm_display_helper]\n\u003c4\u003e [515.287355] mst_connector_atomic_check+0x159/0x180 [xe]\n\u003c4\u003e [515.287546] drm_atomic_helper_check_modeset+0x4d9/0xfa0\n\u003c4\u003e [515.287550] ? __ww_mutex_lock.constprop.0+0x6f/0x1a60\n\u003c4\u003e [515.287562] intel_atomic_check+0x119/0x2b80 [xe]\n\u003c4\u003e [515.287740] ? find_held_lock+0x31/0x90\n\u003c4\u003e [515.287747] ? lock_release+0xce/0x2a0\n\u003c4\u003e [515.287754] drm_atomic_check_only+0x6a2/0xb40\n\u003c4\u003e [515.287758] ? drm_atomic_add_affected_connectors+0x12b/0x140\n\u003c4\u003e [515.287765] drm_atomic_commit+0x6e/0xf0\n\u003c4\u003e [515.287766] ? _pfx__drm_printfn_info+0x10/0x10\n\u003c4\u003e [515.287774] drm_client_modeset_commit_atomic+0x25c/0x2b0\n\u003c4\u003e [515.287794] drm_client_modeset_commit_locked+0x60/0x1b0\n\u003c4\u003e [515.287795] ? mutex_lock_nested+0x1b/0x30\n\u003c4\u003e [515.287801] drm_client_modeset_commit+0x26/0x50\n\u003c4\u003e [515.287804] __drm_fb_helper_restore_fbdev_mode_unlocked+0xdc/0x110\n\u003c4\u003e [515.287810] drm_fb_helper_hotplug_event+0x120/0x140\n\u003c4\u003e [515.287814] drm_fbdev_client_hotplug+0x28/0xd0\n\u003c4\u003e [515.287819] drm_client_hotplug+0x6c/0xf0\n\u003c4\u003e [515.287824] drm_client_dev_hotplug+0x9e/0xd0\n\u003c4\u003e [515.287829] drm_kms_helper_hotplug_event+0x1a/0x30\n\u003c4\u003e [515.287834] drm_dp_delayed_destroy_work+0x3df/0x410\n[drm_display_helper]\n\u003c4\u003e [515.287861] process_one_work+0x22b/0x6f0\n\u003c4\u003e [515.287874] worker_thread+0x1e8/0x3d0\n\u003c4\u003e [515.287879] ? __pfx_worker_thread+0x10/0x10\n\u003c4\u003e [515.287882] kthread+0x11c/0x250\n\u003c4\u003e [515.287886] ? __pfx_kthread+0x10/0x10\n\u003c4\u003e [515.287890] ret_from_fork+0x2d7/0x310\n\u003c4\u003e [515.287894] ? __pfx_kthread+0x10/0x10\n\u003c4\u003e [515.287897] ret_from_fork_asm+0x1a/0x30",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-71305",
"url": "https://www.suse.com/security/cve/CVE-2025-71305"
},
{
"category": "external",
"summary": "SUSE Bug 1266762 for CVE-2025-71305",
"url": "https://bugzilla.suse.com/1266762"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2025-71305"
},
{
"cve": "CVE-2026-23097",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23097"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmigrate: correct lock ordering for hugetlb file folios\n\nSyzbot has found a deadlock (analyzed by Lance Yang):\n\n1) Task (5749): Holds folio_lock, then tries to acquire i_mmap_rwsem(read lock).\n2) Task (5754): Holds i_mmap_rwsem(write lock), then tries to acquire\nfolio_lock.\n\nmigrate_pages()\n -\u003e migrate_hugetlbs()\n -\u003e unmap_and_move_huge_page() \u003c- Takes folio_lock!\n -\u003e remove_migration_ptes()\n -\u003e __rmap_walk_file()\n -\u003e i_mmap_lock_read() \u003c- Waits for i_mmap_rwsem(read lock)!\n\nhugetlbfs_fallocate()\n -\u003e hugetlbfs_punch_hole() \u003c- Takes i_mmap_rwsem(write lock)!\n -\u003e hugetlbfs_zero_partial_page()\n -\u003e filemap_lock_hugetlb_folio()\n -\u003e filemap_lock_folio()\n -\u003e __filemap_get_folio \u003c- Waits for folio_lock!\n\nThe migration path is the one taking locks in the wrong order according to\nthe documentation at the top of mm/rmap.c. So expand the scope of the\nexisting i_mmap_lock to cover the calls to remove_migration_ptes() too.\n\nThis is (mostly) how it used to be after commit c0d0381ade79. That was\nremoved by 336bf30eb765 for both file \u0026 anon hugetlb pages when it should\nonly have been removed for anon hugetlb pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23097",
"url": "https://www.suse.com/security/cve/CVE-2026-23097"
},
{
"category": "external",
"summary": "SUSE Bug 1257815 for CVE-2026-23097",
"url": "https://bugzilla.suse.com/1257815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-23097"
},
{
"cve": "CVE-2026-23276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23276"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: add xmit recursion limit to tunnel xmit functions\n\nTunnel xmit functions (iptunnel_xmit, ip6tunnel_xmit) lack their own\nrecursion limit. When a bond device in broadcast mode has GRE tap\ninterfaces as slaves, and those GRE tunnels route back through the\nbond, multicast/broadcast traffic triggers infinite recursion between\nbond_xmit_broadcast() and ip_tunnel_xmit()/ip6_tnl_xmit(), causing\nkernel stack overflow.\n\nThe existing XMIT_RECURSION_LIMIT (8) in the no-qdisc path is not\nsufficient because tunnel recursion involves route lookups and full IP\noutput, consuming much more stack per level. Use a lower limit of 4\n(IP_TUNNEL_RECURSION_LIMIT) to prevent overflow.\n\nAdd recursion detection using dev_xmit_recursion helpers directly in\niptunnel_xmit() and ip6tunnel_xmit() to cover all IPv4/IPv6 tunnel\npaths including UDP encapsulated tunnels (VXLAN, Geneve, etc.).\n\nMove dev_xmit_recursion helpers from net/core/dev.h to public header\ninclude/linux/netdevice.h so they can be used by tunnel code.\n\n BUG: KASAN: stack-out-of-bounds in blake2s.constprop.0+0xe7/0x160\n Write of size 32 at addr ffff88810033fed0 by task kworker/0:1/11\n Workqueue: mld mld_ifc_work\n Call Trace:\n \u003cTASK\u003e\n __build_flow_key.constprop.0 (net/ipv4/route.c:515)\n ip_rt_update_pmtu (net/ipv4/route.c:1073)\n iptunnel_xmit (net/ipv4/ip_tunnel_core.c:84)\n ip_tunnel_xmit (net/ipv4/ip_tunnel.c:847)\n gre_tap_xmit (net/ipv4/ip_gre.c:779)\n dev_hard_start_xmit (net/core/dev.c:3887)\n sch_direct_xmit (net/sched/sch_generic.c:347)\n __dev_queue_xmit (net/core/dev.c:4802)\n bond_dev_queue_xmit (drivers/net/bonding/bond_main.c:312)\n bond_xmit_broadcast (drivers/net/bonding/bond_main.c:5279)\n bond_start_xmit (drivers/net/bonding/bond_main.c:5530)\n dev_hard_start_xmit (net/core/dev.c:3887)\n __dev_queue_xmit (net/core/dev.c:4841)\n ip_finish_output2 (net/ipv4/ip_output.c:237)\n ip_output (net/ipv4/ip_output.c:438)\n iptunnel_xmit (net/ipv4/ip_tunnel_core.c:86)\n gre_tap_xmit (net/ipv4/ip_gre.c:779)\n dev_hard_start_xmit (net/core/dev.c:3887)\n sch_direct_xmit (net/sched/sch_generic.c:347)\n __dev_queue_xmit (net/core/dev.c:4802)\n bond_dev_queue_xmit (drivers/net/bonding/bond_main.c:312)\n bond_xmit_broadcast (drivers/net/bonding/bond_main.c:5279)\n bond_start_xmit (drivers/net/bonding/bond_main.c:5530)\n dev_hard_start_xmit (net/core/dev.c:3887)\n __dev_queue_xmit (net/core/dev.c:4841)\n ip_finish_output2 (net/ipv4/ip_output.c:237)\n ip_output (net/ipv4/ip_output.c:438)\n iptunnel_xmit (net/ipv4/ip_tunnel_core.c:86)\n ip_tunnel_xmit (net/ipv4/ip_tunnel.c:847)\n gre_tap_xmit (net/ipv4/ip_gre.c:779)\n dev_hard_start_xmit (net/core/dev.c:3887)\n sch_direct_xmit (net/sched/sch_generic.c:347)\n __dev_queue_xmit (net/core/dev.c:4802)\n bond_dev_queue_xmit (drivers/net/bonding/bond_main.c:312)\n bond_xmit_broadcast (drivers/net/bonding/bond_main.c:5279)\n bond_start_xmit (drivers/net/bonding/bond_main.c:5530)\n dev_hard_start_xmit (net/core/dev.c:3887)\n __dev_queue_xmit (net/core/dev.c:4841)\n mld_sendpack\n mld_ifc_work\n process_one_work\n worker_thread\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23276",
"url": "https://www.suse.com/security/cve/CVE-2026-23276"
},
{
"category": "external",
"summary": "SUSE Bug 1260012 for CVE-2026-23276",
"url": "https://bugzilla.suse.com/1260012"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-23276"
},
{
"cve": "CVE-2026-31430",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31430"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nX.509: Fix out-of-bounds access when parsing extensions\n\nLeo reports an out-of-bounds access when parsing a certificate with\nempty Basic Constraints or Key Usage extension because the first byte of\nthe extension is read before checking its length. Fix it.\n\nThe bug can be triggered by an unprivileged user by submitting a\nspecially crafted certificate to the kernel through the keyrings(7) API.\nLeo has demonstrated this with a proof-of-concept program responsibly\ndisclosed off-list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31430",
"url": "https://www.suse.com/security/cve/CVE-2026-31430"
},
{
"category": "external",
"summary": "SUSE Bug 1262391 for CVE-2026-31430",
"url": "https://bugzilla.suse.com/1262391"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31430"
},
{
"cve": "CVE-2026-31431",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31431"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings. Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31431",
"url": "https://www.suse.com/security/cve/CVE-2026-31431"
},
{
"category": "external",
"summary": "SUSE Bug 1262573 for CVE-2026-31431",
"url": "https://bugzilla.suse.com/1262573"
},
{
"category": "external",
"summary": "SUSE Bug 1263689 for CVE-2026-31431",
"url": "https://bugzilla.suse.com/1263689"
},
{
"category": "external",
"summary": "SUSE Bug 1263938 for CVE-2026-31431",
"url": "https://bugzilla.suse.com/1263938"
},
{
"category": "external",
"summary": "SUSE Bug 1263939 for CVE-2026-31431",
"url": "https://bugzilla.suse.com/1263939"
},
{
"category": "external",
"summary": "SUSE Bug 1264274 for CVE-2026-31431",
"url": "https://bugzilla.suse.com/1264274"
},
{
"category": "external",
"summary": "SUSE Bug 1265460 for CVE-2026-31431",
"url": "https://bugzilla.suse.com/1265460"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-31431"
},
{
"cve": "CVE-2026-31439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31439"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: xilinx: xdma: Fix regmap init error handling\n\ndevm_regmap_init_mmio returns an ERR_PTR() upon error, not NULL.\nFix the error check and also fix the error message. Use the error code\nfrom ERR_PTR() instead of the wrong value in ret.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31439",
"url": "https://www.suse.com/security/cve/CVE-2026-31439"
},
{
"category": "external",
"summary": "SUSE Bug 1262639 for CVE-2026-31439",
"url": "https://bugzilla.suse.com/1262639"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31439"
},
{
"cve": "CVE-2026-31440",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31440"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix leaking event log memory\n\nDuring the device remove process, the device is reset, causing the\nconfiguration registers to go back to their default state, which is\nzero. As the driver is checking if the event log support was enabled\nbefore deallocating, it will fail if a reset happened before.\n\nDo not check if the support was enabled, the check for \u0027idxd-\u003eevl\u0027\nbeing valid (only allocated if the HW capability is available) is\nenough.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31440",
"url": "https://www.suse.com/security/cve/CVE-2026-31440"
},
{
"category": "external",
"summary": "SUSE Bug 1262658 for CVE-2026-31440",
"url": "https://bugzilla.suse.com/1262658"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31440"
},
{
"cve": "CVE-2026-31441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31441"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix memory leak when a wq is reset\n\nidxd_wq_disable_cleanup() which is called from the reset path for a\nworkqueue, sets the wq type to NONE, which for other parts of the\ndriver mean that the wq is empty (all its resources were released).\n\nOnly set the wq type to NONE after its resources are released.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31441",
"url": "https://www.suse.com/security/cve/CVE-2026-31441"
},
{
"category": "external",
"summary": "SUSE Bug 1262659 for CVE-2026-31441",
"url": "https://bugzilla.suse.com/1262659"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31441"
},
{
"cve": "CVE-2026-31447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31447"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: reject mount if bigalloc with s_first_data_block != 0\n\nbigalloc with s_first_data_block != 0 is not supported, reject mounting\nit.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31447",
"url": "https://www.suse.com/security/cve/CVE-2026-31447"
},
{
"category": "external",
"summary": "SUSE Bug 1262614 for CVE-2026-31447",
"url": "https://bugzilla.suse.com/1262614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31447"
},
{
"cve": "CVE-2026-31474",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31474"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: isotp: fix tx.buf use-after-free in isotp_sendmsg()\n\nisotp_sendmsg() uses only cmpxchg() on so-\u003etx.state to serialize access\nto so-\u003etx.buf. isotp_release() waits for ISOTP_IDLE via\nwait_event_interruptible() and then calls kfree(so-\u003etx.buf).\n\nIf a signal interrupts the wait_event_interruptible() inside close()\nwhile tx.state is ISOTP_SENDING, the loop exits early and release\nproceeds to force ISOTP_SHUTDOWN and continues to kfree(so-\u003etx.buf)\nwhile sendmsg may still be reading so-\u003etx.buf for the final CAN frame\nin isotp_fill_dataframe().\n\nThe so-\u003etx.buf can be allocated once when the standard tx.buf length needs\nto be extended. Move the kfree() of this potentially extended tx.buf to\nsk_destruct time when either isotp_sendmsg() and isotp_release() are done.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31474",
"url": "https://www.suse.com/security/cve/CVE-2026-31474"
},
{
"category": "external",
"summary": "SUSE Bug 1262723 for CVE-2026-31474",
"url": "https://bugzilla.suse.com/1262723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31474"
},
{
"cve": "CVE-2026-31482",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31482"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/entry: Scrub r12 register on kernel entry\n\nBefore commit f33f2d4c7c80 (\"s390/bp: remove TIF_ISOLATE_BP\"),\nall entry handlers loaded r12 with the current task pointer\n(lg %r12,__LC_CURRENT) for use by the BPENTER/BPEXIT macros. That\ncommit removed TIF_ISOLATE_BP, dropping both the branch prediction\nmacros and the r12 load, but did not add r12 to the register clearing\nsequence.\n\nAdd the missing xgr %r12,%r12 to make the register scrub consistent\nacross all entry points.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31482",
"url": "https://www.suse.com/security/cve/CVE-2026-31482"
},
{
"category": "external",
"summary": "SUSE Bug 1262745 for CVE-2026-31482",
"url": "https://bugzilla.suse.com/1262745"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-31482"
},
{
"cve": "CVE-2026-31483",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31483"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/syscalls: Add spectre boundary for syscall dispatch table\n\nThe s390 syscall number is directly controlled by userspace, but does\nnot have an array_index_nospec() boundary to prevent access past the\nsyscall function pointer tables.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31483",
"url": "https://www.suse.com/security/cve/CVE-2026-31483"
},
{
"category": "external",
"summary": "SUSE Bug 1262771 for CVE-2026-31483",
"url": "https://bugzilla.suse.com/1262771"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31483"
},
{
"cve": "CVE-2026-31485",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31485"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: spi-fsl-lpspi: fix teardown order issue (UAF)\n\nThere is a teardown order issue in the driver. The SPI controller is\nregistered using devm_spi_register_controller(), which delays\nunregistration of the SPI controller until after the fsl_lpspi_remove()\nfunction returns.\n\nAs the fsl_lpspi_remove() function synchronously tears down the DMA\nchannels, a running SPI transfer triggers the following NULL pointer\ndereference due to use after free:\n\n| fsl_lpspi 42550000.spi: I/O Error in DMA RX\n| Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n[...]\n| Call trace:\n| fsl_lpspi_dma_transfer+0x260/0x340 [spi_fsl_lpspi]\n| fsl_lpspi_transfer_one+0x198/0x448 [spi_fsl_lpspi]\n| spi_transfer_one_message+0x49c/0x7c8\n| __spi_pump_transfer_message+0x120/0x420\n| __spi_sync+0x2c4/0x520\n| spi_sync+0x34/0x60\n| spidev_message+0x20c/0x378 [spidev]\n| spidev_ioctl+0x398/0x750 [spidev]\n[...]\n\nSwitch from devm_spi_register_controller() to spi_register_controller() in\nfsl_lpspi_probe() and add the corresponding spi_unregister_controller() in\nfsl_lpspi_remove().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31485",
"url": "https://www.suse.com/security/cve/CVE-2026-31485"
},
{
"category": "external",
"summary": "SUSE Bug 1262768 for CVE-2026-31485",
"url": "https://bugzilla.suse.com/1262768"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31485"
},
{
"cve": "CVE-2026-31497",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31497"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btusb: clamp SCO altsetting table indices\n\nbtusb_work() maps the number of active SCO links to USB alternate\nsettings through a three-entry lookup table when CVSD traffic uses\ntransparent voice settings. The lookup currently indexes alts[] with\ndata-\u003esco_num - 1 without first constraining sco_num to the number of\navailable table entries.\n\nWhile the table only defines alternate settings for up to three SCO\nlinks, data-\u003esco_num comes from hci_conn_num() and is used directly.\nCap the lookup to the last table entry before indexing it so the\ndriver keeps selecting the highest supported alternate setting without\nreading past alts[].",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31497",
"url": "https://www.suse.com/security/cve/CVE-2026-31497"
},
{
"category": "external",
"summary": "SUSE Bug 1262992 for CVE-2026-31497",
"url": "https://bugzilla.suse.com/1262992"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31497"
},
{
"cve": "CVE-2026-31498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31498"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop\n\nl2cap_config_req() processes CONFIG_REQ for channels in BT_CONNECTED\nstate to support L2CAP reconfiguration (e.g. MTU changes). However,\nsince both CONF_INPUT_DONE and CONF_OUTPUT_DONE are already set from\nthe initial configuration, the reconfiguration path falls through to\nl2cap_ertm_init(), which re-initializes tx_q, srej_q, srej_list, and\nretrans_list without freeing the previous allocations and sets\nchan-\u003esdu to NULL without freeing the existing skb. This leaks all\npreviously allocated ERTM resources.\n\nAdditionally, l2cap_parse_conf_req() does not validate the minimum\nvalue of remote_mps derived from the RFC max_pdu_size option. A zero\nvalue propagates to l2cap_segment_sdu() where pdu_len becomes zero,\ncausing the while loop to never terminate since len is never\ndecremented, exhausting all available memory.\n\nFix the double-init by skipping l2cap_ertm_init() and\nl2cap_chan_ready() when the channel is already in BT_CONNECTED state,\nwhile still allowing the reconfiguration parameters to be updated\nthrough l2cap_parse_conf_req(). Also add a pdu_len zero check in\nl2cap_segment_sdu() as a safeguard.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31498",
"url": "https://www.suse.com/security/cve/CVE-2026-31498"
},
{
"category": "external",
"summary": "SUSE Bug 1262751 for CVE-2026-31498",
"url": "https://bugzilla.suse.com/1262751"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31498"
},
{
"cve": "CVE-2026-31509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31509"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: nci: fix circular locking dependency in nci_close_device\n\nnci_close_device() flushes rx_wq and tx_wq while holding req_lock.\nThis causes a circular locking dependency because nci_rx_work()\nrunning on rx_wq can end up taking req_lock too:\n\n nci_rx_work -\u003e nci_rx_data_packet -\u003e nci_data_exchange_complete\n -\u003e __sk_destruct -\u003e rawsock_destruct -\u003e nfc_deactivate_target\n -\u003e nci_deactivate_target -\u003e nci_request -\u003e mutex_lock(\u0026ndev-\u003ereq_lock)\n\nMove the flush of rx_wq after req_lock has been released.\nThis should safe (I think) because NCI_UP has already been cleared\nand the transport is closed, so the work will see it and return\n-ENETDOWN.\n\nNIPA has been hitting this running the nci selftest with a debug\nkernel on roughly 4% of the runs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31509",
"url": "https://www.suse.com/security/cve/CVE-2026-31509"
},
{
"category": "external",
"summary": "SUSE Bug 1263097 for CVE-2026-31509",
"url": "https://bugzilla.suse.com/1263097"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31509"
},
{
"cve": "CVE-2026-31510",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31510"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb\n\nBefore using sk pointer, check if it is null.\n\nFix the following:\n\n KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267]\n CPU: 0 UID: 0 PID: 5985 Comm: kworker/0:5 Not tainted 7.0.0-rc4-00029-ga989fde763f4 #1 PREEMPT(full)\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.17.0-9.fc43 06/10/2025\n Workqueue: events l2cap_info_timeout\n RIP: 0010:kasan_byte_accessible+0x12/0x30\n Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df \u003c0f\u003e b6 04 07 3c 08 0f 92 c0 c3 cc cce\n veth0_macvtap: entered promiscuous mode\n RSP: 0018:ffffc90006e0f808 EFLAGS: 00010202\n RAX: dffffc0000000000 RBX: ffffffff89746018 RCX: 0000000080000001\n RDX: 0000000000000000 RSI: ffffffff89746018 RDI: 000000000000004c\n RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000\n R10: dffffc0000000000 R11: ffffffff8aae3e70 R12: 0000000000000000\n R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001\n FS: 0000000000000000(0000) GS:ffff8880983c2000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00005582615a5008 CR3: 000000007007e000 CR4: 0000000000752ef0\n PKRU: 55555554\n Call Trace:\n \u003cTASK\u003e\n __kasan_check_byte+0x12/0x40\n lock_acquire+0x79/0x2e0\n lock_sock_nested+0x48/0x100\n ? l2cap_sock_ready_cb+0x46/0x160\n l2cap_sock_ready_cb+0x46/0x160\n l2cap_conn_start+0x779/0xff0\n ? __pfx_l2cap_conn_start+0x10/0x10\n ? l2cap_info_timeout+0x60/0xa0\n ? __pfx___mutex_lock+0x10/0x10\n l2cap_info_timeout+0x68/0xa0\n ? process_scheduled_works+0xa8d/0x18c0\n process_scheduled_works+0xb6e/0x18c0\n ? __pfx_process_scheduled_works+0x10/0x10\n ? assign_work+0x3d5/0x5e0\n worker_thread+0xa53/0xfc0\n kthread+0x388/0x470\n ? __pfx_worker_thread+0x10/0x10\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x51e/0xb90\n ? __pfx_ret_from_fork+0x10/0x10\n veth1_macvtap: entered promiscuous mode\n ? __switch_to+0xc7d/0x1450\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n Modules linked in:\n ---[ end trace 0000000000000000 ]---\n batman_adv: batadv0: Interface activated: batadv_slave_0\n batman_adv: batadv0: Interface activated: batadv_slave_1\n netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0\n netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0\n netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0\n netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0\n RIP: 0010:kasan_byte_accessible+0x12/0x30\n Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df \u003c0f\u003e b6 04 07 3c 08 0f 92 c0 c3 cc cce\n ieee80211 phy39: Selected rate control algorithm \u0027minstrel_ht\u0027\n RSP: 0018:ffffc90006e0f808 EFLAGS: 00010202\n RAX: dffffc0000000000 RBX: ffffffff89746018 RCX: 0000000080000001\n RDX: 0000000000000000 RSI: ffffffff89746018 RDI: 000000000000004c\n RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000\n R10: dffffc0000000000 R11: ffffffff8aae3e70 R12: 0000000000000000\n R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001\n FS: 0000000000000000(0000) GS:ffff8880983c2000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007f7e16139e9c CR3: 000000000e74e000 CR4: 0000000000752ef0\n PKRU: 55555554\n Kernel panic - not syncing: Fatal exception",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31510",
"url": "https://www.suse.com/security/cve/CVE-2026-31510"
},
{
"category": "external",
"summary": "SUSE Bug 1262603 for CVE-2026-31510",
"url": "https://bugzilla.suse.com/1262603"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31510"
},
{
"cve": "CVE-2026-31511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31511"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete\n\nThis fixes the condition checking so mgmt_pending_valid is executed\nwhenever status != -ECANCELED otherwise calling mgmt_pending_free(cmd)\nwould kfree(cmd) without unlinking it from the list first, leaving a\ndangling pointer. Any subsequent list traversal (e.g.,\nmgmt_pending_foreach during __mgmt_power_off, or another\nmgmt_pending_valid call) would dereference freed memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31511",
"url": "https://www.suse.com/security/cve/CVE-2026-31511"
},
{
"category": "external",
"summary": "SUSE Bug 1263020 for CVE-2026-31511",
"url": "https://bugzilla.suse.com/1263020"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31511"
},
{
"cve": "CVE-2026-31520",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31520"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: apple: avoid memory leak in apple_report_fixup()\n\nThe apple_report_fixup() function was returning a\nnewly kmemdup()-allocated buffer, but never freeing it.\n\nThe caller of report_fixup() does not take ownership of the returned\npointer, but it *is* permitted to return a sub-portion of the input\nrdesc, whose lifetime is managed by the caller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31520",
"url": "https://www.suse.com/security/cve/CVE-2026-31520"
},
{
"category": "external",
"summary": "SUSE Bug 1262653 for CVE-2026-31520",
"url": "https://bugzilla.suse.com/1262653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31520"
},
{
"cve": "CVE-2026-31522",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31522"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: magicmouse: avoid memory leak in magicmouse_report_fixup()\n\nThe magicmouse_report_fixup() function was returning a\nnewly kmemdup()-allocated buffer, but never freeing it.\n\nThe caller of report_fixup() does not take ownership of the returned\npointer, but it *is* permitted to return a sub-portion of the input\nrdesc, whose lifetime is managed by the caller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31522",
"url": "https://www.suse.com/security/cve/CVE-2026-31522"
},
{
"category": "external",
"summary": "SUSE Bug 1262637 for CVE-2026-31522",
"url": "https://bugzilla.suse.com/1262637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31522"
},
{
"cve": "CVE-2026-31524",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31524"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: asus: avoid memory leak in asus_report_fixup()\n\nThe asus_report_fixup() function was returning a newly allocated\nkmemdup()-allocated buffer, but never freeing it. Switch to\ndevm_kzalloc() to ensure the memory is managed and freed automatically\nwhen the device is removed.\n\nThe caller of report_fixup() does not take ownership of the returned\npointer, but it is permitted to return a pointer whose lifetime is at\nleast that of the input buffer.\n\nAlso fix a harmless out-of-bounds read by copying only the original\ndescriptor size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31524",
"url": "https://www.suse.com/security/cve/CVE-2026-31524"
},
{
"category": "external",
"summary": "SUSE Bug 1262605 for CVE-2026-31524",
"url": "https://bugzilla.suse.com/1262605"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31524"
},
{
"cve": "CVE-2026-31532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31532"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: raw: fix ro-\u003euniq use-after-free in raw_rcv()\n\nraw_release() unregisters raw CAN receive filters via can_rx_unregister(),\nbut receiver deletion is deferred with call_rcu(). This leaves a window\nwhere raw_rcv() may still be running in an RCU read-side critical section\nafter raw_release() frees ro-\u003euniq, leading to a use-after-free of the\npercpu uniq storage.\n\nMove free_percpu(ro-\u003euniq) out of raw_release() and into a raw-specific\nsocket destructor. can_rx_unregister() takes an extra reference to the\nsocket and only drops it from the RCU callback, so freeing uniq from\nsk_destruct ensures the percpu area is not released until the relevant\ncallbacks have drained.\n\n[mkl: applied manually]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31532",
"url": "https://www.suse.com/security/cve/CVE-2026-31532"
},
{
"category": "external",
"summary": "SUSE Bug 1262757 for CVE-2026-31532",
"url": "https://bugzilla.suse.com/1262757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31532"
},
{
"cve": "CVE-2026-31540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31540"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gt: Check set_default_submission() before deferencing\n\nWhen the i915 driver firmware binaries are not present, the\nset_default_submission pointer is not set. This pointer is\ndereferenced during suspend anyways.\n\nAdd a check to make sure it is set before dereferencing.\n\n[ 23.289926] PM: suspend entry (deep)\n[ 23.293558] Filesystems sync: 0.000 seconds\n[ 23.298010] Freezing user space processes\n[ 23.302771] Freezing user space processes completed (elapsed 0.000 seconds)\n[ 23.309766] OOM killer disabled.\n[ 23.313027] Freezing remaining freezable tasks\n[ 23.318540] Freezing remaining freezable tasks completed (elapsed 0.001 seconds)\n[ 23.342038] serial 00:05: disabled\n[ 23.345719] serial 00:02: disabled\n[ 23.349342] serial 00:01: disabled\n[ 23.353782] sd 0:0:0:0: [sda] Synchronizing SCSI cache\n[ 23.358993] sd 1:0:0:0: [sdb] Synchronizing SCSI cache\n[ 23.361635] ata1.00: Entering standby power mode\n[ 23.368863] ata2.00: Entering standby power mode\n[ 23.445187] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[ 23.452194] #PF: supervisor instruction fetch in kernel mode\n[ 23.457896] #PF: error_code(0x0010) - not-present page\n[ 23.463065] PGD 0 P4D 0\n[ 23.465640] Oops: Oops: 0010 [#1] SMP NOPTI\n[ 23.469869] CPU: 8 UID: 0 PID: 211 Comm: kworker/u48:18 Tainted: G S W 6.19.0-rc4-00020-gf0b9d8eb98df #10 PREEMPT(voluntary)\n[ 23.482512] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN\n[ 23.496511] Workqueue: async async_run_entry_fn\n[ 23.501087] RIP: 0010:0x0\n[ 23.503755] Code: Unable to access opcode bytes at 0xffffffffffffffd6.\n[ 23.510324] RSP: 0018:ffffb4a60065fca8 EFLAGS: 00010246\n[ 23.515592] RAX: 0000000000000000 RBX: ffff9f428290e000 RCX: 000000000000000f\n[ 23.522765] RDX: 0000000000000000 RSI: 0000000000000282 RDI: ffff9f428290e000\n[ 23.529937] RBP: ffff9f4282907070 R08: ffff9f4281130428 R09: 00000000ffffffff\n[ 23.537111] R10: 0000000000000000 R11: 0000000000000001 R12: ffff9f42829070f8\n[ 23.544284] R13: ffff9f4282906028 R14: ffff9f4282900000 R15: ffff9f4282906b68\n[ 23.551457] FS: 0000000000000000(0000) GS:ffff9f466b2cf000(0000) knlGS:0000000000000000\n[ 23.559588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 23.565365] CR2: ffffffffffffffd6 CR3: 000000031c230001 CR4: 0000000000f70ef0\n[ 23.572539] PKRU: 55555554\n[ 23.575281] Call Trace:\n[ 23.577770] \u003cTASK\u003e\n[ 23.579905] intel_engines_reset_default_submission+0x42/0x60\n[ 23.585695] __intel_gt_unset_wedged+0x191/0x200\n[ 23.590360] intel_gt_unset_wedged+0x20/0x40\n[ 23.594675] gt_sanitize+0x15e/0x170\n[ 23.598290] i915_gem_suspend_late+0x6b/0x180\n[ 23.602692] i915_drm_suspend_late+0x35/0xf0\n[ 23.607008] ? __pfx_pci_pm_suspend_late+0x10/0x10\n[ 23.611843] dpm_run_callback+0x78/0x1c0\n[ 23.615817] device_suspend_late+0xde/0x2e0\n[ 23.620037] async_suspend_late+0x18/0x30\n[ 23.624082] async_run_entry_fn+0x25/0xa0\n[ 23.628129] process_one_work+0x15b/0x380\n[ 23.632182] worker_thread+0x2a5/0x3c0\n[ 23.635973] ? __pfx_worker_thread+0x10/0x10\n[ 23.640279] kthread+0xf6/0x1f0\n[ 23.643464] ? __pfx_kthread+0x10/0x10\n[ 23.647263] ? __pfx_kthread+0x10/0x10\n[ 23.651045] ret_from_fork+0x131/0x190\n[ 23.654837] ? __pfx_kthread+0x10/0x10\n[ 23.658634] ret_from_fork_asm+0x1a/0x30\n[ 23.662597] \u003c/TASK\u003e\n[ 23.664826] Modules linked in:\n[ 23.667914] CR2: 0000000000000000\n[ 23.671271] ------------[ cut here ]------------\n\n(cherry picked from commit daa199abc3d3d1740c9e3a2c3e9216ae5b447cad)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31540",
"url": "https://www.suse.com/security/cve/CVE-2026-31540"
},
{
"category": "external",
"summary": "SUSE Bug 1263011 for CVE-2026-31540",
"url": "https://bugzilla.suse.com/1263011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31540"
},
{
"cve": "CVE-2026-31542",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31542"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/platform/uv: Handle deconfigured sockets\n\nWhen a socket is deconfigured, it\u0027s mapped to SOCK_EMPTY (0xffff). This causes\na panic while allocating UV hub info structures.\n\nFix this by using NUMA_NO_NODE, allowing UV hub info structures to be\nallocated on valid nodes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31542",
"url": "https://www.suse.com/security/cve/CVE-2026-31542"
},
{
"category": "external",
"summary": "SUSE Bug 1263010 for CVE-2026-31542",
"url": "https://bugzilla.suse.com/1263010"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31542"
},
{
"cve": "CVE-2026-31545",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31545"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFC: nxp-nci: allow GPIOs to sleep\n\nAllow the firmware and enable GPIOs to sleep.\n\nThis fixes a `WARN_ON\u0027 and allows the driver to operate GPIOs which are\nconnected to I2C GPIO expanders.\n\n-- \u003e8 --\nkernel: WARNING: CPU: 3 PID: 2636 at drivers/gpio/gpiolib.c:3880 gpiod_set_value+0x88/0x98\n-- \u003e8 --",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31545",
"url": "https://www.suse.com/security/cve/CVE-2026-31545"
},
{
"category": "external",
"summary": "SUSE Bug 1263013 for CVE-2026-31545",
"url": "https://bugzilla.suse.com/1263013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31545"
},
{
"cve": "CVE-2026-31548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31548"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down\n\nWhen the nl80211 socket that originated a PMSR request is\nclosed, cfg80211_release_pmsr() sets the request\u0027s nl_portid\nto zero and schedules pmsr_free_wk to process the abort\nasynchronously. If the interface is concurrently torn down\nbefore that work runs, cfg80211_pmsr_wdev_down() calls\ncfg80211_pmsr_process_abort() directly. However, the already-\nscheduled pmsr_free_wk work item remains pending and may run\nafter the interface has been removed from the driver. This\ncould cause the driver\u0027s abort_pmsr callback to operate on a\ntorn-down interface, leading to undefined behavior and\npotential crashes.\n\nCancel pmsr_free_wk synchronously in cfg80211_pmsr_wdev_down()\nbefore calling cfg80211_pmsr_process_abort(). This ensures any\npending or in-progress work is drained before interface teardown\nproceeds, preventing the work from invoking the driver abort\ncallback after the interface is gone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31548",
"url": "https://www.suse.com/security/cve/CVE-2026-31548"
},
{
"category": "external",
"summary": "SUSE Bug 1263008 for CVE-2026-31548",
"url": "https://bugzilla.suse.com/1263008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31548"
},
{
"cve": "CVE-2026-31549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31549"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: cp2615: fix serial string NULL-deref at probe\n\nThe cp2615 driver uses the USB device serial string as the i2c adapter\nname but does not make sure that the string exists.\n\nVerify that the device has a serial number before accessing it to avoid\ntriggering a NULL-pointer dereference (e.g. with malicious devices).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31549",
"url": "https://www.suse.com/security/cve/CVE-2026-31549"
},
{
"category": "external",
"summary": "SUSE Bug 1263025 for CVE-2026-31549",
"url": "https://bugzilla.suse.com/1263025"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31549"
},
{
"cve": "CVE-2026-31551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31551"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: Fix static_branch_dec() underflow for aql_disable.\n\nsyzbot reported static_branch_dec() underflow in aql_enable_write(). [0]\n\nThe problem is that aql_enable_write() does not serialise concurrent\nwrite()s to the debugfs.\n\naql_enable_write() checks static_key_false(\u0026aql_disable.key) and\nlater calls static_branch_inc() or static_branch_dec(), but the\nstate may change between the two calls.\n\naql_disable does not need to track inc/dec.\n\nLet\u0027s use static_branch_enable() and static_branch_disable().\n\n[0]:\nval == 0\nWARNING: kernel/jump_label.c:311 at __static_key_slow_dec_cpuslocked.part.0+0x107/0x120 kernel/jump_label.c:311, CPU#0: syz.1.3155/20288\nModules linked in:\nCPU: 0 UID: 0 PID: 20288 Comm: syz.1.3155 Tainted: G U L syzkaller #0 PREEMPT(full)\nTainted: [U]=USER, [L]=SOFTLOCKUP\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026\nRIP: 0010:__static_key_slow_dec_cpuslocked.part.0+0x107/0x120 kernel/jump_label.c:311\nCode: f2 c9 ff 5b 5d c3 cc cc cc cc e8 54 f2 c9 ff 48 89 df e8 ac f9 ff ff eb ad e8 45 f2 c9 ff 90 0f 0b 90 eb a2 e8 3a f2 c9 ff 90 \u003c0f\u003e 0b 90 eb 97 48 89 df e8 5c 4b 33 00 e9 36 ff ff ff 0f 1f 80 00\nRSP: 0018:ffffc9000b9f7c10 EFLAGS: 00010293\nRAX: 0000000000000000 RBX: ffffffff9b3e5d40 RCX: ffffffff823c57b4\nRDX: ffff8880285a0000 RSI: ffffffff823c5846 RDI: ffff8880285a0000\nRBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000a\nR13: 1ffff9200173ef88 R14: 0000000000000001 R15: ffffc9000b9f7e98\nFS: 00007f530dd726c0(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000200000001140 CR3: 000000007cc4a000 CR4: 00000000003526f0\nCall Trace:\n \u003cTASK\u003e\n __static_key_slow_dec_cpuslocked kernel/jump_label.c:297 [inline]\n __static_key_slow_dec kernel/jump_label.c:321 [inline]\n static_key_slow_dec+0x7c/0xc0 kernel/jump_label.c:336\n aql_enable_write+0x2b2/0x310 net/mac80211/debugfs.c:343\n short_proxy_write+0x133/0x1a0 fs/debugfs/file.c:383\n vfs_write+0x2aa/0x1070 fs/read_write.c:684\n ksys_pwrite64 fs/read_write.c:793 [inline]\n __do_sys_pwrite64 fs/read_write.c:801 [inline]\n __se_sys_pwrite64 fs/read_write.c:798 [inline]\n __x64_sys_pwrite64+0x1eb/0x250 fs/read_write.c:798\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f530cf9aeb9\nCode: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f530dd72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012\nRAX: ffffffffffffffda RBX: 00007f530d215fa0 RCX: 00007f530cf9aeb9\nRDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000010\nRBP: 00007f530d008c1f R08: 0000000000000000 R09: 0000000000000000\nR10: 4200000000000005 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007f530d216038 R14: 00007f530d215fa0 R15: 00007ffde89fb978\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31551",
"url": "https://www.suse.com/security/cve/CVE-2026-31551"
},
{
"category": "external",
"summary": "SUSE Bug 1263014 for CVE-2026-31551",
"url": "https://bugzilla.suse.com/1263014"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31551"
},
{
"cve": "CVE-2026-31552",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31552"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom\n\nSince upstream commit e75665dd0968 (\"wifi: wlcore: ensure skb headroom\nbefore skb_push\"), wl1271_tx_allocate() and with it\nwl1271_prepare_tx_frame() returns -EAGAIN if pskb_expand_head() fails.\nHowever, in wlcore_tx_work_locked(), a return value of -EAGAIN from\nwl1271_prepare_tx_frame() is interpreted as the aggregation buffer being\nfull. This causes the code to flush the buffer, put the skb back at the\nhead of the queue, and immediately retry the same skb in a tight while\nloop.\n\nBecause wlcore_tx_work_locked() holds wl-\u003emutex, and the retry happens\nimmediately with GFP_ATOMIC, this will result in an infinite loop and a\nCPU soft lockup. Return -ENOMEM instead so the packet is dropped and\nthe loop terminates.\n\nThe problem was found by an experimental code review agent based on\ngemini-3.1-pro while reviewing backports into v6.18.y.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31552",
"url": "https://www.suse.com/security/cve/CVE-2026-31552"
},
{
"category": "external",
"summary": "SUSE Bug 1263016 for CVE-2026-31552",
"url": "https://bugzilla.suse.com/1263016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31552"
},
{
"cve": "CVE-2026-31566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31566"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib\n\namdgpu_amdkfd_submit_ib() submits a GPU job and gets a fence\nfrom amdgpu_ib_schedule(). This fence is used to wait for job\ncompletion.\n\nCurrently, the code drops the fence reference using dma_fence_put()\nbefore calling dma_fence_wait().\n\nIf dma_fence_put() releases the last reference, the fence may be\nfreed before dma_fence_wait() is called. This can lead to a\nuse-after-free.\n\nFix this by waiting on the fence first and releasing the reference\nonly after dma_fence_wait() completes.\n\nFixes the below:\ndrivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c:697 amdgpu_amdkfd_submit_ib() warn: passing freed memory \u0027f\u0027 (line 696)\n\n(cherry picked from commit 8b9e5259adc385b61a6590a13b82ae0ac2bd3482)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31566",
"url": "https://www.suse.com/security/cve/CVE-2026-31566"
},
{
"category": "external",
"summary": "SUSE Bug 1263055 for CVE-2026-31566",
"url": "https://bugzilla.suse.com/1263055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31566"
},
{
"cve": "CVE-2026-31576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31576"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: hackrf: fix to not free memory after the device is registered in hackrf_probe()\n\nIn hackrf driver, the following race condition occurs:\n```\n\t\tCPU0\t\t\t\t\t\tCPU1\nhackrf_probe()\n kzalloc(); // alloc hackrf_dev\n ....\n v4l2_device_register();\n ....\n\t\t\t\t\t\tfd = sys_open(\"/path/to/dev\"); // open hackrf fd\n\t\t\t\t\t\t....\n v4l2_device_unregister();\n ....\n kfree(); // free hackrf_dev\n ....\n\t\t\t\t\t\tsys_ioctl(fd, ...);\n\t\t\t\t\t\t v4l2_ioctl();\n\t\t\t\t\t\t video_is_registered() // UAF!!\n\t\t\t\t\t\t....\n\t\t\t\t\t\tsys_close(fd);\n\t\t\t\t\t\t v4l2_release() // UAF!!\n\t\t\t\t\t\t hackrf_video_release()\n\t\t\t\t\t\t kfree(); // DFB!!\n```\n\nWhen a V4L2 or video device is unregistered, the device node is removed so\nnew open() calls are blocked.\n\nHowever, file descriptors that are already open-and any in-flight I/O-do\nnot terminate immediately; they remain valid until the last reference is\ndropped and the driver\u0027s release() is invoked.\n\nTherefore, freeing device memory on the error path after hackrf_probe()\nhas registered dev it will lead to a race to use-after-free vuln, since\nthose already-open handles haven\u0027t been released yet.\n\nAnd since release() free memory too, race to use-after-free and\ndouble-free vuln occur.\n\nTo prevent this, if device is registered from probe(), it should be\nmodified to free memory only through release() rather than calling\nkfree() directly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31576",
"url": "https://www.suse.com/security/cve/CVE-2026-31576"
},
{
"category": "external",
"summary": "SUSE Bug 1263073 for CVE-2026-31576",
"url": "https://bugzilla.suse.com/1263073"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31576"
},
{
"cve": "CVE-2026-31578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31578"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: as102: fix to not free memory after the device is registered in as102_usb_probe()\n\nIn as102_usb driver, the following race condition occurs:\n```\n\t\tCPU0\t\t\t\t\t\tCPU1\nas102_usb_probe()\n kzalloc(); // alloc as102_dev_t\n ....\n usb_register_dev();\n\t\t\t\t\t\tfd = sys_open(\"/path/to/dev\"); // open as102 fd\n\t\t\t\t\t\t....\n usb_deregister_dev();\n ....\n kfree(); // free as102_dev_t\n ....\n\t\t\t\t\t\tsys_close(fd);\n\t\t\t\t\t\t as102_release() // UAF!!\n\t\t\t\t\t\t as102_usb_release()\n\t\t\t\t\t\t kfree(); // DFB!!\n```\n\nWhen a USB character device registered with usb_register_dev() is later\nunregistered (via usb_deregister_dev() or disconnect), the device node is\nremoved so new open() calls fail. However, file descriptors that are\nalready open do not go away immediately: they remain valid until the last\nreference is dropped and the driver\u0027s .release() is invoked.\n\nIn as102, as102_usb_probe() calls usb_register_dev() and then, on an\nerror path, does usb_deregister_dev() and frees as102_dev_t right away.\nIf userspace raced a successful open() before the deregistration, that\nopen FD will later hit as102_release() --\u003e as102_usb_release() and access\nor free as102_dev_t again, occur a race to use-after-free and\ndouble-free vuln.\n\nThe fix is to never kfree(as102_dev_t) directly once usb_register_dev()\nhas succeeded. After deregistration, defer freeing memory to .release().\n\nIn other words, let release() perform the last kfree when the final open\nFD is closed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31578",
"url": "https://www.suse.com/security/cve/CVE-2026-31578"
},
{
"category": "external",
"summary": "SUSE Bug 1263075 for CVE-2026-31578",
"url": "https://bugzilla.suse.com/1263075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31578"
},
{
"cve": "CVE-2026-31581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31581"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: 6fire: fix use-after-free on disconnect\n\nIn usb6fire_chip_abort(), the chip struct is allocated as the card\u0027s\nprivate data (via snd_card_new with sizeof(struct sfire_chip)). When\nsnd_card_free_when_closed() is called and no file handles are open, the\ncard and embedded chip are freed synchronously. The subsequent\nchip-\u003ecard = NULL write then hits freed slab memory.\n\nCall trace:\n usb6fire_chip_abort sound/usb/6fire/chip.c:59 [inline]\n usb6fire_chip_disconnect+0x348/0x358 sound/usb/6fire/chip.c:182\n usb_unbind_interface+0x1a8/0x88c drivers/usb/core/driver.c:458\n ...\n hub_event+0x1a04/0x4518 drivers/usb/core/hub.c:5953\n\nFix by moving the card lifecycle out of usb6fire_chip_abort() and into\nusb6fire_chip_disconnect(). The card pointer is saved in a local\nbefore any teardown, snd_card_disconnect() is called first to prevent\nnew opens, URBs are aborted while chip is still valid, and\nsnd_card_free_when_closed() is called last so chip is never accessed\nafter the card may be freed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31581",
"url": "https://www.suse.com/security/cve/CVE-2026-31581"
},
{
"category": "external",
"summary": "SUSE Bug 1263167 for CVE-2026-31581",
"url": "https://bugzilla.suse.com/1263167"
},
{
"category": "external",
"summary": "SUSE Bug 1263168 for CVE-2026-31581",
"url": "https://bugzilla.suse.com/1263168"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31581"
},
{
"cve": "CVE-2026-31583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31583"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: em28xx: fix use-after-free in em28xx_v4l2_open()\n\nem28xx_v4l2_open() reads dev-\u003ev4l2 without holding dev-\u003elock,\ncreating a race with em28xx_v4l2_init()\u0027s error path and\nem28xx_v4l2_fini(), both of which free the em28xx_v4l2 struct\nand set dev-\u003ev4l2 to NULL under dev-\u003elock.\n\nThis race leads to two issues:\n - use-after-free in v4l2_fh_init() when accessing vdev-\u003ectrl_handler,\n since the video_device is embedded in the freed em28xx_v4l2 struct.\n - NULL pointer dereference in em28xx_resolution_set() when accessing\n v4l2-\u003enorm, since dev-\u003ev4l2 has been set to NULL.\n\nFix this by moving the mutex_lock() before the dev-\u003ev4l2 read and\nadding a NULL check for dev-\u003ev4l2 under the lock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31583",
"url": "https://www.suse.com/security/cve/CVE-2026-31583"
},
{
"category": "external",
"summary": "SUSE Bug 1263173 for CVE-2026-31583",
"url": "https://bugzilla.suse.com/1263173"
},
{
"category": "external",
"summary": "SUSE Bug 1263174 for CVE-2026-31583",
"url": "https://bugzilla.suse.com/1263174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-31583"
},
{
"cve": "CVE-2026-31585",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31585"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vidtv: fix nfeeds state corruption on start_streaming failure\n\nsyzbot reported a memory leak in vidtv_psi_service_desc_init [1].\n\nWhen vidtv_start_streaming() fails inside vidtv_start_feed(), the\nnfeeds counter is left incremented even though no feed was actually\nstarted. This corrupts the driver state: subsequent start_feed calls\nsee nfeeds \u003e 1 and skip starting the mux, while stop_feed calls\neventually try to stop a non-existent stream.\n\nThis state corruption can also lead to memory leaks, since the mux\nand channel resources may be partially allocated during a failed\nstart_streaming but never cleaned up, as the stop path finds\ndvb-\u003estreaming == false and returns early.\n\nFix by decrementing nfeeds back when start_streaming fails, keeping\nthe counter in sync with the actual number of active feeds.\n\n[1]\nBUG: memory leak\nunreferenced object 0xffff888145b50820 (size 32):\n comm \"syz.0.17\", pid 6068, jiffies 4294944486\n backtrace (crc 90a0c7d4):\n vidtv_psi_service_desc_init+0x74/0x1b0 drivers/media/test-drivers/vidtv/vidtv_psi.c:288\n vidtv_channel_s302m_init+0xb1/0x2a0 drivers/media/test-drivers/vidtv/vidtv_channel.c:83\n vidtv_channels_init+0x1b/0x40 drivers/media/test-drivers/vidtv/vidtv_channel.c:524\n vidtv_mux_init+0x516/0xbe0 drivers/media/test-drivers/vidtv/vidtv_mux.c:518\n vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline]\n vidtv_start_feed+0x33e/0x4d0 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31585",
"url": "https://www.suse.com/security/cve/CVE-2026-31585"
},
{
"category": "external",
"summary": "SUSE Bug 1263134 for CVE-2026-31585",
"url": "https://bugzilla.suse.com/1263134"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31585"
},
{
"cve": "CVE-2026-31587",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31587"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: q6apm: move component registration to unmanaged version\n\nq6apm component registers dais dynamically from ASoC toplology, which\nare allocated using device managed version apis. Allocating both\ncomponent and dynamic dais using managed version could lead to incorrect\nfree ordering, dai will be freed while component still holding references\nto it.\n\nFix this issue by moving component to unmanged version so\nthat the dai pointers are only freeded after the component is removed.\n\n==================================================================\nBUG: KASAN: slab-use-after-free in snd_soc_del_component_unlocked+0x3d4/0x400 [snd_soc_core]\nRead of size 8 at addr ffff00084493a6e8 by task kworker/u48:0/3426\nTainted: [W]=WARN\nHardware name: LENOVO 21N2ZC5PUS/21N2ZC5PUS, BIOS N42ET57W (1.31 ) 08/08/2024\nWorkqueue: pdr_notifier_wq pdr_notifier_work [pdr_interface]\nCall trace:\n show_stack+0x28/0x7c (C)\n dump_stack_lvl+0x60/0x80\n print_report+0x160/0x4b4\n kasan_report+0xac/0xfc\n __asan_report_load8_noabort+0x20/0x34\n snd_soc_del_component_unlocked+0x3d4/0x400 [snd_soc_core]\n snd_soc_unregister_component_by_driver+0x50/0x88 [snd_soc_core]\n devm_component_release+0x30/0x5c [snd_soc_core]\n devres_release_all+0x13c/0x210\n device_unbind_cleanup+0x20/0x190\n device_release_driver_internal+0x350/0x468\n device_release_driver+0x18/0x30\n bus_remove_device+0x1a0/0x35c\n device_del+0x314/0x7f0\n device_unregister+0x20/0xbc\n apr_remove_device+0x5c/0x7c [apr]\n device_for_each_child+0xd8/0x160\n apr_pd_status+0x7c/0xa8 [apr]\n pdr_notifier_work+0x114/0x240 [pdr_interface]\n process_one_work+0x500/0xb70\n worker_thread+0x630/0xfb0\n kthread+0x370/0x6c0\n ret_from_fork+0x10/0x20\n\nAllocated by task 77:\n kasan_save_stack+0x40/0x68\n kasan_save_track+0x20/0x40\n kasan_save_alloc_info+0x44/0x58\n __kasan_kmalloc+0xbc/0xdc\n __kmalloc_node_track_caller_noprof+0x1f4/0x620\n devm_kmalloc+0x7c/0x1c8\n snd_soc_register_dai+0x50/0x4f0 [snd_soc_core]\n soc_tplg_pcm_elems_load+0x55c/0x1eb8 [snd_soc_core]\n snd_soc_tplg_component_load+0x4f8/0xb60 [snd_soc_core]\n audioreach_tplg_init+0x124/0x1fc [snd_q6apm]\n q6apm_audio_probe+0x10/0x1c [snd_q6apm]\n snd_soc_component_probe+0x5c/0x118 [snd_soc_core]\n soc_probe_component+0x44c/0xaf0 [snd_soc_core]\n snd_soc_bind_card+0xad0/0x2370 [snd_soc_core]\n snd_soc_register_card+0x3b0/0x4c0 [snd_soc_core]\n devm_snd_soc_register_card+0x50/0xc8 [snd_soc_core]\n x1e80100_platform_probe+0x208/0x368 [snd_soc_x1e80100]\n platform_probe+0xc0/0x188\n really_probe+0x188/0x804\n __driver_probe_device+0x158/0x358\n driver_probe_device+0x60/0x190\n __device_attach_driver+0x16c/0x2a8\n bus_for_each_drv+0x100/0x194\n __device_attach+0x174/0x380\n device_initial_probe+0x14/0x20\n bus_probe_device+0x124/0x154\n deferred_probe_work_func+0x140/0x220\n process_one_work+0x500/0xb70\n worker_thread+0x630/0xfb0\n kthread+0x370/0x6c0\n ret_from_fork+0x10/0x20\n\nFreed by task 3426:\n kasan_save_stack+0x40/0x68\n kasan_save_track+0x20/0x40\n __kasan_save_free_info+0x4c/0x80\n __kasan_slab_free+0x78/0xa0\n kfree+0x100/0x4a4\n devres_release_all+0x144/0x210\n device_unbind_cleanup+0x20/0x190\n device_release_driver_internal+0x350/0x468\n device_release_driver+0x18/0x30\n bus_remove_device+0x1a0/0x35c\n device_del+0x314/0x7f0\n device_unregister+0x20/0xbc\n apr_remove_device+0x5c/0x7c [apr]\n device_for_each_child+0xd8/0x160\n apr_pd_status+0x7c/0xa8 [apr]\n pdr_notifier_work+0x114/0x240 [pdr_interface]\n process_one_work+0x500/0xb70\n worker_thread+0x630/0xfb0\n kthread+0x370/0x6c0\n ret_from_fork+0x10/0x20",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31587",
"url": "https://www.suse.com/security/cve/CVE-2026-31587"
},
{
"category": "external",
"summary": "SUSE Bug 1263145 for CVE-2026-31587",
"url": "https://bugzilla.suse.com/1263145"
},
{
"category": "external",
"summary": "SUSE Bug 1263146 for CVE-2026-31587",
"url": "https://bugzilla.suse.com/1263146"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31587"
},
{
"cve": "CVE-2026-31598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31598"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix possible deadlock between unlink and dio_end_io_write\n\nocfs2_unlink takes orphan dir inode_lock first and then ip_alloc_sem,\nwhile in ocfs2_dio_end_io_write, it acquires these locks in reverse order.\nThis creates an ABBA lock ordering violation on lock classes\nocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE] and\nocfs2_file_ip_alloc_sem_key.\n\nLock Chain #0 (orphan dir inode_lock -\u003e ip_alloc_sem):\nocfs2_unlink\n ocfs2_prepare_orphan_dir\n ocfs2_lookup_lock_orphan_dir\n inode_lock(orphan_dir_inode) \u003c- lock A\n __ocfs2_prepare_orphan_dir\n ocfs2_prepare_dir_for_insert\n ocfs2_extend_dir\n\t ocfs2_expand_inline_dir\n\t down_write(\u0026oi-\u003eip_alloc_sem) \u003c- Lock B\n\nLock Chain #1 (ip_alloc_sem -\u003e orphan dir inode_lock):\nocfs2_dio_end_io_write\n down_write(\u0026oi-\u003eip_alloc_sem) \u003c- Lock B\n ocfs2_del_inode_from_orphan()\n inode_lock(orphan_dir_inode) \u003c- Lock A\n\nDeadlock Scenario:\n CPU0 (unlink) CPU1 (dio_end_io_write)\n ------ ------\n inode_lock(orphan_dir_inode)\n down_write(ip_alloc_sem)\n down_write(ip_alloc_sem)\n inode_lock(orphan_dir_inode)\n\nSince ip_alloc_sem is to protect allocation changes, which is unrelated\nwith operations in ocfs2_del_inode_from_orphan. So move\nocfs2_del_inode_from_orphan out of ip_alloc_sem to fix the deadlock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31598",
"url": "https://www.suse.com/security/cve/CVE-2026-31598"
},
{
"category": "external",
"summary": "SUSE Bug 1263718 for CVE-2026-31598",
"url": "https://bugzilla.suse.com/1263718"
},
{
"category": "external",
"summary": "SUSE Bug 1263720 for CVE-2026-31598",
"url": "https://bugzilla.suse.com/1263720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-31598"
},
{
"cve": "CVE-2026-31599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31599"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections\n\nsyzbot reported a general protection fault in vidtv_psi_desc_assign [1].\n\nvidtv_psi_pmt_stream_init() can return NULL on memory allocation\nfailure, but vidtv_channel_pmt_match_sections() does not check for\nthis. When tail is NULL, the subsequent call to\nvidtv_psi_desc_assign(\u0026tail-\u003edescriptor, desc) dereferences a NULL\npointer offset, causing a general protection fault.\n\nAdd a NULL check after vidtv_psi_pmt_stream_init(). On failure, clean\nup the already-allocated stream chain and return.\n\n[1]\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nRIP: 0010:vidtv_psi_desc_assign+0x24/0x90 drivers/media/test-drivers/vidtv/vidtv_psi.c:629\nCall Trace:\n \u003cTASK\u003e\n vidtv_channel_pmt_match_sections drivers/media/test-drivers/vidtv/vidtv_channel.c:349 [inline]\n vidtv_channel_si_init+0x1445/0x1a50 drivers/media/test-drivers/vidtv/vidtv_channel.c:479\n vidtv_mux_init+0x526/0xbe0 drivers/media/test-drivers/vidtv/vidtv_mux.c:519\n vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline]\n vidtv_start_feed+0x33e/0x4d0 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31599",
"url": "https://www.suse.com/security/cve/CVE-2026-31599"
},
{
"category": "external",
"summary": "SUSE Bug 1263031 for CVE-2026-31599",
"url": "https://bugzilla.suse.com/1263031"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31599"
},
{
"cve": "CVE-2026-31603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31603"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: sm750fb: fix division by zero in ps_to_hz()\n\nps_to_hz() is called from hw_sm750_crtc_set_mode() without validating\nthat pixclock is non-zero. A zero pixclock passed via FBIOPUT_VSCREENINFO\ncauses a division by zero.\n\nFix by rejecting zero pixclock in lynxfb_ops_check_var(), consistent\nwith other framebuffer drivers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31603",
"url": "https://www.suse.com/security/cve/CVE-2026-31603"
},
{
"category": "external",
"summary": "SUSE Bug 1263491 for CVE-2026-31603",
"url": "https://bugzilla.suse.com/1263491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31603"
},
{
"cve": "CVE-2026-31604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31604"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: fix device leak on probe failure\n\nDriver core holds a reference to the USB interface and its parent USB\ndevice while the interface is bound to a driver and there is no need to\ntake additional references unless the structures are needed after\ndisconnect.\n\nThis driver takes a reference to the USB device during probe but does\nnot to release it on all probe errors (e.g. when descriptor parsing\nfails).\n\nDrop the redundant device reference to fix the leak, reduce cargo\nculting, make it easier to spot drivers where an extra reference is\nneeded, and reduce the risk of further memory leaks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31604",
"url": "https://www.suse.com/security/cve/CVE-2026-31604"
},
{
"category": "external",
"summary": "SUSE Bug 1263045 for CVE-2026-31604",
"url": "https://bugzilla.suse.com/1263045"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31604"
},
{
"cve": "CVE-2026-31605",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31605"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO\n\nMuch like commit 19f953e74356 (\"fbdev: fb_pm2fb: Avoid potential divide\nby zero error\"), we also need to prevent that same crash from happening\nin the udlfb driver as it uses pixclock directly when dividing, which\nwill crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31605",
"url": "https://www.suse.com/security/cve/CVE-2026-31605"
},
{
"category": "external",
"summary": "SUSE Bug 1263493 for CVE-2026-31605",
"url": "https://bugzilla.suse.com/1263493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31605"
},
{
"cve": "CVE-2026-31615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31615"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: renesas_usb3: validate endpoint index in standard request handlers\n\nThe GET_STATUS and SET/CLEAR_FEATURE handlers extract the endpoint\nnumber from the host-supplied wIndex without any sort of validation.\nFix this up by validating the number of endpoints actually match up with\nthe number the device has before attempting to dereference a pointer\nbased on this math.\n\nThis is just like what was done in commit ee0d382feb44 (\"usb: gadget:\naspeed_udc: validate endpoint index for ast udc\") for the aspeed driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31615",
"url": "https://www.suse.com/security/cve/CVE-2026-31615"
},
{
"category": "external",
"summary": "SUSE Bug 1263776 for CVE-2026-31615",
"url": "https://bugzilla.suse.com/1263776"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31615"
},
{
"cve": "CVE-2026-31616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31616"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()\n\nA broken/bored/mean USB host can overflow the skb_shared_info-\u003efrags[]\narray on a Linux gadget exposing a Phonet function by sending an\nunbounded sequence of full-page OUT transfers.\n\npn_rx_complete() finalizes the skb only when req-\u003eactual \u003c req-\u003elength,\nwhere req-\u003elength is set to PAGE_SIZE by the gadget. If the host always\nsends exactly PAGE_SIZE bytes per transfer, fp-\u003erx.skb will never be\nreset and each completion will add another fragment via\nskb_add_rx_frag(). Once nr_frags exceeds MAX_SKB_FRAGS (default 17),\nsubsequent frag stores overwrite memory adjacent to the shinfo on the\nheap.\n\nDrop the skb and account a length error when the frag limit is reached,\nmatching the fix applied in t7xx by commit f0813bcd2d9d (\"net: wwan:\nt7xx: fix potential skb-\u003efrags overflow in RX path\").",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31616",
"url": "https://www.suse.com/security/cve/CVE-2026-31616"
},
{
"category": "external",
"summary": "SUSE Bug 1263777 for CVE-2026-31616",
"url": "https://bugzilla.suse.com/1263777"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31616"
},
{
"cve": "CVE-2026-31617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31617"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()\n\nThe block_len read from the host-supplied NTB header is checked against\nntb_max but has no lower bound. When block_len is smaller than\nopts-\u003endp_size, the bounds check of:\n\tndp_index \u003e (block_len - opts-\u003endp_size)\nwill underflow producing a huge unsigned value that ndp_index can never\nexceed, defeating the check entirely.\n\nThe same underflow occurs in the datagram index checks against block_len\n- opts-\u003edpe_size. With those checks neutered, a malicious USB host can\nchoose ndp_index and datagram offsets that point past the actual\ntransfer, and the skb_put_data() copies adjacent kernel memory into the\nnetwork skb.\n\nFix this by rejecting block lengths that cannot hold at least the NTB\nheader plus one NDP. This will make block_len - opts-\u003endp_size and\nblock_len - opts-\u003edpe_size both well-defined.\n\nCommit 8d2b1a1ec9f5 (\"CDC-NCM: avoid overflow in sanity checking\") fixed\na related class of issues on the host side of NCM.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31617",
"url": "https://www.suse.com/security/cve/CVE-2026-31617"
},
{
"category": "external",
"summary": "SUSE Bug 1263780 for CVE-2026-31617",
"url": "https://bugzilla.suse.com/1263780"
},
{
"category": "external",
"summary": "SUSE Bug 1263781 for CVE-2026-31617",
"url": "https://bugzilla.suse.com/1263781"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31617"
},
{
"cve": "CVE-2026-31618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31618"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO\n\nMuch like commit 19f953e74356 (\"fbdev: fb_pm2fb: Avoid potential divide\nby zero error\"), we also need to prevent that same crash from happening\nin the udlfb driver as it uses pixclock directly when dividing, which\nwill crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31618",
"url": "https://www.suse.com/security/cve/CVE-2026-31618"
},
{
"category": "external",
"summary": "SUSE Bug 1263785 for CVE-2026-31618",
"url": "https://bugzilla.suse.com/1263785"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31618"
},
{
"cve": "CVE-2026-31619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31619"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: fireworks: bound device-supplied status before string array lookup\n\nThe status field in an EFW response is a 32-bit value supplied by the\nfirewire device. efr_status_names[] has 17 entries so a status value\noutside that range goes off into the weeds when looking at the %s value.\n\nEven worse, the status could return EFR_STATUS_INCOMPLETE which is\n0x80000000, and is obviously not in that array of potential strings.\n\nFix this up by properly bounding the index against the array size and\nprinting \"unknown\" if it\u0027s not recognized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31619",
"url": "https://www.suse.com/security/cve/CVE-2026-31619"
},
{
"category": "external",
"summary": "SUSE Bug 1263806 for CVE-2026-31619",
"url": "https://bugzilla.suse.com/1263806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31619"
},
{
"cve": "CVE-2026-31623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31623"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()\n\nA malicious USB device claiming to be a CDC Phonet modem can overflow\nthe skb_shared_info-\u003efrags[] array by sending an unbounded sequence of\nfull-page bulk transfers.\n\nDrop the skb and increment the length error when the frag limit is\nreached. This matches the same fix that commit f0813bcd2d9d (\"net:\nwwan: t7xx: fix potential skb-\u003efrags overflow in RX path\") did for the\nt7xx driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31623",
"url": "https://www.suse.com/security/cve/CVE-2026-31623"
},
{
"category": "external",
"summary": "SUSE Bug 1263778 for CVE-2026-31623",
"url": "https://bugzilla.suse.com/1263778"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31623"
},
{
"cve": "CVE-2026-31624",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31624"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: clamp report_size in s32ton() to avoid undefined shift\n\ns32ton() shifts by n-1 where n is the field\u0027s report_size, a value that\ncomes directly from a HID device. The HID parser bounds report_size\nonly to \u003c= 256, so a broken HID device can supply a report descriptor\nwith a wide field that triggers shift exponents up to 256 on a 32-bit\ntype when an output report is built via hid_output_field() or\nhid_set_field().\n\nCommit ec61b41918587 (\"HID: core: fix shift-out-of-bounds in\nhid_report_raw_event\") added the same n \u003e 32 clamp to the function\nsnto32(), but s32ton() was never given the same fix as I guess syzbot\nhadn\u0027t figured out how to fuzz a device the same way.\n\nFix this up by just clamping the max value of n, just like snto32()\ndoes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31624",
"url": "https://www.suse.com/security/cve/CVE-2026-31624"
},
{
"category": "external",
"summary": "SUSE Bug 1263657 for CVE-2026-31624",
"url": "https://bugzilla.suse.com/1263657"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31624"
},
{
"cve": "CVE-2026-31625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31625"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: alps: fix NULL pointer dereference in alps_raw_event()\n\nCommit ecfa6f34492c (\"HID: Add HID_CLAIMED_INPUT guards in raw_event\ncallbacks missing them\") attempted to fix up the HID drivers that had\nmissed the previous fix that was done in 2ff5baa9b527 (\"HID: appleir:\nFix potential NULL dereference at raw event handle\"), but the alps\ndriver was missed.\n\nFix this up by properly checking in the hid-alps driver that it had been\nclaimed correctly before attempting to process the raw event.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31625",
"url": "https://www.suse.com/security/cve/CVE-2026-31625"
},
{
"category": "external",
"summary": "SUSE Bug 1263030 for CVE-2026-31625",
"url": "https://bugzilla.suse.com/1263030"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31625"
},
{
"cve": "CVE-2026-31626",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31626"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()\n\nInitialize le_tmp64 to zero in rtw_BIP_verify() to prevent using\nuninitialized data.\n\nSmatch warns that only 6 bytes are copied to this 8-byte (u64)\nvariable, leaving the last two bytes uninitialized:\n\ndrivers/staging/rtl8723bs/core/rtw_security.c:1308 rtw_BIP_verify()\nwarn: not copying enough bytes for \u0027\u0026le_tmp64\u0027 (8 vs 6 bytes)\n\nInitializing the variable at the start of the function fixes this\nwarning and ensures predictable behavior.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31626",
"url": "https://www.suse.com/security/cve/CVE-2026-31626"
},
{
"category": "external",
"summary": "SUSE Bug 1263782 for CVE-2026-31626",
"url": "https://bugzilla.suse.com/1263782"
},
{
"category": "external",
"summary": "SUSE Bug 1263784 for CVE-2026-31626",
"url": "https://bugzilla.suse.com/1263784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31626"
},
{
"cve": "CVE-2026-31627",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31627"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: s3c24xx: check the size of the SMBUS message before using it\n\nThe first byte of an i2c SMBUS message is the size, and it should be\nverified to ensure that it is in the range of 0..I2C_SMBUS_BLOCK_MAX\nbefore processing it.\n\nThis is the same logic that was added in commit a6e04f05ce0b (\"i2c:\ntegra: check msg length in SMBUS block read\") to the i2c tegra driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31627",
"url": "https://www.suse.com/security/cve/CVE-2026-31627"
},
{
"category": "external",
"summary": "SUSE Bug 1263786 for CVE-2026-31627",
"url": "https://bugzilla.suse.com/1263786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31627"
},
{
"cve": "CVE-2026-31628",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31628"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/CPU: Fix FPDSS on Zen1\n\nZen1\u0027s hardware divider can leave, under certain circumstances, partial\nresults from previous operations. Those results can be leaked by\nanother, attacker thread.\n\nFix that with a chicken bit.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31628",
"url": "https://www.suse.com/security/cve/CVE-2026-31628"
},
{
"category": "external",
"summary": "SUSE Bug 1263788 for CVE-2026-31628",
"url": "https://bugzilla.suse.com/1263788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31628"
},
{
"cve": "CVE-2026-31651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: vub300: fix NULL-deref on disconnect\n\nMake sure to deregister the controller before dropping the reference to\nthe driver data on disconnect to avoid NULL-pointer dereferences or\nuse-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31651",
"url": "https://www.suse.com/security/cve/CVE-2026-31651"
},
{
"category": "external",
"summary": "SUSE Bug 1263111 for CVE-2026-31651",
"url": "https://bugzilla.suse.com/1263111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31651"
},
{
"cve": "CVE-2026-31657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31657"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: hold claim backbone gateways by reference\n\nbatadv_bla_add_claim() can replace claim-\u003ebackbone_gw and drop the old\ngateway\u0027s last reference while readers still follow the pointer.\n\nThe netlink claim dump path dereferences claim-\u003ebackbone_gw-\u003eorig and\ntakes claim-\u003ebackbone_gw-\u003ecrc_lock without pinning the underlying\nbackbone gateway. batadv_bla_check_claim() still has the same naked\npointer access pattern.\n\nReuse batadv_bla_claim_get_backbone_gw() in both readers so they operate\non a stable gateway reference until the read-side work is complete.\nThis keeps the dump and claim-check paths aligned with the lifetime\nrules introduced for the other BLA claim readers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31657",
"url": "https://www.suse.com/security/cve/CVE-2026-31657"
},
{
"category": "external",
"summary": "SUSE Bug 1263175 for CVE-2026-31657",
"url": "https://bugzilla.suse.com/1263175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31657"
},
{
"cve": "CVE-2026-31659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31659"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: reject oversized global TT response buffers\n\nbatadv_tt_prepare_tvlv_global_data() builds the allocation length for a\nglobal TT response in 16-bit temporaries. When a remote originator\nadvertises a large enough global TT, the TT payload length plus the VLAN\nheader offset can exceed 65535 and wrap before kmalloc().\n\nThe full-table response path still uses the original TT payload length when\nit fills tt_change, so the wrapped allocation is too small and\nbatadv_tt_prepare_tvlv_global_data() writes past the end of the heap object\nbefore the later packet-size check runs.\n\nFix this by rejecting TT responses whose TVLV value length cannot fit in\nthe 16-bit TVLV payload length field.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31659",
"url": "https://www.suse.com/security/cve/CVE-2026-31659"
},
{
"category": "external",
"summary": "SUSE Bug 1263495 for CVE-2026-31659",
"url": "https://bugzilla.suse.com/1263495"
},
{
"category": "external",
"summary": "SUSE Bug 1279873 for CVE-2026-31659",
"url": "https://bugzilla.suse.com/1279873"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "critical"
}
],
"title": "CVE-2026-31659"
},
{
"cve": "CVE-2026-31660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31660"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: pn533: allocate rx skb before consuming bytes\n\npn532_receive_buf() reports the number of accepted bytes to the serdev\ncore. The current code consumes bytes into recv_skb and may already hand\na complete frame to pn533_recv_frame() before allocating a fresh receive\nbuffer.\n\nIf that alloc_skb() fails, the callback returns 0 even though it has\nalready consumed bytes, and it leaves recv_skb as NULL for the next\nreceive callback. That breaks the receive_buf() accounting contract and\ncan also lead to a NULL dereference on the next skb_put_u8().\n\nAllocate the receive skb lazily before consuming the next byte instead.\nIf allocation fails, return the number of bytes already accepted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31660",
"url": "https://www.suse.com/security/cve/CVE-2026-31660"
},
{
"category": "external",
"summary": "SUSE Bug 1263539 for CVE-2026-31660",
"url": "https://bugzilla.suse.com/1263539"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31660"
},
{
"cve": "CVE-2026-31661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31661"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmsmac: Fix dma_free_coherent() size\n\ndma_alloc_consistent() may change the size to align it. The new size is\nsaved in alloced.\n\nChange the free size to match the allocation size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31661",
"url": "https://www.suse.com/security/cve/CVE-2026-31661"
},
{
"category": "external",
"summary": "SUSE Bug 1263128 for CVE-2026-31661",
"url": "https://bugzilla.suse.com/1263128"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31661"
},
{
"cve": "CVE-2026-31667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31667"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: uinput - fix circular locking dependency with ff-core\n\nA lockdep circular locking dependency warning can be triggered\nreproducibly when using a force-feedback gamepad with uinput (for\nexample, playing ELDEN RING under Wine with a Flydigi Vader 5\ncontroller):\n\n ff-\u003emutex -\u003e udev-\u003emutex -\u003e input_mutex -\u003e dev-\u003emutex -\u003e ff-\u003emutex\n\nThe cycle is caused by four lock acquisition paths:\n\n1. ff upload: input_ff_upload() holds ff-\u003emutex and calls\n uinput_dev_upload_effect() -\u003e uinput_request_submit() -\u003e\n uinput_request_send(), which acquires udev-\u003emutex.\n\n2. device create: uinput_ioctl_handler() holds udev-\u003emutex and calls\n uinput_create_device() -\u003e input_register_device(), which acquires\n input_mutex.\n\n3. device register: input_register_device() holds input_mutex and\n calls kbd_connect() -\u003e input_register_handle(), which acquires\n dev-\u003emutex.\n\n4. evdev release: evdev_release() calls input_flush_device() under\n dev-\u003emutex, which calls input_ff_flush() acquiring ff-\u003emutex.\n\nFix this by introducing a new state_lock spinlock to protect\nudev-\u003estate and udev-\u003edev access in uinput_request_send() instead of\nacquiring udev-\u003emutex. The function only needs to atomically check\ndevice state and queue an input event into the ring buffer via\nuinput_dev_event() -- both operations are safe under a spinlock\n(ktime_get_ts64() and wake_up_interruptible() do not sleep). This\nbreaks the ff-\u003emutex -\u003e udev-\u003emutex link since a spinlock is a leaf in\nthe lock ordering and cannot form cycles with mutexes.\n\nTo keep state transitions visible to uinput_request_send(), protect\nwrites to udev-\u003estate in uinput_create_device() and\nuinput_destroy_device() with the same state_lock spinlock.\n\nAdditionally, move init_completion(\u0026request-\u003edone) from\nuinput_request_send() to uinput_request_submit() before\nuinput_request_reserve_slot(). Once the slot is allocated,\nuinput_flush_requests() may call complete() on it at any time from\nthe destroy path, so the completion must be initialised before the\nrequest becomes visible.\n\nLock ordering after the fix:\n\n ff-\u003emutex -\u003e state_lock (spinlock, leaf)\n udev-\u003emutex -\u003e state_lock (spinlock, leaf)\n udev-\u003emutex -\u003e input_mutex -\u003e dev-\u003emutex -\u003e ff-\u003emutex (no back-edge)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31667",
"url": "https://www.suse.com/security/cve/CVE-2026-31667"
},
{
"category": "external",
"summary": "SUSE Bug 1263139 for CVE-2026-31667",
"url": "https://bugzilla.suse.com/1263139"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31667"
},
{
"cve": "CVE-2026-31672",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31672"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rt2x00usb: fix devres lifetime\n\nUSB drivers bind to USB interfaces and any device managed resources\nshould have their lifetime tied to the interface rather than parent USB\ndevice. This avoids issues like memory leaks when drivers are unbound\nwithout their devices being physically disconnected (e.g. on probe\ndeferral or configuration changes).\n\nFix the USB anchor lifetime so that it is released on driver unbind.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31672",
"url": "https://www.suse.com/security/cve/CVE-2026-31672"
},
{
"category": "external",
"summary": "SUSE Bug 1263142 for CVE-2026-31672",
"url": "https://bugzilla.suse.com/1263142"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-31672"
},
{
"cve": "CVE-2026-31678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: defer tunnel netdev_put to RCU release\n\novs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already\ndetached the device. Dropping the netdev reference in destroy can race\nwith concurrent readers that still observe vport-\u003edev.\n\nDo not release vport-\u003edev in ovs_netdev_tunnel_destroy(). Instead, let\nvport_netdev_free() drop the reference from the RCU callback, matching\nthe non-tunnel destroy path and avoiding additional synchronization\nunder RTNL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31678",
"url": "https://www.suse.com/security/cve/CVE-2026-31678"
},
{
"category": "external",
"summary": "SUSE Bug 1263562 for CVE-2026-31678",
"url": "https://bugzilla.suse.com/1263562"
},
{
"category": "external",
"summary": "SUSE Bug 1279872 for CVE-2026-31678",
"url": "https://bugzilla.suse.com/1279872"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-31678"
},
{
"cve": "CVE-2026-31687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31687"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: omap: do not register driver in probe()\n\nCommit 11a78b794496 (\"ARM: OMAP: MPUIO wake updates\") registers the\nomap_mpuio_driver from omap_mpuio_init(), which is called from\nomap_gpio_probe().\n\nHowever, it neither makes sense to register drivers from probe()\ncallbacks of other drivers, nor does the driver core allow registering\ndrivers with a device lock already being held.\n\nThe latter was revealed by commit dc23806a7c47 (\"driver core: enforce\ndevice_lock for driver_match_device()\") leading to a potential deadlock\ncondition described in [1].\n\nAdditionally, the omap_mpuio_driver is never unregistered from the\ndriver core, even if the module is unloaded.\n\nHence, register the omap_mpuio_driver from the module initcall and\nunregister it in module_exit().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31687",
"url": "https://www.suse.com/security/cve/CVE-2026-31687"
},
{
"category": "external",
"summary": "SUSE Bug 1263598 for CVE-2026-31687",
"url": "https://bugzilla.suse.com/1263598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31687"
},
{
"cve": "CVE-2026-31701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31701"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: take a reference on the USB device in create_card()\n\nThe caiaq driver stores a pointer to the parent USB device in\ncdev-\u003echip.dev but never takes a reference on it. The card\u0027s\nprivate_free callback, snd_usb_caiaq_card_free(), can run\nasynchronously via snd_card_free_when_closed() after the USB\ndevice has already been disconnected and freed, so any access to\ncdev-\u003echip.dev in that path dereferences a freed usb_device.\n\nOn top of the refcounting issue, the current card_free implementation\ncalls usb_reset_device(cdev-\u003echip.dev). A reset in a free callback\nis inappropriate: the device is going away, the call takes the\ndevice lock in a teardown context, and the reset races with the\ndisconnect path that the callback is already cleaning up after.\n\nTake a reference on the USB device in create_card() with\nusb_get_dev(), drop it with usb_put_dev() in the free callback,\nand remove the usb_reset_device() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31701",
"url": "https://www.suse.com/security/cve/CVE-2026-31701"
},
{
"category": "external",
"summary": "SUSE Bug 1263876 for CVE-2026-31701",
"url": "https://bugzilla.suse.com/1263876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31701"
},
{
"cve": "CVE-2026-31720",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31720"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_uac1_legacy: validate control request size\n\nf_audio_complete() copies req-\u003elength bytes into a 4-byte stack\nvariable:\n\n u32 data = 0;\n memcpy(\u0026data, req-\u003ebuf, req-\u003elength);\n\nreq-\u003elength is derived from the host-controlled USB request path,\nwhich can lead to a stack out-of-bounds write.\n\nValidate req-\u003eactual against the expected payload size for the\nsupported control selectors and decode only the expected amount\nof data.\n\nThis avoids copying a host-influenced length into a fixed-size\nstack object.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31720",
"url": "https://www.suse.com/security/cve/CVE-2026-31720"
},
{
"category": "external",
"summary": "SUSE Bug 1264110 for CVE-2026-31720",
"url": "https://bugzilla.suse.com/1264110"
},
{
"category": "external",
"summary": "SUSE Bug 1264130 for CVE-2026-31720",
"url": "https://bugzilla.suse.com/1264130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-31720"
},
{
"cve": "CVE-2026-31726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31726"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: uvc: fix NULL pointer dereference during unbind race\n\nCommit b81ac4395bbe (\"usb: gadget: uvc: allow for application to cleanly\nshutdown\") introduced two stages of synchronization waits totaling 1500ms\nin uvc_function_unbind() to prevent several types of kernel panics.\nHowever, this timing-based approach is insufficient during power\nmanagement (PM) transitions.\n\nWhen the PM subsystem starts freezing user space processes, the\nwait_event_interruptible_timeout() is aborted early, which allows the\nunbind thread to proceed and nullify the gadget pointer\n(cdev-\u003egadget = NULL):\n\n[ 814.123447][ T947] configfs-gadget.g1 gadget.0: uvc: uvc_function_unbind()\n[ 814.178583][ T3173] PM: suspend entry (deep)\n[ 814.192487][ T3173] Freezing user space processes\n[ 814.197668][ T947] configfs-gadget.g1 gadget.0: uvc: uvc_function_unbind no clean disconnect, wait for release\n\nWhen the PM subsystem resumes or aborts the suspend and tasks are\nrestarted, the V4L2 release path is executed and attempts to access the\nalready nullified gadget pointer, triggering a kernel panic:\n\n[ 814.292597][ C0] PM: pm_system_irq_wakeup: 479 triggered dhdpcie_host_wake\n[ 814.386727][ T3173] Restarting tasks ...\n[ 814.403522][ T4558] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000030\n[ 814.404021][ T4558] pc : usb_gadget_deactivate+0x14/0xf4\n[ 814.404031][ T4558] lr : usb_function_deactivate+0x54/0x94\n[ 814.404078][ T4558] Call trace:\n[ 814.404080][ T4558] usb_gadget_deactivate+0x14/0xf4\n[ 814.404083][ T4558] usb_function_deactivate+0x54/0x94\n[ 814.404087][ T4558] uvc_function_disconnect+0x1c/0x5c\n[ 814.404092][ T4558] uvc_v4l2_release+0x44/0xac\n[ 814.404095][ T4558] v4l2_release+0xcc/0x130\n\nAddress the race condition and NULL pointer dereference by:\n\n1. State Synchronization (flag + mutex)\nIntroduce a \u0027func_unbound\u0027 flag in struct uvc_device. This allows\nuvc_function_disconnect() to safely skip accessing the nullified\ncdev-\u003egadget pointer. As suggested by Alan Stern, this flag is protected\nby a new mutex (uvc-\u003elock) to ensure proper memory ordering and prevent\ninstruction reordering or speculative loads. This mutex is also used to\nprotect \u0027func_connected\u0027 for consistent state management.\n\n2. Explicit Synchronization (completion)\nUse a completion to synchronize uvc_function_unbind() with the\nuvc_vdev_release() callback. This prevents Use-After-Free (UAF) by\nensuring struct uvc_device is freed after all video device resources\nare released.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31726",
"url": "https://www.suse.com/security/cve/CVE-2026-31726"
},
{
"category": "external",
"summary": "SUSE Bug 1263905 for CVE-2026-31726",
"url": "https://bugzilla.suse.com/1263905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31726"
},
{
"cve": "CVE-2026-31727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31727"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo\n\nCommit ec35c1969650 (\"usb: gadget: f_ncm: Fix net_device lifecycle with\ndevice_move\") reparents the gadget device to /sys/devices/virtual during\nunbind, clearing the gadget pointer. If the userspace tool queries on\nthe surviving interface during this detached window, this leads to a\nNULL pointer dereference.\n\nUnable to handle kernel NULL pointer dereference\nCall trace:\n eth_get_drvinfo+0x50/0x90\n ethtool_get_drvinfo+0x5c/0x1f0\n __dev_ethtool+0xaec/0x1fe0\n dev_ethtool+0x134/0x2e0\n dev_ioctl+0x338/0x560\n\nAdd a NULL check for dev-\u003egadget in eth_get_drvinfo(). When detached,\nskip copying the fw_version and bus_info strings, which is natively\nhandled by ethtool_get_drvinfo for empty strings.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31727",
"url": "https://www.suse.com/security/cve/CVE-2026-31727"
},
{
"category": "external",
"summary": "SUSE Bug 1263904 for CVE-2026-31727",
"url": "https://bugzilla.suse.com/1263904"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31727"
},
{
"cve": "CVE-2026-31728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31728"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: u_ether: Fix race between gether_disconnect and eth_stop\n\nA race condition between gether_disconnect() and eth_stop() leads to a\nNULL pointer dereference. Specifically, if eth_stop() is triggered\nconcurrently while gether_disconnect() is tearing down the endpoints,\neth_stop() attempts to access the cleared endpoint descriptor, causing\nthe following NPE:\n\n Unable to handle kernel NULL pointer dereference\n Call trace:\n __dwc3_gadget_ep_enable+0x60/0x788\n dwc3_gadget_ep_enable+0x70/0xe4\n usb_ep_enable+0x60/0x15c\n eth_stop+0xb8/0x108\n\nBecause eth_stop() crashes while holding the dev-\u003elock, the thread\nrunning gether_disconnect() fails to acquire the same lock and spins\nforever, resulting in a hardlockup:\n\n Core - Debugging Information for Hardlockup core(7)\n Call trace:\n queued_spin_lock_slowpath+0x94/0x488\n _raw_spin_lock+0x64/0x6c\n gether_disconnect+0x19c/0x1e8\n ncm_set_alt+0x68/0x1a0\n composite_setup+0x6a0/0xc50\n\nThe root cause is that the clearing of dev-\u003eport_usb in\ngether_disconnect() is delayed until the end of the function.\n\nMove the clearing of dev-\u003eport_usb to the very beginning of\ngether_disconnect() while holding dev-\u003elock. This cuts off the link\nimmediately, ensuring eth_stop() will see dev-\u003eport_usb as NULL and\nsafely bail out.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31728",
"url": "https://www.suse.com/security/cve/CVE-2026-31728"
},
{
"category": "external",
"summary": "SUSE Bug 1263911 for CVE-2026-31728",
"url": "https://bugzilla.suse.com/1263911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31728"
},
{
"cve": "CVE-2026-31730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31730"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: possible double-free of cctx-\u003eremote_heap\n\nfastrpc_init_create_static_process() may free cctx-\u003eremote_heap on the\nerr_map path but does not clear the pointer. Later, fastrpc_rpmsg_remove()\nfrees cctx-\u003eremote_heap again if it is non-NULL, which can lead to a\ndouble-free if the INIT_CREATE_STATIC ioctl hits the error path and the rpmsg\ndevice is subsequently removed/unbound.\nClear cctx-\u003eremote_heap after freeing it in the error path to prevent the\nlater cleanup from freeing it again.\n\nThis issue was found by an in-house analysis workflow that extracts AST-based\ninformation and runs static checks, with LLM assistance for triage, and was\nconfirmed by manual code review.\nNo hardware testing was performed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31730",
"url": "https://www.suse.com/security/cve/CVE-2026-31730"
},
{
"category": "external",
"summary": "SUSE Bug 1264041 for CVE-2026-31730",
"url": "https://bugzilla.suse.com/1264041"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31730"
},
{
"cve": "CVE-2026-31747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31747"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: me4000: Fix potential overrun of firmware buffer\n\n`me4000_xilinx_download()` loads the firmware that was requested by\n`request_firmware()`. It is possible for it to overrun the source\nbuffer because it blindly trusts the file format. It reads a data\nstream length from the first 4 bytes into variable `file_length` and\nreads the data stream contents of length `file_length` from offset 16\nonwards.\n\nAdd a test to ensure that the supplied firmware is long enough to\ncontain the header and the data stream. On failure, log an error and\nreturn `-EINVAL`.\n\nNote: The firmware loading was totally broken before commit ac584af59945\n(\"staging: comedi: me4000: fix firmware downloading\"), but that is the\nmost sensible target for this fix.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31747",
"url": "https://www.suse.com/security/cve/CVE-2026-31747"
},
{
"category": "external",
"summary": "SUSE Bug 1264101 for CVE-2026-31747",
"url": "https://bugzilla.suse.com/1264101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31747"
},
{
"cve": "CVE-2026-31748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31748"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: me_daq: Fix potential overrun of firmware buffer\n\n`me2600_xilinx_download()` loads the firmware that was requested by\n`request_firmware()`. It is possible for it to overrun the source\nbuffer because it blindly trusts the file format. It reads a data\nstream length from the first 4 bytes into variable `file_length` and\nreads the data stream contents of length `file_length` from offset 16\nonwards. Although it checks that the supplied firmware is at least 16\nbytes long, it does not check that it is long enough to contain the data\nstream.\n\nAdd a test to ensure that the supplied firmware is long enough to\ncontain the header and the data stream. On failure, log an error and\nreturn `-EINVAL`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31748",
"url": "https://www.suse.com/security/cve/CVE-2026-31748"
},
{
"category": "external",
"summary": "SUSE Bug 1264100 for CVE-2026-31748",
"url": "https://bugzilla.suse.com/1264100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31748"
},
{
"cve": "CVE-2026-31749",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31749"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: ni_atmio16d: Fix invalid clean-up after failed attach\n\nIf the driver\u0027s COMEDI \"attach\" handler function (`atmio16d_attach()`)\nreturns an error, the COMEDI core will call the driver\u0027s \"detach\"\nhandler function (`atmio16d_detach()`) to clean up. This calls\n`reset_atmio16d()` unconditionally, but depending on where the error\noccurred in the attach handler, the device may not have been\nsufficiently initialized to call `reset_atmio16d()`. It uses\n`dev-\u003eiobase` as the I/O port base address and `dev-\u003eprivate` as the\npointer to the COMEDI device\u0027s private data structure. `dev-\u003eiobase`\nmay still be set to its initial value of 0, which would result in\nundesired writes to low I/O port addresses. `dev-\u003eprivate` may still be\n`NULL`, which would result in null pointer dereferences.\n\nFix `atmio16d_detach()` by checking that `dev-\u003eprivate` is valid\n(non-null) before calling `reset_atmio16d()`. This implies that\n`dev-\u003eiobase` was set correctly since that is set up before\n`dev-\u003eprivate`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31749",
"url": "https://www.suse.com/security/cve/CVE-2026-31749"
},
{
"category": "external",
"summary": "SUSE Bug 1264075 for CVE-2026-31749",
"url": "https://bugzilla.suse.com/1264075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31749"
},
{
"cve": "CVE-2026-31751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31751"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: dt2815: add hardware detection to prevent crash\n\nThe dt2815 driver crashes when attached to I/O ports without actual\nhardware present. This occurs because syzkaller or users can attach\nthe driver to arbitrary I/O addresses via COMEDI_DEVCONFIG ioctl.\n\nWhen no hardware exists at the specified port, inb() operations return\n0xff (floating bus), but outb() operations can trigger page faults due\nto undefined behavior, especially under race conditions:\n\n BUG: unable to handle page fault for address: 000000007fffff90\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x0002) - not-present page\n RIP: 0010:dt2815_attach+0x6e0/0x1110\n\nAdd hardware detection by reading the status register before attempting\nany write operations. If the read returns 0xff, assume no hardware is\npresent and fail the attach with -ENODEV. This prevents crashes from\noutb() operations on non-existent hardware.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31751",
"url": "https://www.suse.com/security/cve/CVE-2026-31751"
},
{
"category": "external",
"summary": "SUSE Bug 1264044 for CVE-2026-31751",
"url": "https://bugzilla.suse.com/1264044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31751"
},
{
"cve": "CVE-2026-31754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31754"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: cdns3: gadget: fix state inconsistency on gadget init failure\n\nWhen cdns3_gadget_start() fails, the DRD hardware is left in gadget mode\nwhile software state remains INACTIVE, creating hardware/software state\ninconsistency.\n\nWhen switching to host mode via sysfs:\n echo host \u003e /sys/class/usb_role/13180000.usb-role-switch/role\n\nThe role state is not set to CDNS_ROLE_STATE_ACTIVE due to the error,\nso cdns_role_stop() skips cleanup because state is still INACTIVE.\nThis violates the DRD controller design specification (Figure22),\nwhich requires returning to idle state before switching roles.\n\nThis leads to a synchronous external abort in xhci_gen_setup() when\nsetting up the host controller:\n\n[ 516.440698] configfs-gadget 13180000.usb: failed to start g1: -19\n[ 516.442035] cdns-usb3 13180000.usb: Failed to add gadget\n[ 516.443278] cdns-usb3 13180000.usb: set role 2 has failed\n...\n[ 1301.375722] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller\n[ 1301.377716] Internal error: synchronous external abort: 96000010 [#1] PREEMPT SMP\n[ 1301.382485] pc : xhci_gen_setup+0xa4/0x408\n[ 1301.393391] backtrace:\n ...\n xhci_gen_setup+0xa4/0x408 \u003c-- CRASH\n xhci_plat_setup+0x44/0x58\n usb_add_hcd+0x284/0x678\n ...\n cdns_role_set+0x9c/0xbc \u003c-- Role switch\n\nFix by calling cdns_drd_gadget_off() in the error path to properly\nclean up the DRD gadget state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31754",
"url": "https://www.suse.com/security/cve/CVE-2026-31754"
},
{
"category": "external",
"summary": "SUSE Bug 1264074 for CVE-2026-31754",
"url": "https://bugzilla.suse.com/1264074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31754"
},
{
"cve": "CVE-2026-31755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31755"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: cdns3: gadget: fix NULL pointer dereference in ep_queue\n\nWhen the gadget endpoint is disabled or not yet configured, the ep-\u003edesc\npointer can be NULL. This leads to a NULL pointer dereference when\n__cdns3_gadget_ep_queue() is called, causing a kernel crash.\n\nAdd a check to return -ESHUTDOWN if ep-\u003edesc is NULL, which is the\nstandard return code for unconfigured endpoints.\n\nThis prevents potential crashes when ep_queue is called on endpoints\nthat are not ready.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31755",
"url": "https://www.suse.com/security/cve/CVE-2026-31755"
},
{
"category": "external",
"summary": "SUSE Bug 1264071 for CVE-2026-31755",
"url": "https://bugzilla.suse.com/1264071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31755"
},
{
"cve": "CVE-2026-31756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31756"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()\n\ndwc2_gadget_exit_clock_gating() internally calls call_gadget() macro,\nwhich expects hsotg-\u003elock to be held since it does spin_unlock/spin_lock\naround the gadget driver callback invocation.\n\nHowever, dwc2_hsotg_udc_stop() calls dwc2_gadget_exit_clock_gating()\nwithout holding the lock. This leads to:\n - spin_unlock on a lock that is not held (undefined behavior)\n - The lock remaining held after dwc2_gadget_exit_clock_gating() returns,\n causing a deadlock when spin_lock_irqsave() is called later in the\n same function.\n\nFix this by acquiring hsotg-\u003elock before calling\ndwc2_gadget_exit_clock_gating() and releasing it afterwards, which\nsatisfies the locking requirement of the call_gadget() macro.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31756",
"url": "https://www.suse.com/security/cve/CVE-2026-31756"
},
{
"category": "external",
"summary": "SUSE Bug 1264070 for CVE-2026-31756",
"url": "https://bugzilla.suse.com/1264070"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31756"
},
{
"cve": "CVE-2026-31759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31759"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: ulpi: fix double free in ulpi_register_interface() error path\n\nWhen device_register() fails, ulpi_register() calls put_device() on\nulpi-\u003edev.\n\nThe device release callback ulpi_dev_release() drops the OF node\nreference and frees ulpi, but the current error path in\nulpi_register_interface() then calls kfree(ulpi) again, causing a\ndouble free.\n\nLet put_device() handle the cleanup through ulpi_dev_release() and\navoid freeing ulpi again in ulpi_register_interface().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31759",
"url": "https://www.suse.com/security/cve/CVE-2026-31759"
},
{
"category": "external",
"summary": "SUSE Bug 1264076 for CVE-2026-31759",
"url": "https://bugzilla.suse.com/1264076"
},
{
"category": "external",
"summary": "SUSE Bug 1264078 for CVE-2026-31759",
"url": "https://bugzilla.suse.com/1264078"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-31759"
},
{
"cve": "CVE-2026-31761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31761"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: gyro: mpu3050: Move iio_device_register() to correct location\n\niio_device_register() should be at the end of the probe function to\nprevent race conditions.\n\nPlace iio_device_register() at the end of the probe function and place\niio_device_unregister() accordingly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31761",
"url": "https://www.suse.com/security/cve/CVE-2026-31761"
},
{
"category": "external",
"summary": "SUSE Bug 1264122 for CVE-2026-31761",
"url": "https://bugzilla.suse.com/1264122"
},
{
"category": "external",
"summary": "SUSE Bug 1264123 for CVE-2026-31761",
"url": "https://bugzilla.suse.com/1264123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31761"
},
{
"cve": "CVE-2026-31762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31762"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: gyro: mpu3050: Fix irq resource leak\n\nThe interrupt handler is setup but only a few lines down if\niio_trigger_register() fails the function returns without properly\nreleasing the handler.\n\nAdd cleanup goto to resolve resource leak.\n\nDetected by Smatch:\ndrivers/iio/gyro/mpu3050-core.c:1128 mpu3050_trigger_probe() warn:\n\u0027irq\u0027 from request_threaded_irq() not released on lines: 1124.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31762",
"url": "https://www.suse.com/security/cve/CVE-2026-31762"
},
{
"category": "external",
"summary": "SUSE Bug 1264048 for CVE-2026-31762",
"url": "https://bugzilla.suse.com/1264048"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31762"
},
{
"cve": "CVE-2026-31763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31763"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: gyro: mpu3050: Fix incorrect free_irq() variable\n\nThe handler for the IRQ part of this driver is mpu3050-\u003etrig but,\nin the teardown free_irq() is called with handler mpu3050.\n\nUse correct IRQ handler when calling free_irq().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31763",
"url": "https://www.suse.com/security/cve/CVE-2026-31763"
},
{
"category": "external",
"summary": "SUSE Bug 1263975 for CVE-2026-31763",
"url": "https://bugzilla.suse.com/1263975"
},
{
"category": "external",
"summary": "SUSE Bug 1263976 for CVE-2026-31763",
"url": "https://bugzilla.suse.com/1263976"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31763"
},
{
"cve": "CVE-2026-31768",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31768"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-adc161s626: use DMA-safe memory for spi_read()\n\nAdd a DMA-safe buffer and use it for spi_read() instead of a stack\nmemory. All SPI buffers must be DMA-safe.\n\nSince we only need up to 3 bytes, we just use a u8[] instead of __be16\nand __be32 and change the conversion functions appropriately.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31768",
"url": "https://www.suse.com/security/cve/CVE-2026-31768"
},
{
"category": "external",
"summary": "SUSE Bug 1264125 for CVE-2026-31768",
"url": "https://bugzilla.suse.com/1264125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31768"
},
{
"cve": "CVE-2026-31770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31770"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (occ) Fix division by zero in occ_show_power_1()\n\nIn occ_show_power_1() case 1, the accumulator is divided by\nupdate_tag without checking for zero. If no samples have been\ncollected yet (e.g. during early boot when the sensor block is\nincluded but hasn\u0027t been updated), update_tag is zero, causing\na kernel divide-by-zero crash.\n\nThe 2019 fix in commit 211186cae14d (\"hwmon: (occ) Fix division by\nzero issue\") only addressed occ_get_powr_avg() used by\nocc_show_power_2() and occ_show_power_a0(). This separate code\npath in occ_show_power_1() was missed.\n\nFix this by reusing the existing occ_get_powr_avg() helper, which\nalready handles the zero-sample case and uses mul_u64_u32_div()\nto multiply before dividing for better precision. Move the helper\nabove occ_show_power_1() so it is visible at the call site.\n\n[groeck: Fix alignment problems reported by checkpatch]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31770",
"url": "https://www.suse.com/security/cve/CVE-2026-31770"
},
{
"category": "external",
"summary": "SUSE Bug 1264142 for CVE-2026-31770",
"url": "https://bugzilla.suse.com/1264142"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31770"
},
{
"cve": "CVE-2026-31773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31773"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: SMP: derive legacy responder STK authentication from MITM state\n\nThe legacy responder path in smp_random() currently labels the stored\nSTK as authenticated whenever pending_sec_level is BT_SECURITY_HIGH.\nThat reflects what the local service requested, not what the pairing\nflow actually achieved.\n\nFor Just Works/Confirm legacy pairing, SMP_FLAG_MITM_AUTH stays clear\nand the resulting STK should remain unauthenticated even if the local\nside requested HIGH security. Use the established MITM state when\nstoring the responder STK so the key metadata matches the pairing result.\n\nThis also keeps the legacy path aligned with the Secure Connections code,\nwhich already treats JUST_WORKS/JUST_CFM as unauthenticated.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31773",
"url": "https://www.suse.com/security/cve/CVE-2026-31773"
},
{
"category": "external",
"summary": "SUSE Bug 1264039 for CVE-2026-31773",
"url": "https://bugzilla.suse.com/1264039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31773"
},
{
"cve": "CVE-2026-31776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31776"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ctxfi: Fix missing SPDIFI1 index handling\n\nSPDIF1 DAIO type isn\u0027t properly handled in daio_device_index() for\nhw20k2, and it returned -EINVAL, which ended up with the out-of-bounds\narray access. Follow the hw20k1 pattern and return the proper index\nfor this type, too.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31776",
"url": "https://www.suse.com/security/cve/CVE-2026-31776"
},
{
"category": "external",
"summary": "SUSE Bug 1264035 for CVE-2026-31776",
"url": "https://bugzilla.suse.com/1264035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31776"
},
{
"cve": "CVE-2026-31778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31778"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: fix stack out-of-bounds read in init_card\n\nThe loop creates a whitespace-stripped copy of the card shortname\nwhere `len \u003c sizeof(card-\u003eid)` is used for the bounds check. Since\nsizeof(card-\u003eid) is 16 and the local id buffer is also 16 bytes,\nwriting 16 non-space characters fills the entire buffer,\noverwriting the terminating nullbyte.\n\nWhen this non-null-terminated string is later passed to\nsnd_card_set_id() -\u003e copy_valid_id_string(), the function scans\nforward with `while (*nid \u0026\u0026 ...)` and reads past the end of the\nstack buffer, reading the contents of the stack.\n\nA USB device with a product name containing many non-ASCII, non-space\ncharacters (e.g. multibyte UTF-8) will reliably trigger this as follows:\n\n BUG: KASAN: stack-out-of-bounds in copy_valid_id_string\n sound/core/init.c:696 [inline]\n BUG: KASAN: stack-out-of-bounds in snd_card_set_id_no_lock+0x698/0x74c\n sound/core/init.c:718\n\nThe off-by-one has been present since commit bafeee5b1f8d (\"ALSA:\nsnd_usb_caiaq: give better shortname\") from June 2009 (v2.6.31-rc1),\nwhich first introduced this whitespace-stripping loop. The original\ncode never accounted for the null terminator when bounding the copy.\n\nFix this by changing the loop bound to `sizeof(card-\u003eid) - 1`,\nensuring at least one byte remains as the null terminator.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31778",
"url": "https://www.suse.com/security/cve/CVE-2026-31778"
},
{
"category": "external",
"summary": "SUSE Bug 1263923 for CVE-2026-31778",
"url": "https://bugzilla.suse.com/1263923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31778"
},
{
"cve": "CVE-2026-31779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31779"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()\n\nThe memcpy function assumes the dynamic array notif-\u003ematches is at least\nas large as the number of bytes to copy. Otherwise, results-\u003ematches may\ncontain unwanted data. To guarantee safety, extend the validation in one\nof the checks to ensure sufficient packet length.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31779",
"url": "https://www.suse.com/security/cve/CVE-2026-31779"
},
{
"category": "external",
"summary": "SUSE Bug 1264030 for CVE-2026-31779",
"url": "https://bugzilla.suse.com/1264030"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31779"
},
{
"cve": "CVE-2026-31780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31780"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation\n\nThe variable valuesize is declared as u8 but accumulates the total\nlength of all SSIDs to scan. Each SSID contributes up to 33 bytes\n(IEEE80211_MAX_SSID_LEN + 1), and with WILC_MAX_NUM_PROBED_SSID (10)\nSSIDs the total can reach 330, which wraps around to 74 when stored\nin a u8.\n\nThis causes kmalloc to allocate only 75 bytes while the subsequent\nmemcpy writes up to 331 bytes into the buffer, resulting in a 256-byte\nheap buffer overflow.\n\nWiden valuesize from u8 to u32 to accommodate the full range.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31780",
"url": "https://www.suse.com/security/cve/CVE-2026-31780"
},
{
"category": "external",
"summary": "SUSE Bug 1264032 for CVE-2026-31780",
"url": "https://bugzilla.suse.com/1264032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31780"
},
{
"cve": "CVE-2026-31781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31781"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/ioc32: stop speculation on the drm_compat_ioctl path\n\nThe drm compat ioctl path takes a user controlled pointer, and then\ndereferences it into a table of function pointers, the signature method\nof spectre problems. Fix this up by calling array_index_nospec() on the\nindex to the function pointer list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31781",
"url": "https://www.suse.com/security/cve/CVE-2026-31781"
},
{
"category": "external",
"summary": "SUSE Bug 1264033 for CVE-2026-31781",
"url": "https://bugzilla.suse.com/1264033"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-31781"
},
{
"cve": "CVE-2026-43007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43007"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel/qaic: Handle DBC deactivation if the owner went away\n\nWhen a DBC is released, the device sends a QAIC_TRANS_DEACTIVATE_FROM_DEV\ntransaction to the host over the QAIC_CONTROL MHI channel. QAIC handles\nthis by calling decode_deactivate() to release the resources allocated for\nthat DBC. Since that handling is done in the qaic_manage_ioctl() context,\nif the user goes away before receiving and handling the deactivation, the\nhost will be out-of-sync with the DBCs available for use, and the DBC\nresources will not be freed unless the device is removed. If another user\nloads and requests to activate a network, then the device assigns the same\nDBC to that network, QAIC will \"indefinitely\" wait for dbc-\u003ein_use = false,\nleading the user process to hang.\n\nAs a solution to this, handle QAIC_TRANS_DEACTIVATE_FROM_DEV transactions\nthat are received after the user has gone away.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43007",
"url": "https://www.suse.com/security/cve/CVE-2026-43007"
},
{
"category": "external",
"summary": "SUSE Bug 1264019 for CVE-2026-43007",
"url": "https://bugzilla.suse.com/1264019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43007"
},
{
"cve": "CVE-2026-43011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43011"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/x25: Fix potential double free of skb\n\nWhen alloc_skb fails in x25_queue_rx_frame it calls kfree_skb(skb) at\nline 48 and returns 1 (error).\nThis error propagates back through the call chain:\n\nx25_queue_rx_frame returns 1\n |\n v\nx25_state3_machine receives the return value 1 and takes the else\nbranch at line 278, setting queued=0 and returning 0\n |\n v\nx25_process_rx_frame returns queued=0\n |\n v\nx25_backlog_rcv at line 452 sees queued=0 and calls kfree_skb(skb)\nagain\n\nThis would free the same skb twice. Looking at x25_backlog_rcv:\n\nnet/x25/x25_in.c:x25_backlog_rcv() {\n ...\n queued = x25_process_rx_frame(sk, skb);\n ...\n if (!queued)\n kfree_skb(skb);\n}",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43011",
"url": "https://www.suse.com/security/cve/CVE-2026-43011"
},
{
"category": "external",
"summary": "SUSE Bug 1264079 for CVE-2026-43011",
"url": "https://bugzilla.suse.com/1264079"
},
{
"category": "external",
"summary": "SUSE Bug 1264081 for CVE-2026-43011",
"url": "https://bugzilla.suse.com/1264081"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "critical"
}
],
"title": "CVE-2026-43011"
},
{
"cve": "CVE-2026-43016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43016"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: sockmap: Fix use-after-free of sk-\u003esk_socket in sk_psock_verdict_data_ready().\n\nsyzbot reported use-after-free of AF_UNIX socket\u0027s sk-\u003esk_socket\nin sk_psock_verdict_data_ready(). [0]\n\nIn unix_stream_sendmsg(), the peer socket\u0027s -\u003esk_data_ready() is\ncalled after dropping its unix_state_lock().\n\nAlthough the sender socket holds the peer\u0027s refcount, it does not\nprevent the peer\u0027s sock_orphan(), and the peer\u0027s sk_socket might\nbe freed after one RCU grace period.\n\nLet\u0027s fetch the peer\u0027s sk-\u003esk_socket and sk-\u003esk_socket-\u003eops under\nRCU in sk_psock_verdict_data_ready().\n\n[0]:\nBUG: KASAN: slab-use-after-free in sk_psock_verdict_data_ready+0xec/0x590 net/core/skmsg.c:1278\nRead of size 8 at addr ffff8880594da860 by task syz.4.1842/11013\n\nCPU: 1 UID: 0 PID: 11013 Comm: syz.4.1842 Not tainted syzkaller #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xba/0x230 mm/kasan/report.c:482\n kasan_report+0x117/0x150 mm/kasan/report.c:595\n sk_psock_verdict_data_ready+0xec/0x590 net/core/skmsg.c:1278\n unix_stream_sendmsg+0x8a3/0xe80 net/unix/af_unix.c:2482\n sock_sendmsg_nosec net/socket.c:721 [inline]\n __sock_sendmsg net/socket.c:736 [inline]\n ____sys_sendmsg+0x972/0x9f0 net/socket.c:2585\n ___sys_sendmsg+0x2a5/0x360 net/socket.c:2639\n __sys_sendmsg net/socket.c:2671 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7facf899c819\nCode: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007facf9827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007facf8c15fa0 RCX: 00007facf899c819\nRDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004\nRBP: 00007facf8a32c91 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007facf8c16038 R14: 00007facf8c15fa0 R15: 00007ffd41b01c78\n \u003c/TASK\u003e\n\nAllocated by task 11013:\n kasan_save_stack mm/kasan/common.c:57 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:78\n unpoison_slab_object mm/kasan/common.c:340 [inline]\n __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366\n kasan_slab_alloc include/linux/kasan.h:253 [inline]\n slab_post_alloc_hook mm/slub.c:4538 [inline]\n slab_alloc_node mm/slub.c:4866 [inline]\n kmem_cache_alloc_lru_noprof+0x2b8/0x640 mm/slub.c:4885\n sock_alloc_inode+0x28/0xc0 net/socket.c:316\n alloc_inode+0x6a/0x1b0 fs/inode.c:347\n new_inode_pseudo include/linux/fs.h:3003 [inline]\n sock_alloc net/socket.c:631 [inline]\n __sock_create+0x12d/0x9d0 net/socket.c:1562\n sock_create net/socket.c:1656 [inline]\n __sys_socketpair+0x1c4/0x560 net/socket.c:1803\n __do_sys_socketpair net/socket.c:1856 [inline]\n __se_sys_socketpair net/socket.c:1853 [inline]\n __x64_sys_socketpair+0x9b/0xb0 net/socket.c:1853\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 15:\n kasan_save_stack mm/kasan/common.c:57 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:78\n kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584\n poison_slab_object mm/kasan/common.c:253 [inline]\n __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285\n kasan_slab_free include/linux/kasan.h:235 [inline]\n slab_free_hook mm/slub.c:2685 [inline]\n slab_free mm/slub.c:6165 [inline]\n kmem_cache_free+0x187/0x630 mm/slub.c:6295\n rcu_do_batch kernel/rcu/tree.c:\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43016",
"url": "https://www.suse.com/security/cve/CVE-2026-43016"
},
{
"category": "external",
"summary": "SUSE Bug 1264007 for CVE-2026-43016",
"url": "https://bugzilla.suse.com/1264007"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43016"
},
{
"cve": "CVE-2026-43017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43017"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: validate mesh send advertising payload length\n\nmesh_send() currently bounds MGMT_OP_MESH_SEND by total command\nlength, but it never verifies that the bytes supplied for the\nflexible adv_data[] array actually match the embedded adv_data_len\nfield. MGMT_MESH_SEND_SIZE only covers the fixed header, so a\ntruncated command can still pass the existing 20..50 byte range\ncheck and later drive the async mesh send path past the end of the\nqueued command buffer.\n\nKeep rejecting zero-length and oversized advertising payloads, but\nvalidate adv_data_len explicitly and require the command length to\nexactly match the flexible array size before queueing the request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43017",
"url": "https://www.suse.com/security/cve/CVE-2026-43017"
},
{
"category": "external",
"summary": "SUSE Bug 1264009 for CVE-2026-43017",
"url": "https://bugzilla.suse.com/1264009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43017"
},
{
"cve": "CVE-2026-43018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43018"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt\n\nhci_conn lookup and field access must be covered by hdev lock in\nhci_le_remote_conn_param_req_evt, otherwise it\u0027s possible it is freed\nconcurrently.\n\nExtend the hci_dev_lock critical section to cover all conn usage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43018",
"url": "https://www.suse.com/security/cve/CVE-2026-43018"
},
{
"category": "external",
"summary": "SUSE Bug 1264008 for CVE-2026-43018",
"url": "https://bugzilla.suse.com/1264008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43018"
},
{
"cve": "CVE-2026-43020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43020"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: validate LTK enc_size on load\n\nLoad Long Term Keys stores the user-provided enc_size and later uses\nit to size fixed-size stack operations when replying to LE LTK\nrequests. An enc_size larger than the 16-byte key buffer can therefore\noverflow the reply stack buffer.\n\nReject oversized enc_size values while validating the management LTK\nrecord so invalid keys never reach the stored key state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43020",
"url": "https://www.suse.com/security/cve/CVE-2026-43020"
},
{
"category": "external",
"summary": "SUSE Bug 1264006 for CVE-2026-43020",
"url": "https://bugzilla.suse.com/1264006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43020"
},
{
"cve": "CVE-2026-43032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43032"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFC: pn533: bound the UART receive buffer\n\npn532_receive_buf() appends every incoming byte to dev-\u003erecv_skb and\nonly resets the buffer after pn532_uart_rx_is_frame() recognizes a\ncomplete frame. A continuous stream of bytes without a valid PN532 frame\nheader therefore keeps growing the skb until skb_put_u8() hits the tail\nlimit.\n\nDrop the accumulated partial frame once the fixed receive buffer is full\nso malformed UART traffic cannot grow the skb past\nPN532_UART_SKB_BUFF_LEN.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43032",
"url": "https://www.suse.com/security/cve/CVE-2026-43032"
},
{
"category": "external",
"summary": "SUSE Bug 1263999 for CVE-2026-43032",
"url": "https://bugzilla.suse.com/1263999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43032"
},
{
"cve": "CVE-2026-43033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43033"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption\n\nWhen decrypting data that is not in-place (src != dst), there is\nno need to save the high-order sequence bits in dst as it could\nsimply be re-copied from the source.\n\nHowever, the data to be hashed need to be rearranged accordingly.\n\n\nThanks,",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43033",
"url": "https://www.suse.com/security/cve/CVE-2026-43033"
},
{
"category": "external",
"summary": "SUSE Bug 1264089 for CVE-2026-43033",
"url": "https://bugzilla.suse.com/1264089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43033"
},
{
"cve": "CVE-2026-43043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43043"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af-alg - fix NULL pointer dereference in scatterwalk\n\nThe AF_ALG interface fails to unmark the end of a Scatter/Gather List (SGL)\nwhen chaining a new af_alg_tsgl structure. If a sendmsg() fills an SGL\nexactly to MAX_SGL_ENTS, the last entry is marked as the end. A subsequent\nsendmsg() allocates a new SGL and chains it, but fails to clear the end\nmarker on the previous SGL\u0027s last data entry.\n\nThis causes the crypto scatterwalk to hit a premature end, returning NULL\non sg_next() and leading to a kernel panic during dereference.\n\nFix this by explicitly unmarking the end of the previous SGL when\nperforming sg_chain() in af_alg_alloc_tsgl().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43043",
"url": "https://www.suse.com/security/cve/CVE-2026-43043"
},
{
"category": "external",
"summary": "SUSE Bug 1264088 for CVE-2026-43043",
"url": "https://bugzilla.suse.com/1264088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43043"
},
{
"cve": "CVE-2026-43046",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43046"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: reject root items with drop_progress and zero drop_level\n\n[BUG]\nWhen recovering relocation at mount time, merge_reloc_root() and\nbtrfs_drop_snapshot() both use BUG_ON(level == 0) to guard against\nan impossible state: a non-zero drop_progress combined with a zero\ndrop_level in a root_item, which can be triggered:\n\n------------[ cut here ]------------\nkernel BUG at fs/btrfs/relocation.c:1545!\nOops: invalid opcode: 0000 [#1] SMP KASAN NOPTI\nCPU: 1 UID: 0 PID: 283 ... Tainted: 6.18.0+ #16 PREEMPT(voluntary)\nTainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\nHardware name: QEMU Ubuntu 24.04 PC v2, BIOS 1.16.3-debian-1.16.3-2\nRIP: 0010:merge_reloc_root+0x1266/0x1650 fs/btrfs/relocation.c:1545\nCode: ffff0000 00004589 d7e9acfa ffffe8a1 79bafebe 02000000\nCall Trace:\n merge_reloc_roots+0x295/0x890 fs/btrfs/relocation.c:1861\n btrfs_recover_relocation+0xd6e/0x11d0 fs/btrfs/relocation.c:4195\n btrfs_start_pre_rw_mount+0xa4d/0x1810 fs/btrfs/disk-io.c:3130\n open_ctree+0x5824/0x5fe0 fs/btrfs/disk-io.c:3640\n btrfs_fill_super fs/btrfs/super.c:987 [inline]\n btrfs_get_tree_super fs/btrfs/super.c:1951 [inline]\n btrfs_get_tree_subvol fs/btrfs/super.c:2094 [inline]\n btrfs_get_tree+0x111c/0x2190 fs/btrfs/super.c:2128\n vfs_get_tree+0x9a/0x370 fs/super.c:1758\n fc_mount fs/namespace.c:1199 [inline]\n do_new_mount_fc fs/namespace.c:3642 [inline]\n do_new_mount fs/namespace.c:3718 [inline]\n path_mount+0x5b8/0x1ea0 fs/namespace.c:4028\n do_mount fs/namespace.c:4041 [inline]\n __do_sys_mount fs/namespace.c:4229 [inline]\n __se_sys_mount fs/namespace.c:4206 [inline]\n __x64_sys_mount+0x282/0x320 fs/namespace.c:4206\n ...\nRIP: 0033:0x7f969c9a8fde\nCode: 0f1f4000 48c7c2b0 fffffff7 d8648902 b8ffffff ffc3660f\n---[ end trace 0000000000000000 ]---\n\nThe bug is reproducible on 7.0.0-rc2-next-20260310 with our dynamic\nmetadata fuzzing tool that corrupts btrfs metadata at runtime.\n\n[CAUSE]\nA non-zero drop_progress.objectid means an interrupted\nbtrfs_drop_snapshot() left a resume point on disk, and in that case\ndrop_level must be greater than 0 because the checkpoint is only\nsaved at internal node levels.\n\nAlthough this invariant is enforced when the kernel writes the root\nitem, it is not validated when the root item is read back from disk.\nThat allows on-disk corruption to provide an invalid state with\ndrop_progress.objectid != 0 and drop_level == 0.\n\nWhen relocation recovery later processes such a root item,\nmerge_reloc_root() reads drop_level and hits BUG_ON(level == 0). The\nsame invalid metadata can also trigger the corresponding BUG_ON() in\nbtrfs_drop_snapshot().\n\n[FIX]\nFix this by validating the root_item invariant in tree-checker when\nreading root items from disk: if drop_progress.objectid is non-zero,\ndrop_level must also be non-zero. Reject such malformed metadata with\n-EUCLEAN before it reaches merge_reloc_root() or btrfs_drop_snapshot()\nand triggers the BUG_ON.\n\nAfter the fix, the same corruption is correctly rejected by tree-checker\nand the BUG_ON is no longer triggered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43046",
"url": "https://www.suse.com/security/cve/CVE-2026-43046"
},
{
"category": "external",
"summary": "SUSE Bug 1264090 for CVE-2026-43046",
"url": "https://bugzilla.suse.com/1264090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43046"
},
{
"cve": "CVE-2026-43047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43047"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: multitouch: Check to ensure report responses match the request\n\nIt is possible for a malicious (or clumsy) device to respond to a\nspecific report\u0027s feature request using a completely different report\nID. This can cause confusion in the HID core resulting in nasty\nside-effects such as OOB writes.\n\nAdd a check to ensure that the report ID in the response, matches the\none that was requested. If it doesn\u0027t, omit reporting the raw event and\nreturn early.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43047",
"url": "https://www.suse.com/security/cve/CVE-2026-43047"
},
{
"category": "external",
"summary": "SUSE Bug 1264073 for CVE-2026-43047",
"url": "https://bugzilla.suse.com/1264073"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43047"
},
{
"cve": "CVE-2026-43051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43051"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq\n\nThe wacom_intuos_bt_irq() function processes Bluetooth HID reports\nwithout sufficient bounds checking. A maliciously crafted short report\ncan trigger an out-of-bounds read when copying data into the wacom\nstructure.\n\nSpecifically, report 0x03 requires at least 22 bytes to safely read\nthe processed data and battery status, while report 0x04 (which\nfalls through to 0x03) requires 32 bytes.\n\nAdd explicit length checks for these report IDs and log a warning if\na short report is received.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43051",
"url": "https://www.suse.com/security/cve/CVE-2026-43051"
},
{
"category": "external",
"summary": "SUSE Bug 1264065 for CVE-2026-43051",
"url": "https://bugzilla.suse.com/1264065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43051"
},
{
"cve": "CVE-2026-43056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43056"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: fix use-after-free in add_adev() error path\n\nIf auxiliary_device_add() fails, add_adev() jumps to add_fail and calls\nauxiliary_device_uninit(adev).\n\nThe auxiliary device has its release callback set to adev_release(),\nwhich frees the containing struct mana_adev. Since adev is embedded in\nstruct mana_adev, the subsequent fall-through to init_fail and access\nto adev-\u003eid may result in a use-after-free.\n\nFix this by saving the allocated auxiliary device id in a local\nvariable before calling auxiliary_device_add(), and use that saved id\nin the cleanup path after auxiliary_device_uninit().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43056",
"url": "https://www.suse.com/security/cve/CVE-2026-43056"
},
{
"category": "external",
"summary": "SUSE Bug 1264053 for CVE-2026-43056",
"url": "https://bugzilla.suse.com/1264053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43056"
},
{
"cve": "CVE-2026-43058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43058"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vidtv: fix pass-by-value structs causing MSAN warnings\n\nvidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their\nargument structs by value, causing MSAN to report uninit-value warnings.\nWhile only vidtv_ts_null_write_into() has triggered a report so far,\nboth functions share the same issue.\n\nFix by passing both structs by const pointer instead, avoiding the\nstack copy of the struct along with its MSAN shadow and origin metadata.\nThe functions do not modify the structs, which is enforced by the const\nqualifier.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43058",
"url": "https://www.suse.com/security/cve/CVE-2026-43058"
},
{
"category": "external",
"summary": "SUSE Bug 1264129 for CVE-2026-43058",
"url": "https://bugzilla.suse.com/1264129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43058"
},
{
"cve": "CVE-2026-43059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43059"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix list corruption and UAF in command complete handlers\n\nCommit 302a1f674c00 (\"Bluetooth: MGMT: Fix possible UAFs\") introduced\nmgmt_pending_valid(), which not only validates the pending command but\nalso unlinks it from the pending list if it is valid. This change in\nsemantics requires updates to several completion handlers to avoid list\ncorruption and memory safety issues.\n\nThis patch addresses two left-over issues from the aforementioned rework:\n\n1. In mgmt_add_adv_patterns_monitor_complete(), mgmt_pending_remove()\nis replaced with mgmt_pending_free() in the success path. Since\nmgmt_pending_valid() already unlinks the command at the beginning of\nthe function, calling mgmt_pending_remove() leads to a double list_del()\nand subsequent list corruption/kernel panic.\n\n2. In set_mesh_complete(), the use of mgmt_pending_foreach() in the error\npath is removed. Since the current command is already unlinked by\nmgmt_pending_valid(), this foreach loop would incorrectly target other\npending mesh commands, potentially freeing them while they are still being\nprocessed concurrently (leading to UAFs). The redundant mgmt_cmd_status()\nis also simplified to use cmd-\u003eopcode directly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43059",
"url": "https://www.suse.com/security/cve/CVE-2026-43059"
},
{
"category": "external",
"summary": "SUSE Bug 1264184 for CVE-2026-43059",
"url": "https://bugzilla.suse.com/1264184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43059"
},
{
"cve": "CVE-2026-43061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43061"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250: Fix TX deadlock when using DMA\n\n`dmaengine_terminate_async` does not guarantee that the\n`__dma_tx_complete` callback will run. The callback is currently the\nonly place where `dma-\u003etx_running` gets cleared. If the transaction is\ncanceled and the callback never runs, then `dma-\u003etx_running` will never\nget cleared and we will never schedule new TX DMA transactions again.\n\nThis change makes it so we clear `dma-\u003etx_running` after we terminate\nthe DMA transaction. This is \"safe\" because `serial8250_tx_dma_flush`\nis holding the UART port lock. The first thing the callback does is also\ngrab the UART port lock, so access to `dma-\u003etx_running` is serialized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43061",
"url": "https://www.suse.com/security/cve/CVE-2026-43061"
},
{
"category": "external",
"summary": "SUSE Bug 1264188 for CVE-2026-43061",
"url": "https://bugzilla.suse.com/1264188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43061"
},
{
"cve": "CVE-2026-43062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43062"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()\n\nl2cap_ecred_reconf_rsp() casts the incoming data to struct\nl2cap_ecred_conn_rsp (the ECRED *connection* response, 8 bytes with\nresult at offset 6) instead of struct l2cap_ecred_reconf_rsp (2 bytes\nwith result at offset 0).\n\nThis causes two problems:\n\n - The sizeof(*rsp) length check requires 8 bytes instead of the\n correct 2, so valid L2CAP_ECRED_RECONF_RSP packets are rejected\n with -EPROTO.\n\n - rsp-\u003eresult reads from offset 6 instead of offset 0, returning\n wrong data when the packet is large enough to pass the check.\n\nFix by using the correct type. Also pass the already byte-swapped\nresult variable to BT_DBG instead of the raw __le16 field.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43062",
"url": "https://www.suse.com/security/cve/CVE-2026-43062"
},
{
"category": "external",
"summary": "SUSE Bug 1264197 for CVE-2026-43062",
"url": "https://bugzilla.suse.com/1264197"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43062"
},
{
"cve": "CVE-2026-43064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43064"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix not releasing workqueue on .release()\n\nThe workqueue associated with an DSA/IAA device is not released when\nthe object is freed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43064",
"url": "https://www.suse.com/security/cve/CVE-2026-43064"
},
{
"category": "external",
"summary": "SUSE Bug 1264189 for CVE-2026-43064",
"url": "https://bugzilla.suse.com/1264189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43064"
},
{
"cve": "CVE-2026-43069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43069"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_ll: Fix firmware leak on error path\n\nSmatch reports:\n\ndrivers/bluetooth/hci_ll.c:587 download_firmware() warn:\n\u0027fw\u0027 from request_firmware() not released on lines: 544.\n\nIn download_firmware(), if request_firmware() succeeds but the returned\nfirmware content is invalid (no data or zero size), the function returns\nwithout releasing the firmware, resulting in a resource leak.\n\nFix this by calling release_firmware() before returning when\nrequest_firmware() succeeded but the firmware content is invalid.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43069",
"url": "https://www.suse.com/security/cve/CVE-2026-43069"
},
{
"category": "external",
"summary": "SUSE Bug 1264190 for CVE-2026-43069",
"url": "https://bugzilla.suse.com/1264190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43069"
},
{
"cve": "CVE-2026-43072",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43072"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: platform_get_irq_byname() returns an int\n\nplatform_get_irq_byname() will return a negative value if an error\nhappens, so it should be checked and not just passed directly into\ndevm_request_threaded_irq() hoping all will be ok.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43072",
"url": "https://www.suse.com/security/cve/CVE-2026-43072"
},
{
"category": "external",
"summary": "SUSE Bug 1264451 for CVE-2026-43072",
"url": "https://bugzilla.suse.com/1264451"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43072"
},
{
"cve": "CVE-2026-43098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43098"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: s3fwrn5: allocate rx skb before consuming bytes\n\ns3fwrn82_uart_read() reports the number of accepted bytes to the serdev\ncore. The current code consumes bytes into recv_skb and may already\ndeliver a complete frame before allocating a fresh receive buffer.\n\nIf that alloc_skb() fails, the callback returns 0 even though it has\nalready consumed bytes, and it leaves recv_skb as NULL for the next\nreceive callback. That breaks the receive_buf() accounting contract and\ncan also lead to a NULL dereference on the next skb_put_u8().\n\nAllocate the receive skb lazily before consuming the next byte instead.\nIf allocation fails, return the number of bytes already accepted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43098",
"url": "https://www.suse.com/security/cve/CVE-2026-43098"
},
{
"category": "external",
"summary": "SUSE Bug 1264257 for CVE-2026-43098",
"url": "https://bugzilla.suse.com/1264257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43098"
},
{
"cve": "CVE-2026-43104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43104"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Fix a memory leak in hang state error path\n\nWhen vc4_save_hang_state() encounters an early return condition, it\nreturns without freeing the previously allocated `kernel_state`,\nleaking memory.\n\nAdd the missing kfree() calls by consolidating the early return paths\ninto a single place.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43104",
"url": "https://www.suse.com/security/cve/CVE-2026-43104"
},
{
"category": "external",
"summary": "SUSE Bug 1264247 for CVE-2026-43104",
"url": "https://bugzilla.suse.com/1264247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43104"
},
{
"cve": "CVE-2026-43105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43105"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Fix memory leak of BO array in hang state\n\nThe hang state\u0027s BO array is allocated separately with kzalloc() in\nvc4_save_hang_state() but never freed in vc4_free_hang_state(). Add the\nmissing kfree() for the BO array before freeing the hang state struct.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43105",
"url": "https://www.suse.com/security/cve/CVE-2026-43105"
},
{
"category": "external",
"summary": "SUSE Bug 1264237 for CVE-2026-43105",
"url": "https://bugzilla.suse.com/1264237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43105"
},
{
"cve": "CVE-2026-43111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43111"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: roccat: fix use-after-free in roccat_report_event\n\nroccat_report_event() iterates over the device-\u003ereaders list without\nholding the readers_lock. This allows a concurrent roccat_release() to\nremove and free a reader while it\u0027s still being accessed, leading to a\nuse-after-free.\n\nProtect the readers list traversal with the readers_lock mutex.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43111",
"url": "https://www.suse.com/security/cve/CVE-2026-43111"
},
{
"category": "external",
"summary": "SUSE Bug 1264480 for CVE-2026-43111",
"url": "https://bugzilla.suse.com/1264480"
},
{
"category": "external",
"summary": "SUSE Bug 1264481 for CVE-2026-43111",
"url": "https://bugzilla.suse.com/1264481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43111"
},
{
"cve": "CVE-2026-43113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43113"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wl1251: validate packet IDs before indexing tx_frames\n\nwl1251_tx_packet_cb() uses the firmware completion ID directly to index\nthe fixed 16-entry wl-\u003etx_frames[] array. The ID is a raw u8 from the\ncompletion block, and the callback does not currently verify that it\nfits the array before dereferencing it.\n\nReject completion IDs that fall outside wl-\u003etx_frames[] and keep the\nexisting NULL check in the same guard. This keeps the fix local to the\ntrust boundary and avoids touching the rest of the completion flow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43113",
"url": "https://www.suse.com/security/cve/CVE-2026-43113"
},
{
"category": "external",
"summary": "SUSE Bug 1264637 for CVE-2026-43113",
"url": "https://bugzilla.suse.com/1264637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43113"
},
{
"cve": "CVE-2026-43114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43114"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_pipapo_avx2: don\u0027t return non-matching entry on expiry\n\nNew test case fails unexpectedly when avx2 matching functions are used.\n\nThe test first loads a ranomly generated pipapo set\nwith \u0027ipv4 . port\u0027 key, i.e. nft -f foo.\n\nThis works. Then, it reloads the set after a flush:\n(echo flush set t s; cat foo) | nft -f -\n\nThis is expected to work, because its the same set after all and it was\nalready loaded once.\n\nBut with avx2, this fails: nft reports a clashing element.\n\nThe reported clash is of following form:\n\n We successfully re-inserted\n a . b\n c . d\n\nThen we try to insert a . d\n\navx2 finds the already existing a . d, which (due to \u0027flush set\u0027) is marked\nas invalid in the new generation. It skips the element and moves to next.\n\nDue to incorrect masking, the skip-step finds the next matching\nelement *only considering the first field*,\n\ni.e. we return the already reinserted \"a . b\", even though the\nlast field is different and the entry should not have been matched.\n\nNo such error is reported for the generic c implementation (no avx2) or when\nthe last field has to use the \u0027nft_pipapo_avx2_lookup_slow\u0027 fallback.\n\nBisection points to\n7711f4bb4b36 (\"netfilter: nft_set_pipapo: fix range overlap detection\")\nbut that fix merely uncovers this bug.\n\nBefore this commit, the wrong element is returned, but erronously\nreported as a full, identical duplicate.\n\nThe root-cause is too early return in the avx2 match functions.\nWhen we process the last field, we should continue to process data\nuntil the entire input size has been consumed to make sure no stale\nbits remain in the map.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43114",
"url": "https://www.suse.com/security/cve/CVE-2026-43114"
},
{
"category": "external",
"summary": "SUSE Bug 1264601 for CVE-2026-43114",
"url": "https://bugzilla.suse.com/1264601"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43114"
},
{
"cve": "CVE-2026-43117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43117"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()\n\nIf overlay is used on top of btrfs, dentry-\u003ed_sb translates to overlay\u0027s\nsuper block and fsid assignment will lead to a crash.\n\nUse file_inode(file)-\u003ei_sb to always get btrfs_sb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43117",
"url": "https://www.suse.com/security/cve/CVE-2026-43117"
},
{
"category": "external",
"summary": "SUSE Bug 1264414 for CVE-2026-43117",
"url": "https://bugzilla.suse.com/1264414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43117"
},
{
"cve": "CVE-2026-43118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43118"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix zero size inode with non-zero size after log replay\n\nWhen logging that an inode exists, as part of logging a new name or\nlogging new dir entries for a directory, we always set the generation of\nthe logged inode item to 0. This is to signal during log replay (in\noverwrite_item()), that we should not set the i_size since we only logged\nthat an inode exists, so the i_size of the inode in the subvolume tree\nmust be preserved (as when we log new names or that an inode exists, we\ndon\u0027t log extents).\n\nThis works fine except when we have already logged an inode in full mode\nor it\u0027s the first time we are logging an inode created in a past\ntransaction, that inode has a new i_size of 0 and then we log a new name\nfor the inode (due to a new hardlink or a rename), in which case we log\nan i_size of 0 for the inode and a generation of 0, which causes the log\nreplay code to not update the inode\u0027s i_size to 0 (in overwrite_item()).\n\nAn example scenario:\n\n mkdir /mnt/dir\n xfs_io -f -c \"pwrite 0 64K\" /mnt/dir/foo\n\n sync\n\n xfs_io -c \"truncate 0\" -c \"fsync\" /mnt/dir/foo\n\n ln /mnt/dir/foo /mnt/dir/bar\n\n xfs_io -c \"fsync\" /mnt/dir\n\n \u003cpower fail\u003e\n\nAfter log replay the file remains with a size of 64K. This is because when\nwe first log the inode, when we fsync file foo, we log its current i_size\nof 0, and then when we create a hard link we log again the inode in exists\nmode (LOG_INODE_EXISTS) but we set a generation of 0 for the inode item we\nadd to the log tree, so during log replay overwrite_item() sees that the\ngeneration is 0 and i_size is 0 so we skip updating the inode\u0027s i_size\nfrom 64K to 0.\n\nFix this by making sure at fill_inode_item() we always log the real\ngeneration of the inode if it was logged in the current transaction with\nthe i_size we logged before. Also if an inode created in a previous\ntransaction is logged in exists mode only, make sure we log the i_size\nstored in the inode item located from the commit root, so that if we log\nmultiple times that the inode exists we get the correct i_size.\n\nA test case for fstests will follow soon.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43118",
"url": "https://www.suse.com/security/cve/CVE-2026-43118"
},
{
"category": "external",
"summary": "SUSE Bug 1264417 for CVE-2026-43118",
"url": "https://bugzilla.suse.com/1264417"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43118"
},
{
"cve": "CVE-2026-43123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43123"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbcon: check return value of con2fb_acquire_newinfo()\n\nIf fbcon_open() fails when called from con2fb_acquire_newinfo() then\ninfo-\u003efbcon_par pointer remains NULL which is later dereferenced.\n\nAdd check for return value of the function con2fb_acquire_newinfo() to\navoid it.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43123",
"url": "https://www.suse.com/security/cve/CVE-2026-43123"
},
{
"category": "external",
"summary": "SUSE Bug 1264598 for CVE-2026-43123",
"url": "https://bugzilla.suse.com/1264598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43123"
},
{
"cve": "CVE-2026-43129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43129"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nima: verify the previous kernel\u0027s IMA buffer lies in addressable RAM\n\nPatch series \"Address page fault in ima_restore_measurement_list()\", v3.\n\nWhen the second-stage kernel is booted via kexec with a limiting command\nline such as \"mem=\u003csize\u003e\" we observe a pafe fault that happens.\n\n BUG: unable to handle page fault for address: ffff97793ff47000\n RIP: ima_restore_measurement_list+0xdc/0x45a\n #PF: error_code(0x0000) not-present page\n\nThis happens on x86_64 only, as this is already fixed in aarch64 in\ncommit: cbf9c4b9617b (\"of: check previous kernel\u0027s ima-kexec-buffer\nagainst memory bounds\")\n\n\nThis patch (of 3):\n\nWhen the second-stage kernel is booted with a limiting command line (e.g. \n\"mem=\u003csize\u003e\"), the IMA measurement buffer handed over from the previous\nkernel may fall outside the addressable RAM of the new kernel. Accessing\nsuch a buffer can fault during early restore.\n\nIntroduce a small generic helper, ima_validate_range(), which verifies\nthat a physical [start, end] range for the previous-kernel IMA buffer lies\nwithin addressable memory:\n\t- On x86, use pfn_range_is_mapped().\n\t- On OF based architectures, use page_is_ram().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43129",
"url": "https://www.suse.com/security/cve/CVE-2026-43129"
},
{
"category": "external",
"summary": "SUSE Bug 1264553 for CVE-2026-43129",
"url": "https://bugzilla.suse.com/1264553"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43129"
},
{
"cve": "CVE-2026-43130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43130"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode\n\nCommit 4fc82cd907ac (\"iommu/vt-d: Don\u0027t issue ATS Invalidation\nrequest when device is disconnected\") relies on\npci_dev_is_disconnected() to skip ATS invalidation for\nsafely-removed devices, but it does not cover link-down caused\nby faults, which can still hard-lock the system.\n\nFor example, if a VM fails to connect to the PCIe device,\n\"virsh destroy\" is executed to release resources and isolate\nthe fault, but a hard-lockup occurs while releasing the group fd.\n\nCall Trace:\n qi_submit_sync\n qi_flush_dev_iotlb\n intel_pasid_tear_down_entry\n device_block_translation\n blocking_domain_attach_dev\n __iommu_attach_device\n __iommu_device_set_domain\n __iommu_group_set_domain_internal\n iommu_detach_group\n vfio_iommu_type1_detach_group\n vfio_group_detach_container\n vfio_group_fops_release\n __fput\n\nAlthough pci_device_is_present() is slower than\npci_dev_is_disconnected(), it still takes only ~70 s on a\nConnectX-5 (8 GT/s, x2) and becomes even faster as PCIe speed\nand width increase.\n\nBesides, devtlb_invalidation_with_pasid() is called only in the\npaths below, which are far less frequent than memory map/unmap.\n\n1. mm-struct release\n2. {attach,release}_dev\n3. set/remove PASID\n4. dirty-tracking setup\n\nThe gain in system stability far outweighs the negligible cost\nof using pci_device_is_present() instead of pci_dev_is_disconnected()\nto decide when to skip ATS invalidation, especially under GDR\nhigh-load conditions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43130",
"url": "https://www.suse.com/security/cve/CVE-2026-43130"
},
{
"category": "external",
"summary": "SUSE Bug 1264532 for CVE-2026-43130",
"url": "https://bugzilla.suse.com/1264532"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43130"
},
{
"cve": "CVE-2026-43133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43133"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation\n\nCommit cc3ed80ae69f (\"KVM: nSVM: always use vmcb01 to for vmsave/vmload\nof guest state\") made KVM always use vmcb01 for the fields controlled by\nVMSAVE/VMLOAD, but it missed updating the VMLOAD/VMSAVE emulation code\nto always use vmcb01.\n\nAs a result, if VMSAVE/VMLOAD is executed by an L2 guest and is not\nintercepted by L1, KVM will mistakenly use vmcb02. Always use vmcb01\ninstead of the current VMCB.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43133",
"url": "https://www.suse.com/security/cve/CVE-2026-43133"
},
{
"category": "external",
"summary": "SUSE Bug 1264640 for CVE-2026-43133",
"url": "https://bugzilla.suse.com/1264640"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43133"
},
{
"cve": "CVE-2026-43134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43134"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ\n\nThis adds a check for encryption key size upon receiving\nL2CAP_LE_CONN_REQ which is required by L2CAP/LE/CFC/BV-15-C which\nexpects L2CAP_CR_LE_BAD_KEY_SIZE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43134",
"url": "https://www.suse.com/security/cve/CVE-2026-43134"
},
{
"category": "external",
"summary": "SUSE Bug 1264308 for CVE-2026-43134",
"url": "https://bugzilla.suse.com/1264308"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43134"
},
{
"cve": "CVE-2026-43135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43135"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cx23885: Add missing unmap in snd_cx23885_hw_params()\n\nIn error path, add cx23885_alsa_dma_unmap() to release the\nresource acquired by cx23885_alsa_dma_map().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43135",
"url": "https://www.suse.com/security/cve/CVE-2026-43135"
},
{
"category": "external",
"summary": "SUSE Bug 1264613 for CVE-2026-43135",
"url": "https://bugzilla.suse.com/1264613"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43135"
},
{
"cve": "CVE-2026-43136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43136"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: logitech-hidpp: Check maxfield in hidpp_get_report_length()\n\nDo not crash when a report has no fields.\n\nFake USB gadgets can send their own HID report descriptors and can define report\nstructures without valid fields. This can be used to crash the kernel over USB.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43136",
"url": "https://www.suse.com/security/cve/CVE-2026-43136"
},
{
"category": "external",
"summary": "SUSE Bug 1264540 for CVE-2026-43136",
"url": "https://bugzilla.suse.com/1264540"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43136"
},
{
"cve": "CVE-2026-43137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43137"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: hda: Fix NULL pointer dereference\n\nIf there\u0027s a mismatch between the DAI links in the machine driver and\nthe topology, it is possible that the playback/capture widget is not\nset, especially in the case of loopback capture for echo reference\nwhere we use the dummy DAI link. Return the error when the widget is not\nset to avoid a null pointer dereference like below when the topology is\nbroken.\n\nRIP: 0010:hda_dai_get_ops.isra.0+0x14/0xa0 [snd_sof_intel_hda_common]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43137",
"url": "https://www.suse.com/security/cve/CVE-2026-43137"
},
{
"category": "external",
"summary": "SUSE Bug 1264564 for CVE-2026-43137",
"url": "https://bugzilla.suse.com/1264564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43137"
},
{
"cve": "CVE-2026-43140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43140"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: magicmouse: Do not crash on missing msc-\u003einput\n\nFake USB devices can send their own report descriptors for which the\ninput_mapping() hook does not get called. In this case, msc-\u003einput stays NULL,\nleading to a crash at a later time.\n\nDetect this condition in the input_configured() hook and reject the device.\n\nThis is not supposed to happen with actual magic mouse devices, but can be\nprovoked by imposing as a magic mouse USB device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43140",
"url": "https://www.suse.com/security/cve/CVE-2026-43140"
},
{
"category": "external",
"summary": "SUSE Bug 1264630 for CVE-2026-43140",
"url": "https://bugzilla.suse.com/1264630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43140"
},
{
"cve": "CVE-2026-43141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut\n\nNumber of MW LUTs depends on NTB configuration and can be set to zero,\nin such scenario rounddown_pow_of_two will cause undefined behaviour and\nshould not be performed.\nThis patch ensures that rounddown_pow_of_two is called on valid value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43141",
"url": "https://www.suse.com/security/cve/CVE-2026-43141"
},
{
"category": "external",
"summary": "SUSE Bug 1264626 for CVE-2026-43141",
"url": "https://bugzilla.suse.com/1264626"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43141"
},
{
"cve": "CVE-2026-43143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: core: Add locking around \u0027mfd_of_node_list\u0027\n\nManipulating a list in the kernel isn\u0027t safe without some sort of\nmutual exclusion. Add a mutex any time we access / modify\n\u0027mfd_of_node_list\u0027 to prevent possible crashes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43143",
"url": "https://www.suse.com/security/cve/CVE-2026-43143"
},
{
"category": "external",
"summary": "SUSE Bug 1264388 for CVE-2026-43143",
"url": "https://bugzilla.suse.com/1264388"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43143"
},
{
"cve": "CVE-2026-43147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43147"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV\"\n\nThis reverts commit 05703271c3cd (\"PCI/IOV: Add PCI rescan-remove locking\nwhen enabling/disabling SR-IOV\"), which causes a deadlock by recursively\ntaking pci_rescan_remove_lock when sriov_del_vfs() is called as part of\npci_stop_and_remove_bus_device(). For example with the following sequence\nof commands:\n\n $ echo \u003cNUM\u003e \u003e /sys/bus/pci/devices/\u003cpf\u003e/sriov_numvfs\n $ echo 1 \u003e /sys/bus/pci/devices/\u003cpf\u003e/remove\n\nA trimmed trace of the deadlock on a mlx5 device is as below:\n\n zsh/5715 is trying to acquire lock:\n 000002597926ef50 (pci_rescan_remove_lock){+.+.}-{3:3}, at: sriov_disable+0x34/0x140\n\n but task is already holding lock:\n 000002597926ef50 (pci_rescan_remove_lock){+.+.}-{3:3}, at: pci_stop_and_remove_bus_device_locked+0x24/0x80\n ...\n Call Trace:\n [\u003c00000259778c4f90\u003e] dump_stack_lvl+0xc0/0x110\n [\u003c00000259779c844e\u003e] print_deadlock_bug+0x31e/0x330\n [\u003c00000259779c1908\u003e] __lock_acquire+0x16c8/0x32f0\n [\u003c00000259779bffac\u003e] lock_acquire+0x14c/0x350\n [\u003c00000259789643a6\u003e] __mutex_lock_common+0xe6/0x1520\n [\u003c000002597896413c\u003e] mutex_lock_nested+0x3c/0x50\n [\u003c00000259784a07e4\u003e] sriov_disable+0x34/0x140\n [\u003c00000258f7d6dd80\u003e] mlx5_sriov_disable+0x50/0x80 [mlx5_core]\n [\u003c00000258f7d5745e\u003e] remove_one+0x5e/0xf0 [mlx5_core]\n [\u003c00000259784857fc\u003e] pci_device_remove+0x3c/0xa0\n [\u003c000002597851012e\u003e] device_release_driver_internal+0x18e/0x280\n [\u003c000002597847ae22\u003e] pci_stop_bus_device+0x82/0xa0\n [\u003c000002597847afce\u003e] pci_stop_and_remove_bus_device_locked+0x5e/0x80\n [\u003c00000259784972c2\u003e] remove_store+0x72/0x90\n [\u003c0000025977e6661a\u003e] kernfs_fop_write_iter+0x15a/0x200\n [\u003c0000025977d7241c\u003e] vfs_write+0x24c/0x300\n [\u003c0000025977d72696\u003e] ksys_write+0x86/0x110\n [\u003c000002597895b61c\u003e] __do_syscall+0x14c/0x400\n [\u003c000002597896e0ee\u003e] system_call+0x6e/0x90\n\nThis alone is not a complete fix as it restores the issue the cited commit\ntried to solve. A new fix will be provided as a follow on.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43147",
"url": "https://www.suse.com/security/cve/CVE-2026-43147"
},
{
"category": "external",
"summary": "SUSE Bug 1264642 for CVE-2026-43147",
"url": "https://bugzilla.suse.com/1264642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43147"
},
{
"cve": "CVE-2026-43149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43149"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()\n\nThe priv-\u003erx_buffer and priv-\u003etx_buffer are alloc\u0027d together as\ncontiguous buffers in uhdlc_init() but freed as two buffers in\nuhdlc_memclean().\n\nChange the cleanup to only call dma_free_coherent() once on the whole\nbuffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43149",
"url": "https://www.suse.com/security/cve/CVE-2026-43149"
},
{
"category": "external",
"summary": "SUSE Bug 1264315 for CVE-2026-43149",
"url": "https://bugzilla.suse.com/1264315"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43149"
},
{
"cve": "CVE-2026-43152",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43152"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: hid-pl: handle probe errors\n\nErrors in init must be reported back or we\u0027ll\nfollow a NULL pointer the first time FF is used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43152",
"url": "https://www.suse.com/security/cve/CVE-2026-43152"
},
{
"category": "external",
"summary": "SUSE Bug 1264331 for CVE-2026-43152",
"url": "https://bugzilla.suse.com/1264331"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43152"
},
{
"cve": "CVE-2026-43156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43156"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: pegasus: enable basic endpoint checking\n\npegasus_probe() fills URBs with hardcoded endpoint pipes without\nverifying the endpoint descriptors:\n\n - usb_rcvbulkpipe(dev, 1) for RX data\n - usb_sndbulkpipe(dev, 2) for TX data\n - usb_rcvintpipe(dev, 3) for status interrupts\n\nA malformed USB device can present these endpoints with transfer types\nthat differ from what the driver assumes.\n\nAdd a pegasus_usb_ep enum for endpoint numbers, replacing magic\nconstants throughout. Add usb_check_bulk_endpoints() and\nusb_check_int_endpoints() calls before any resource allocation to\nverify endpoint types before use, rejecting devices with mismatched\ndescriptors at probe time, and avoid triggering assertion.\n\nSimilar fix to\n- commit 90b7f2961798 (\"net: usb: rtl8150: enable basic endpoint checking\")\n- commit 9e7021d2aeae (\"net: usb: catc: enable basic endpoint checking\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43156",
"url": "https://www.suse.com/security/cve/CVE-2026-43156"
},
{
"category": "external",
"summary": "SUSE Bug 1265092 for CVE-2026-43156",
"url": "https://bugzilla.suse.com/1265092"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43156"
},
{
"cve": "CVE-2026-43159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43159"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8723bs: fix null dereference in find_network\n\nThe variable pwlan has the possibility of being NULL when passed into\nrtw_free_network_nolock() which would later dereference the variable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43159",
"url": "https://www.suse.com/security/cve/CVE-2026-43159"
},
{
"category": "external",
"summary": "SUSE Bug 1264616 for CVE-2026-43159",
"url": "https://bugzilla.suse.com/1264616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43159"
},
{
"cve": "CVE-2026-43161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43161"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode\n\nPCIe endpoints with ATS enabled and passed through to userspace\n(e.g., QEMU, DPDK) can hard-lock the host when their link drops,\neither by surprise removal or by a link fault.\n\nCommit 4fc82cd907ac (\"iommu/vt-d: Don\u0027t issue ATS Invalidation\nrequest when device is disconnected\") adds pci_dev_is_disconnected()\nto devtlb_invalidation_with_pasid() so ATS invalidation is skipped\nonly when the device is being safely removed, but it applies only\nwhen Intel IOMMU scalable mode is enabled.\n\nWith scalable mode disabled or unsupported, a system hard-lock\noccurs when a PCIe endpoint\u0027s link drops because the Intel IOMMU\nwaits indefinitely for an ATS invalidation that cannot complete.\n\nCall Trace:\n qi_submit_sync\n qi_flush_dev_iotlb\n __context_flush_dev_iotlb.part.0\n domain_context_clear_one_cb\n pci_for_each_dma_alias\n device_block_translation\n blocking_domain_attach_dev\n iommu_deinit_device\n __iommu_group_remove_device\n iommu_release_device\n iommu_bus_notifier\n blocking_notifier_call_chain\n bus_notify\n device_del\n pci_remove_bus_device\n pci_stop_and_remove_bus_device\n pciehp_unconfigure_device\n pciehp_disable_slot\n pciehp_handle_presence_or_link_change\n pciehp_ist\n\nCommit 81e921fd3216 (\"iommu/vt-d: Fix NULL domain on device release\")\nadds intel_pasid_teardown_sm_context() to intel_iommu_release_device(),\nwhich calls qi_flush_dev_iotlb() and can also hard-lock the system\nwhen a PCIe endpoint\u0027s link drops.\n\nCall Trace:\n qi_submit_sync\n qi_flush_dev_iotlb\n __context_flush_dev_iotlb.part.0\n intel_context_flush_no_pasid\n device_pasid_table_teardown\n pci_pasid_table_teardown\n pci_for_each_dma_alias\n intel_pasid_teardown_sm_context\n intel_iommu_release_device\n iommu_deinit_device\n __iommu_group_remove_device\n iommu_release_device\n iommu_bus_notifier\n blocking_notifier_call_chain\n bus_notify\n device_del\n pci_remove_bus_device\n pci_stop_and_remove_bus_device\n pciehp_unconfigure_device\n pciehp_disable_slot\n pciehp_handle_presence_or_link_change\n pciehp_ist\n\nSometimes the endpoint loses connection without a link-down event\n(e.g., due to a link fault); killing the process (virsh destroy)\nthen hard-locks the host.\n\nCall Trace:\n qi_submit_sync\n qi_flush_dev_iotlb\n __context_flush_dev_iotlb.part.0\n domain_context_clear_one_cb\n pci_for_each_dma_alias\n device_block_translation\n blocking_domain_attach_dev\n __iommu_attach_device\n __iommu_device_set_domain\n __iommu_group_set_domain_internal\n iommu_detach_group\n vfio_iommu_type1_detach_group\n vfio_group_detach_container\n vfio_group_fops_release\n __fput\n\npci_dev_is_disconnected() only covers safe-removal paths;\npci_device_is_present() tests accessibility by reading\nvendor/device IDs and internally calls pci_dev_is_disconnected().\nOn a ConnectX-5 (8 GT/s, x2) this costs ~70 s.\n\nSince __context_flush_dev_iotlb() is only called on\n{attach,release}_dev paths (not hot), add pci_device_is_present()\nthere to skip inaccessible devices and avoid the hard-lock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43161",
"url": "https://www.suse.com/security/cve/CVE-2026-43161"
},
{
"category": "external",
"summary": "SUSE Bug 1264333 for CVE-2026-43161",
"url": "https://bugzilla.suse.com/1264333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43161"
},
{
"cve": "CVE-2026-43168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43168"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix reflink preserve cleanup issue\n\ncommit c06c303832ec (\"ocfs2: fix xattr array entry __counted_by error\")\ndoesn\u0027t handle all cases and the cleanup job for preserved xattr entries\nstill has bug:\n- the \u0027last\u0027 pointer should be shifted by one unit after cleanup\n an array entry.\n- current code logic doesn\u0027t cleanup the first entry when xh_count is 1.\n\nNote, commit c06c303832ec is also a bug fix for 0fe9b66c65f3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43168",
"url": "https://www.suse.com/security/cve/CVE-2026-43168"
},
{
"category": "external",
"summary": "SUSE Bug 1264537 for CVE-2026-43168",
"url": "https://bugzilla.suse.com/1264537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43168"
},
{
"cve": "CVE-2026-43169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43169"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/buddy: Prevent BUG_ON by validating rounded allocation\n\nWhen DRM_BUDDY_CONTIGUOUS_ALLOCATION is set, the requested size is\nrounded up to the next power-of-two via roundup_pow_of_two().\nSimilarly, for non-contiguous allocations with large min_block_size,\nthe size is aligned up via round_up(). Both operations can produce a\nrounded size that exceeds mm-\u003esize, which later triggers\nBUG_ON(order \u003e mm-\u003emax_order).\n\nExample scenarios:\n- 9G CONTIGUOUS allocation on 10G VRAM memory:\n roundup_pow_of_two(9G) = 16G \u003e 10G\n- 9G allocation with 8G min_block_size on 10G VRAM memory:\n round_up(9G, 8G) = 16G \u003e 10G\n\nFix this by checking the rounded size against mm-\u003esize. For\nnon-contiguous or range allocations where size \u003e mm-\u003esize is invalid,\nreturn -EINVAL immediately. For contiguous allocations without range\nrestrictions, allow the request to fall through to the existing\n__alloc_contig_try_harder() fallback.\n\nThis ensures invalid user input returns an error or uses the fallback\npath instead of hitting BUG_ON.\n\nv2: (Matt A)\n- Add Fixes, Cc stable, and Closes tags for context",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43169",
"url": "https://www.suse.com/security/cve/CVE-2026-43169"
},
{
"category": "external",
"summary": "SUSE Bug 1264379 for CVE-2026-43169",
"url": "https://bugzilla.suse.com/1264379"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43169"
},
{
"cve": "CVE-2026-43170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43170"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: Move vbus draw to workqueue context\n\nCurrently dwc3_gadget_vbus_draw() can be called from atomic\ncontext, which in turn invokes power-supply-core APIs. And\nsome these PMIC APIs have operations that may sleep, leading\nto kernel panic.\n\nFix this by moving the vbus_draw into a workqueue context.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43170",
"url": "https://www.suse.com/security/cve/CVE-2026-43170"
},
{
"category": "external",
"summary": "SUSE Bug 1264452 for CVE-2026-43170",
"url": "https://bugzilla.suse.com/1264452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43170"
},
{
"cve": "CVE-2026-43172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43172"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: fix 22000 series SMEM parsing\n\nIf the firmware were to report three LMACs (which doesn\u0027t\nexist in hardware) then using \"fwrt-\u003esmem_cfg.lmac[2]\" is\nan overrun of the array. Reject such and use IWL_FW_CHECK\ninstead of WARN_ON in this function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43172",
"url": "https://www.suse.com/security/cve/CVE-2026-43172"
},
{
"category": "external",
"summary": "SUSE Bug 1264543 for CVE-2026-43172",
"url": "https://bugzilla.suse.com/1264543"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43172"
},
{
"cve": "CVE-2026-43180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43180"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode\n\nkaweth_set_rx_mode(), the ndo_set_rx_mode callback, calls\nnetif_stop_queue() and netif_wake_queue(). These are TX queue flow\ncontrol functions unrelated to RX multicast configuration.\n\nThe premature netif_wake_queue() can re-enable TX while tx_urb is still\nin-flight, leading to a double usb_submit_urb() on the same URB:\n\nkaweth_start_xmit() {\n netif_stop_queue();\n usb_submit_urb(kaweth-\u003etx_urb);\n}\n\nkaweth_set_rx_mode() {\n netif_stop_queue();\n netif_wake_queue(); // wakes TX queue before URB is done\n}\n\nkaweth_start_xmit() {\n netif_stop_queue();\n usb_submit_urb(kaweth-\u003etx_urb); // URB submitted while active\n}\n\nThis triggers the WARN in usb_submit_urb():\n\n \"URB submitted while active\"\n\nThis is a similar class of bug fixed in rtl8150 by\n\n- commit 958baf5eaee3 (\"net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast\").\n\nAlso kaweth_set_rx_mode() is already functionally broken, the\nreal set_rx_mode action is performed by kaweth_async_set_rx_mode(),\nwhich in turn is not a no-op only at ndo_open() time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43180",
"url": "https://www.suse.com/security/cve/CVE-2026-43180"
},
{
"category": "external",
"summary": "SUSE Bug 1265093 for CVE-2026-43180",
"url": "https://bugzilla.suse.com/1265093"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43180"
},
{
"cve": "CVE-2026-43182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43182"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ccs: Avoid possible division by zero\n\nCalculating maximum M for scaler configuration involves dividing by\nMIN_X_OUTPUT_SIZE limit register\u0027s value. Albeit the value is presumably\nnon-zero, the driver was missing the check it in fact was. Fix this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43182",
"url": "https://www.suse.com/security/cve/CVE-2026-43182"
},
{
"category": "external",
"summary": "SUSE Bug 1264340 for CVE-2026-43182",
"url": "https://bugzilla.suse.com/1264340"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43182"
},
{
"cve": "CVE-2026-43183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43183"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cx25821: Fix a resource leak in cx25821_dev_setup()\n\nAdd release_mem_region() if ioremap() fails to release the memory\nregion obtained by cx25821_get_resources().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43183",
"url": "https://www.suse.com/security/cve/CVE-2026-43183"
},
{
"category": "external",
"summary": "SUSE Bug 1264620 for CVE-2026-43183",
"url": "https://bugzilla.suse.com/1264620"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43183"
},
{
"cve": "CVE-2026-43196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43196"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: ti: pruss: Fix double free in pruss_clk_mux_setup()\n\nIn the pruss_clk_mux_setup(), the devm_add_action_or_reset() indirectly\ncalls pruss_of_free_clk_provider(), which calls of_node_put(clk_mux_np)\non the error path. However, after the devm_add_action_or_reset()\nreturns, the of_node_put(clk_mux_np) is called again, causing a double\nfree.\n\nFix by returning directly, to avoid the duplicate of_node_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43196",
"url": "https://www.suse.com/security/cve/CVE-2026-43196"
},
{
"category": "external",
"summary": "SUSE Bug 1264436 for CVE-2026-43196",
"url": "https://bugzilla.suse.com/1264436"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43196"
},
{
"cve": "CVE-2026-43200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43200"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions\n\nstruct configfs_item_operations callbacks are defined like the following:\n\n int (*allow_link)(struct config_item *src, struct config_item *target);\n void (*drop_link)(struct config_item *src, struct config_item *target);\n\nWhile pci_primary_epc_epf_link() and pci_secondary_epc_epf_link() specify\nthe parameters in the correct order, pci_primary_epc_epf_unlink() and\npci_secondary_epc_epf_unlink() specify the parameters in the wrong order,\nleading to the below kernel crash when using the unlink command in\nconfigfs:\n\n Unable to handle kernel paging request at virtual address 0000000300000857\n Mem abort info:\n ...\n pc : string+0x54/0x14c\n lr : vsnprintf+0x280/0x6e8\n ...\n string+0x54/0x14c\n vsnprintf+0x280/0x6e8\n vprintk_default+0x38/0x4c\n vprintk+0xc4/0xe0\n pci_epf_unbind+0xdc/0x108\n configfs_unlink+0xe0/0x208+0x44/0x74\n vfs_unlink+0x120/0x29c\n __arm64_sys_unlinkat+0x3c/0x90\n invoke_syscall+0x48/0x134\n do_el0_svc+0x1c/0x30prop.0+0xd0/0xf0\n\n[mani: cced stable, changed commit message as per https://lore.kernel.org/linux-pci/aV9joi3jF1R6ca02@ryzen]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43200",
"url": "https://www.suse.com/security/cve/CVE-2026-43200"
},
{
"category": "external",
"summary": "SUSE Bug 1264431 for CVE-2026-43200",
"url": "https://bugzilla.suse.com/1264431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43200"
},
{
"cve": "CVE-2026-43202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43202"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: vt8500lcdfb: fix missing dma_free_coherent()\n\nfbi-\u003efb.screen_buffer is allocated with dma_alloc_coherent() but is not\nfreed if the error path is reached.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43202",
"url": "https://www.suse.com/security/cve/CVE-2026-43202"
},
{
"category": "external",
"summary": "SUSE Bug 1264336 for CVE-2026-43202",
"url": "https://bugzilla.suse.com/1264336"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43202"
},
{
"cve": "CVE-2026-43203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\natm: fore200e: fix use-after-free in tasklets during device removal\n\nWhen the PCA-200E or SBA-200E adapter is being detached, the fore200e\nis deallocated. However, the tx_tasklet or rx_tasklet may still be running\nor pending, leading to use-after-free bug when the already freed fore200e\nis accessed again in fore200e_tx_tasklet() or fore200e_rx_tasklet().\n\nOne of the race conditions can occur as follows:\n\nCPU 0 (cleanup) | CPU 1 (tasklet)\nfore200e_pca_remove_one() | fore200e_interrupt()\n fore200e_shutdown() | tasklet_schedule()\n kfree(fore200e) | fore200e_tx_tasklet()\n | fore200e-\u003e // UAF\n\nFix this by ensuring tx_tasklet or rx_tasklet is properly canceled before\nthe fore200e is released. Add tasklet_kill() in fore200e_shutdown() to\nsynchronize with any pending or running tasklets. Moreover, since\nfore200e_reset() could prevent further interrupts or data transfers,\nthe tasklet_kill() should be placed after fore200e_reset() to prevent\nthe tasklet from being rescheduled in fore200e_interrupt(). Finally,\nit only needs to do tasklet_kill() when the fore200e state is greater\nthan or equal to FORE200E_STATE_IRQ, since tasklets are uninitialized\nin earlier states. In a word, the tasklet_kill() should be placed in\nthe FORE200E_STATE_IRQ branch within the switch...case structure.\n\nThis bug was identified through static analysis.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43203",
"url": "https://www.suse.com/security/cve/CVE-2026-43203"
},
{
"category": "external",
"summary": "SUSE Bug 1264600 for CVE-2026-43203",
"url": "https://bugzilla.suse.com/1264600"
},
{
"category": "external",
"summary": "SUSE Bug 1264602 for CVE-2026-43203",
"url": "https://bugzilla.suse.com/1264602"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-43203"
},
{
"cve": "CVE-2026-43207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43207"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-mdp: Fix error handling in probe function\n\nAdd mtk_mdp_unregister_m2m_device() on the error handling path to prevent\nresource leak.\n\nAdd check for the return value of vpu_get_plat_device() to prevent null\npointer dereference. And vpu_get_plat_device() increases the reference\ncount of the returned platform device. Add platform_device_put() to\nprevent reference leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43207",
"url": "https://www.suse.com/security/cve/CVE-2026-43207"
},
{
"category": "external",
"summary": "SUSE Bug 1264365 for CVE-2026-43207",
"url": "https://bugzilla.suse.com/1264365"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43207"
},
{
"cve": "CVE-2026-43211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43211"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix pci_slot_trylock() error handling\n\nCommit a4e772898f8b (\"PCI: Add missing bridge lock to pci_bus_lock()\")\ndelegates the bridge device\u0027s pci_dev_trylock() to pci_bus_trylock() in\npci_slot_trylock(), but it forgets to remove the corresponding\npci_dev_unlock() when pci_bus_trylock() fails.\n\nBefore a4e772898f8b, the code did:\n\n if (!pci_dev_trylock(dev)) /* \u003c- lock bridge device */\n goto unlock;\n if (dev-\u003esubordinate) {\n if (!pci_bus_trylock(dev-\u003esubordinate)) {\n pci_dev_unlock(dev); /* \u003c- unlock bridge device */\n goto unlock;\n }\n }\n\nAfter a4e772898f8b the bridge-device lock is no longer taken, but the\npci_dev_unlock(dev) on the failure path was left in place, leading to the\nbug.\n\nThis yields one of two errors:\n\n 1. A warning that the lock is being unlocked when no one holds it.\n 2. An incorrect unlock of a lock that belongs to another thread.\n\nFix it by removing the now-redundant pci_dev_unlock(dev) on the failure\npath.\n\n[Same patch later posted by Keith at\nhttps://patch.msgid.link/20260116184150.3013258-1-kbusch@meta.com]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43211",
"url": "https://www.suse.com/security/cve/CVE-2026-43211"
},
{
"category": "external",
"summary": "SUSE Bug 1264387 for CVE-2026-43211",
"url": "https://bugzilla.suse.com/1264387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43211"
},
{
"cve": "CVE-2026-43216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43216"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: Drop the lock in skb_may_tx_timestamp()\n\nskb_may_tx_timestamp() may acquire sock::sk_callback_lock. The lock must\nnot be taken in IRQ context, only softirq is okay. A few drivers receive\nthe timestamp via a dedicated interrupt and complete the TX timestamp\nfrom that handler. This will lead to a deadlock if the lock is already\nwrite-locked on the same CPU.\n\nTaking the lock can be avoided. The socket (pointed by the skb) will\nremain valid until the skb is released. The -\u003esk_socket and -\u003efile\nmember will be set to NULL once the user closes the socket which may\nhappen before the timestamp arrives.\nIf we happen to observe the pointer while the socket is closing but\nbefore the pointer is set to NULL then we may use it because both\npointer (and the file\u0027s cred member) are RCU freed.\n\nDrop the lock. Use READ_ONCE() to obtain the individual pointer. Add a\nmatching WRITE_ONCE() where the pointer are cleared.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43216",
"url": "https://www.suse.com/security/cve/CVE-2026-43216"
},
{
"category": "external",
"summary": "SUSE Bug 1264319 for CVE-2026-43216",
"url": "https://bugzilla.suse.com/1264319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43216"
},
{
"cve": "CVE-2026-43218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43218"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c/tw9903: Fix potential memory leak in tw9903_probe()\n\nIn one of the error paths in tw9903_probe(), the memory allocated in\nv4l2_ctrl_handler_init() and v4l2_ctrl_new_std() is not freed. Fix that\nby calling v4l2_ctrl_handler_free() on the handler in that error path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43218",
"url": "https://www.suse.com/security/cve/CVE-2026-43218"
},
{
"category": "external",
"summary": "SUSE Bug 1264479 for CVE-2026-43218",
"url": "https://bugzilla.suse.com/1264479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-43218"
},
{
"cve": "CVE-2026-43220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43220"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: serialize sequence allocation under concurrent TLB invalidations\n\nWith concurrent TLB invalidations, completion wait randomly gets timed out\nbecause cmd_sem_val was incremented outside the IOMMU spinlock, allowing\nCMD_COMPL_WAIT commands to be queued out of sequence and breaking the\nordering assumption in wait_on_sem().\nMove the cmd_sem_val increment under iommu-\u003elock so completion sequence\nallocation is serialized with command queuing.\nAnd remove the unnecessary return.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43220",
"url": "https://www.suse.com/security/cve/CVE-2026-43220"
},
{
"category": "external",
"summary": "SUSE Bug 1264416 for CVE-2026-43220",
"url": "https://bugzilla.suse.com/1264416"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43220"
},
{
"cve": "CVE-2026-43221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43221"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: ipmb: initialise event handler read bytes\n\nIPMB doesn\u0027t use i2c reads, but the handler needs to set a value.\nOtherwise an i2c read will return an uninitialised value from the bus\ndriver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43221",
"url": "https://www.suse.com/security/cve/CVE-2026-43221"
},
{
"category": "external",
"summary": "SUSE Bug 1264442 for CVE-2026-43221",
"url": "https://bugzilla.suse.com/1264442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43221"
},
{
"cve": "CVE-2026-43223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43223"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: pvrusb2: fix URB leak in pvr2_send_request_ex\n\nWhen pvr2_send_request_ex() submits a write URB successfully but fails to\nsubmit the read URB (e.g. returns -ENOMEM), it returns immediately without\nwaiting for the write URB to complete. Since the driver reuses the same\nURB structure, a subsequent call to pvr2_send_request_ex() attempts to\nsubmit the still-active write URB, triggering a \u0027URB submitted while\nactive\u0027 warning in usb_submit_urb().\n\nFix this by ensuring the write URB is unlinked and waited upon if the read\nURB submission fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43223",
"url": "https://www.suse.com/security/cve/CVE-2026-43223"
},
{
"category": "external",
"summary": "SUSE Bug 1264645 for CVE-2026-43223",
"url": "https://bugzilla.suse.com/1264645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43223"
},
{
"cve": "CVE-2026-43225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43225"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8723bs: fix memory leak on failure path\n\ncfg80211_inform_bss_frame() may return NULL on failure. In that case,\nthe allocated buffer \u0027buf\u0027 is not freed and the function returns early,\nleading to potential memory leak.\nFix this by ensuring that \u0027buf\u0027 is freed on both success and failure paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43225",
"url": "https://www.suse.com/security/cve/CVE-2026-43225"
},
{
"category": "external",
"summary": "SUSE Bug 1264526 for CVE-2026-43225",
"url": "https://bugzilla.suse.com/1264526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43225"
},
{
"cve": "CVE-2026-43230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43230"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: Clear reconnect pending bit\n\nWhen canceling the reconnect worker, care must be taken to reset the\nreconnect-pending bit. If the reconnect worker has not yet been\nscheduled before it is canceled, the reconnect-pending bit will stay\non forever.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43230",
"url": "https://www.suse.com/security/cve/CVE-2026-43230"
},
{
"category": "external",
"summary": "SUSE Bug 1264539 for CVE-2026-43230",
"url": "https://bugzilla.suse.com/1264539"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43230"
},
{
"cve": "CVE-2026-43231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: radio-keene: fix memory leak in error path\n\nFix a memory leak in usb_keene_probe(). The v4l2 control handler is\ninitialized and controls are added, but if v4l2_device_register() or\nvideo_register_device() fails afterward, the handler was never freed,\nleaking memory.\n\nAdd v4l2_ctrl_handler_free() call in the err_v4l2 error path to ensure\nthe control handler is properly freed for all error paths after it is\ninitialized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43231",
"url": "https://www.suse.com/security/cve/CVE-2026-43231"
},
{
"category": "external",
"summary": "SUSE Bug 1264592 for CVE-2026-43231",
"url": "https://bugzilla.suse.com/1264592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43231"
},
{
"cve": "CVE-2026-43232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43232"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets\n\nWhen the FarSync T-series card is being detached, the fst_card_info is\ndeallocated in fst_remove_one(). However, the fst_tx_task or fst_int_task\nmay still be running or pending, leading to use-after-free bugs when the\nalready freed fst_card_info is accessed in fst_process_tx_work_q() or\nfst_process_int_work_q().\n\nA typical race condition is depicted below:\n\nCPU 0 (cleanup) | CPU 1 (tasklet)\n | fst_start_xmit()\nfst_remove_one() | tasklet_schedule()\n unregister_hdlc_device()|\n | fst_process_tx_work_q() //handler\n kfree(card) //free | do_bottom_half_tx()\n | card-\u003e //use\n\nThe following KASAN trace was captured:\n\n==================================================================\n BUG: KASAN: slab-use-after-free in do_bottom_half_tx+0xb88/0xd00\n Read of size 4 at addr ffff88800aad101c by task ksoftirqd/3/32\n ...\n Call Trace:\n \u003cIRQ\u003e\n dump_stack_lvl+0x55/0x70\n print_report+0xcb/0x5d0\n ? do_bottom_half_tx+0xb88/0xd00\n kasan_report+0xb8/0xf0\n ? do_bottom_half_tx+0xb88/0xd00\n do_bottom_half_tx+0xb88/0xd00\n ? _raw_spin_lock_irqsave+0x85/0xe0\n ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n ? __pfx___hrtimer_run_queues+0x10/0x10\n fst_process_tx_work_q+0x67/0x90\n tasklet_action_common+0x1fa/0x720\n ? hrtimer_interrupt+0x31f/0x780\n handle_softirqs+0x176/0x530\n __irq_exit_rcu+0xab/0xe0\n sysvec_apic_timer_interrupt+0x70/0x80\n ...\n\n Allocated by task 41 on cpu 3 at 72.330843s:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x17/0x60\n __kasan_kmalloc+0x7f/0x90\n fst_add_one+0x1a5/0x1cd0\n local_pci_probe+0xdd/0x190\n pci_device_probe+0x341/0x480\n really_probe+0x1c6/0x6a0\n __driver_probe_device+0x248/0x310\n driver_probe_device+0x48/0x210\n __device_attach_driver+0x160/0x320\n bus_for_each_drv+0x101/0x190\n __device_attach+0x198/0x3a0\n device_initial_probe+0x78/0xa0\n pci_bus_add_device+0x81/0xc0\n pci_bus_add_devices+0x7e/0x190\n enable_slot+0x9b9/0x1130\n acpiphp_check_bridge.part.0+0x2e1/0x460\n acpiphp_hotplug_notify+0x36c/0x3c0\n acpi_device_hotplug+0x203/0xb10\n acpi_hotplug_work_fn+0x59/0x80\n ...\n\n Freed by task 41 on cpu 1 at 75.138639s:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x17/0x60\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x43/0x70\n kfree+0x135/0x410\n fst_remove_one+0x2ca/0x540\n pci_device_remove+0xa6/0x1d0\n device_release_driver_internal+0x364/0x530\n pci_stop_bus_device+0x105/0x150\n pci_stop_and_remove_bus_device+0xd/0x20\n disable_slot+0x116/0x260\n acpiphp_disable_and_eject_slot+0x4b/0x190\n acpiphp_hotplug_notify+0x230/0x3c0\n acpi_device_hotplug+0x203/0xb10\n acpi_hotplug_work_fn+0x59/0x80\n ...\n\n The buggy address belongs to the object at ffff88800aad1000\n which belongs to the cache kmalloc-1k of size 1024\n The buggy address is located 28 bytes inside of\n freed 1024-byte region\n The buggy address belongs to the physical page:\n page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xaad0\n head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0\n flags: 0x100000000000040(head|node=0|zone=1)\n page_type: f5(slab)\n raw: 0100000000000040 ffff888007042dc0 dead000000000122 0000000000000000\n raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000\n head: 0100000000000040 ffff888007042dc0 dead000000000122 0000000000000000\n head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000\n head: 0100000000000003 ffffea00002ab401 00000000ffffffff 00000000ffffffff\n head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n ffff88800aad0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n ffff88800aad0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n \u003effff88800aad1000: fa fb\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43232",
"url": "https://www.suse.com/security/cve/CVE-2026-43232"
},
{
"category": "external",
"summary": "SUSE Bug 1264633 for CVE-2026-43232",
"url": "https://bugzilla.suse.com/1264633"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43232"
},
{
"cve": "CVE-2026-43236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43236"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release\n\nThe atmel_hlcdc_plane_atomic_duplicate_state() callback was copying\nthe atmel_hlcdc_plane state structure without properly duplicating the\ndrm_plane_state. In particular, state-\u003ecommit remained set to the old\nstate commit, which can lead to a use-after-free in the next\ndrm_atomic_commit() call.\n\nFix this by calling\n__drm_atomic_helper_duplicate_plane_state(), which correctly clones\nthe base drm_plane_state (including the -\u003ecommit pointer).\n\nIt has been seen when closing and re-opening the device node while\nanother DRM client (e.g. fbdev) is still attached:\n\n=============================================================================\nBUG kmalloc-64 (Not tainted): Poison overwritten\n-----------------------------------------------------------------------------\n\n0xc611b344-0xc611b344 @offset=836. First byte 0x6a instead of 0x6b\nFIX kmalloc-64: Restoring Poison 0xc611b344-0xc611b344=0x6b\nAllocated in drm_atomic_helper_setup_commit+0x1e8/0x7bc age=178 cpu=0\npid=29\n drm_atomic_helper_setup_commit+0x1e8/0x7bc\n drm_atomic_helper_commit+0x3c/0x15c\n drm_atomic_commit+0xc0/0xf4\n drm_framebuffer_remove+0x4cc/0x5a8\n drm_mode_rmfb_work_fn+0x6c/0x80\n process_one_work+0x12c/0x2cc\n worker_thread+0x2a8/0x400\n kthread+0xc0/0xdc\n ret_from_fork+0x14/0x28\nFreed in drm_atomic_helper_commit_hw_done+0x100/0x150 age=8 cpu=0\npid=169\n drm_atomic_helper_commit_hw_done+0x100/0x150\n drm_atomic_helper_commit_tail+0x64/0x8c\n commit_tail+0x168/0x18c\n drm_atomic_helper_commit+0x138/0x15c\n drm_atomic_commit+0xc0/0xf4\n drm_atomic_helper_set_config+0x84/0xb8\n drm_mode_setcrtc+0x32c/0x810\n drm_ioctl+0x20c/0x488\n sys_ioctl+0x14c/0xc20\n ret_fast_syscall+0x0/0x54\nSlab 0xef8bc360 objects=21 used=16 fp=0xc611b7c0\nflags=0x200(workingset|zone=0)\nObject 0xc611b340 @offset=832 fp=0xc611b7c0",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43236",
"url": "https://www.suse.com/security/cve/CVE-2026-43236"
},
{
"category": "external",
"summary": "SUSE Bug 1264538 for CVE-2026-43236",
"url": "https://bugzilla.suse.com/1264538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43236"
},
{
"cve": "CVE-2026-43240",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43240"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kexec: add a sanity check on previous kernel\u0027s ima kexec buffer\n\nWhen the second-stage kernel is booted via kexec with a limiting command\nline such as \"mem=\u003csize\u003e\", the physical range that contains the carried\nover IMA measurement list may fall outside the truncated RAM leading to a\nkernel panic.\n\n BUG: unable to handle page fault for address: ffff97793ff47000\n RIP: ima_restore_measurement_list+0xdc/0x45a\n #PF: error_code(0x0000) - not-present page\n\nOther architectures already validate the range with page_is_ram(), as done\nin commit cbf9c4b9617b (\"of: check previous kernel\u0027s ima-kexec-buffer\nagainst memory bounds\") do a similar check on x86.\n\nWithout carrying the measurement list across kexec, the attestation\nwould fail.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43240",
"url": "https://www.suse.com/security/cve/CVE-2026-43240"
},
{
"category": "external",
"summary": "SUSE Bug 1264386 for CVE-2026-43240",
"url": "https://bugzilla.suse.com/1264386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43240"
},
{
"cve": "CVE-2026-43241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43241"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access\n\nNumber of MW LUTs depends on NTB configuration and can be set to MAX_MWS,\nThis patch protects against invalid index out of bounds access to mw_sizes\nWhen invalid access print message to user that configuration is not valid.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43241",
"url": "https://www.suse.com/security/cve/CVE-2026-43241"
},
{
"category": "external",
"summary": "SUSE Bug 1264844 for CVE-2026-43241",
"url": "https://bugzilla.suse.com/1264844"
},
{
"category": "external",
"summary": "SUSE Bug 1264845 for CVE-2026-43241",
"url": "https://bugzilla.suse.com/1264845"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-43241"
},
{
"cve": "CVE-2026-43242",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43242"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: ti: k3-socinfo: Fix regmap leak on probe failure\n\nThe mmio regmap allocated during probe is never freed.\n\nSwitch to using the device managed allocator so that the regmap is\nreleased on probe failures (e.g. probe deferral) and on driver unbind.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43242",
"url": "https://www.suse.com/security/cve/CVE-2026-43242"
},
{
"category": "external",
"summary": "SUSE Bug 1264338 for CVE-2026-43242",
"url": "https://bugzilla.suse.com/1264338"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43242"
},
{
"cve": "CVE-2026-43244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43244"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkcm: fix zero-frag skb in frag_list on partial sendmsg error\n\nSyzkaller reported a warning in kcm_write_msgs() when processing a\nmessage with a zero-fragment skb in the frag_list.\n\nWhen kcm_sendmsg() fills MAX_SKB_FRAGS fragments in the current skb,\nit allocates a new skb (tskb) and links it into the frag_list before\ncopying data. If the copy subsequently fails (e.g. -EFAULT from\nuser memory), tskb remains in the frag_list with zero fragments:\n\n head skb (msg being assembled, NOT yet in sk_write_queue)\n +-----------+\n | frags[17] | (MAX_SKB_FRAGS, all filled with data)\n | frag_list-+--\u003e tskb\n +-----------+ +----------+\n | frags[0] | (empty! copy failed before filling)\n +----------+\n\nFor SOCK_SEQPACKET with partial data already copied, the error path\nsaves this message via partial_message for later completion. For\nSOCK_SEQPACKET, sock_write_iter() automatically sets MSG_EOR, so a\nsubsequent zero-length write(fd, NULL, 0) completes the message and\nqueues it to sk_write_queue. kcm_write_msgs() then walks the\nfrag_list and hits:\n\n WARN_ON(!skb_shinfo(skb)-\u003enr_frags)\n\nTCP has a similar pattern where skbs are enqueued before data copy\nand cleaned up on failure via tcp_remove_empty_skb(). KCM was\nmissing the equivalent cleanup.\n\nFix this by tracking the predecessor skb (frag_prev) when allocating\na new frag_list entry. On error, if the tail skb has zero frags,\nuse frag_prev to unlink and free it in O(1) without walking the\nsingly-linked frag_list. frag_prev is safe to dereference because\nthe entire message chain is only held locally (or in kcm-\u003eseq_skb)\nand is not added to sk_write_queue until MSG_EOR, so the send path\ncannot free it underneath us.\n\nAlso change the WARN_ON to WARN_ON_ONCE to avoid flooding the log\nif the condition is somehow hit repeatedly.\n\nThere are currently no KCM selftests in the kernel tree; a simple\nreproducer is available at [1].\n\n[1] https://gist.github.com/mrpre/a94d431c757e8d6f168f4dd1a3749daa",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43244",
"url": "https://www.suse.com/security/cve/CVE-2026-43244"
},
{
"category": "external",
"summary": "SUSE Bug 1264321 for CVE-2026-43244",
"url": "https://bugzilla.suse.com/1264321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43244"
},
{
"cve": "CVE-2026-43246",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43246"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c/tw9906: Fix potential memory leak in tw9906_probe()\n\nIn one of the error paths in tw9906_probe(), the memory allocated in\nv4l2_ctrl_handler_init() and v4l2_ctrl_new_std() is not freed. Fix that\nby calling v4l2_ctrl_handler_free() on the handler in that error path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43246",
"url": "https://www.suse.com/security/cve/CVE-2026-43246"
},
{
"category": "external",
"summary": "SUSE Bug 1264322 for CVE-2026-43246",
"url": "https://bugzilla.suse.com/1264322"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43246"
},
{
"cve": "CVE-2026-43251",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43251"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: prodikeys: Check presence of pm-\u003einput_ep82\n\nFake USB devices can send their own report descriptors for which the\ninput_mapping() hook does not get called. In this case, pm-\u003einput_ep82 stays\nNULL, which leads to a crash later.\n\nThis does not happen with the real device, but can be provoked by imposing as\none.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43251",
"url": "https://www.suse.com/security/cve/CVE-2026-43251"
},
{
"category": "external",
"summary": "SUSE Bug 1264423 for CVE-2026-43251",
"url": "https://bugzilla.suse.com/1264423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43251"
},
{
"cve": "CVE-2026-43255",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43255"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: libertas: fix WARNING in usb_tx_block\n\nThe function usb_tx_block() submits cardp-\u003etx_urb without ensuring that\nany previous transmission on this URB has completed. If a second call\noccurs while the URB is still active (e.g. during rapid firmware loading),\nusb_submit_urb() detects the active state and triggers a warning:\n\u0027URB submitted while active\u0027.\n\nFix this by enforcing serialization: call usb_kill_urb() before\nsubmitting the new request. This ensures the URB is idle and safe to reuse.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43255",
"url": "https://www.suse.com/security/cve/CVE-2026-43255"
},
{
"category": "external",
"summary": "SUSE Bug 1264473 for CVE-2026-43255",
"url": "https://bugzilla.suse.com/1264473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43255"
},
{
"cve": "CVE-2026-43256",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43256"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()\n\nvfe_isr() iterates using MSM_VFE_IMAGE_MASTERS_NUM(7) as the loop\nbound and passes the index to vfe_isr_reg_update(). However,\nvfe-\u003eline[] array is defined with VFE_LINE_NUM_MAX(4):\n\n struct vfe_line line[VFE_LINE_NUM_MAX];\n\nWhen index is 4, 5, 6, the access to vfe-\u003eline[line_id] exceeds\nthe array bounds and resulting in out-of-bounds memory access.\n\nFix this by using separate loops for output lines and write masters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43256",
"url": "https://www.suse.com/security/cve/CVE-2026-43256"
},
{
"category": "external",
"summary": "SUSE Bug 1264425 for CVE-2026-43256",
"url": "https://bugzilla.suse.com/1264425"
},
{
"category": "external",
"summary": "SUSE Bug 1264439 for CVE-2026-43256",
"url": "https://bugzilla.suse.com/1264439"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-43256"
},
{
"cve": "CVE-2026-43257",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43257"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cx88: Add missing unmap in snd_cx88_hw_params()\n\nIn error path, add cx88_alsa_dma_unmap() to release\nresource acquired by cx88_alsa_dma_map().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43257",
"url": "https://www.suse.com/security/cve/CVE-2026-43257"
},
{
"category": "external",
"summary": "SUSE Bug 1264296 for CVE-2026-43257",
"url": "https://bugzilla.suse.com/1264296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43257"
},
{
"cve": "CVE-2026-43262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43262"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: fiemap page fault fix\n\nIn gfs2_fiemap(), we are calling iomap_fiemap() while holding the inode\nglock. This can lead to recursive glock taking if the fiemap buffer is\nmemory mapped to the same inode and accessing it triggers a page fault.\n\nFix by disabling page faults for iomap_fiemap() and faulting in the\nbuffer by hand if necessary.\n\nFixes xfstest generic/742.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43262",
"url": "https://www.suse.com/security/cve/CVE-2026-43262"
},
{
"category": "external",
"summary": "SUSE Bug 1264422 for CVE-2026-43262",
"url": "https://bugzilla.suse.com/1264422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43262"
},
{
"cve": "CVE-2026-43264",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43264"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: of: display_timing: fix refcount leak in of_get_display_timings()\n\nof_parse_phandle() returns a device_node with refcount incremented,\nwhich is stored in \u0027entry\u0027 and then copied to \u0027native_mode\u0027. When the\nerror paths at lines 184 or 192 jump to \u0027entryfail\u0027, native_mode\u0027s\nrefcount is not decremented, causing a refcount leak.\n\nFix this by changing the goto target from \u0027entryfail\u0027 to \u0027timingfail\u0027,\nwhich properly calls of_node_put(native_mode) before cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43264",
"url": "https://www.suse.com/security/cve/CVE-2026-43264"
},
{
"category": "external",
"summary": "SUSE Bug 1264424 for CVE-2026-43264",
"url": "https://bugzilla.suse.com/1264424"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43264"
},
{
"cve": "CVE-2026-43266",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43266"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEFI/CPER: don\u0027t go past the ARM processor CPER record buffer\n\nThere\u0027s a logic inside GHES/CPER to detect if the section_length\nis too small, but it doesn\u0027t detect if it is too big.\n\nCurrently, if the firmware receives an ARM processor CPER record\nstating that a section length is big, kernel will blindly trust\nsection_length, producing a very long dump. For instance, a 67\nbytes record with ERR_INFO_NUM set 46198 and section length\nset to 854918320 would dump a lot of data going a way past the\nfirmware memory-mapped area.\n\nFix it by adding a logic to prevent it to go past the buffer\nif ERR_INFO_NUM is too big, making it report instead:\n\n\t[Hardware Error]: Hardware error from APEI Generic Hardware Error Source: 1\n\t[Hardware Error]: event severity: recoverable\n\t[Hardware Error]: Error 0, type: recoverable\n\t[Hardware Error]: section_type: ARM processor error\n\t[Hardware Error]: MIDR: 0xff304b2f8476870a\n\t[Hardware Error]: section length: 854918320, CPER size: 67\n\t[Hardware Error]: section length is too big\n\t[Hardware Error]: firmware-generated error record is incorrect\n\t[Hardware Error]: ERR_INFO_NUM is 46198\n\n[ rjw: Subject and changelog tweaks ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43266",
"url": "https://www.suse.com/security/cve/CVE-2026-43266"
},
{
"category": "external",
"summary": "SUSE Bug 1264418 for CVE-2026-43266",
"url": "https://bugzilla.suse.com/1264418"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43266"
},
{
"cve": "CVE-2026-43269",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43269"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback\n\nAfter several commits, the slab memory increases. Some drm_crtc_commit\nobjects are not freed. The atomic_destroy_state callback only put the\nframebuffer. Use the __drm_atomic_helper_plane_destroy_state() function\nto put all the objects that are no longer needed.\n\nIt has been seen after hours of usage of a graphics application or using\nkmemleak:\n\nunreferenced object 0xc63a6580 (size 64):\n comm \"egt_basic\", pid 171, jiffies 4294940784\n hex dump (first 32 bytes):\n 40 50 34 c5 01 00 00 00 ff ff ff ff 8c 65 3a c6 @P4..........e:.\n 8c 65 3a c6 ff ff ff ff 98 65 3a c6 98 65 3a c6 .e:......e:..e:.\n backtrace (crc c25aa925):\n kmemleak_alloc+0x34/0x3c\n __kmalloc_cache_noprof+0x150/0x1a4\n drm_atomic_helper_setup_commit+0x1e8/0x7bc\n drm_atomic_helper_commit+0x3c/0x15c\n drm_atomic_commit+0xc0/0xf4\n drm_atomic_helper_set_config+0x84/0xb8\n drm_mode_setcrtc+0x32c/0x810\n drm_ioctl+0x20c/0x488\n sys_ioctl+0x14c/0xc20\n ret_fast_syscall+0x0/0x54",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43269",
"url": "https://www.suse.com/security/cve/CVE-2026-43269"
},
{
"category": "external",
"summary": "SUSE Bug 1264590 for CVE-2026-43269",
"url": "https://bugzilla.suse.com/1264590"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-43269"
},
{
"cve": "CVE-2026-43270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43270"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()\n\nIn mtk_mdp_probe(), vpu_get_plat_device() increases the reference\ncount of the returned platform device. Add platform_device_put()\nto prevent reference leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43270",
"url": "https://www.suse.com/security/cve/CVE-2026-43270"
},
{
"category": "external",
"summary": "SUSE Bug 1264313 for CVE-2026-43270",
"url": "https://bugzilla.suse.com/1264313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43270"
},
{
"cve": "CVE-2026-43276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43276"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: Fix double destroy_workqueue on service rescan PCI path\n\nWhile testing corner cases in the driver, a use-after-free crash\nwas found on the service rescan PCI path.\n\nWhen mana_serv_reset() calls mana_gd_suspend(), mana_gd_cleanup()\ndestroys gc-\u003eservice_wq. If the subsequent mana_gd_resume() fails\nwith -ETIMEDOUT or -EPROTO, the code falls through to\nmana_serv_rescan() which triggers pci_stop_and_remove_bus_device().\nThis invokes the PCI .remove callback (mana_gd_remove), which calls\nmana_gd_cleanup() a second time, attempting to destroy the already-\nfreed workqueue. Fix this by NULL-checking gc-\u003eservice_wq in\nmana_gd_cleanup() and setting it to NULL after destruction.\n\nCall stack of issue for reference:\n[Sat Feb 21 18:53:48 2026] Call Trace:\n[Sat Feb 21 18:53:48 2026] \u003cTASK\u003e\n[Sat Feb 21 18:53:48 2026] mana_gd_cleanup+0x33/0x70 [mana]\n[Sat Feb 21 18:53:48 2026] mana_gd_remove+0x3a/0xc0 [mana]\n[Sat Feb 21 18:53:48 2026] pci_device_remove+0x41/0xb0\n[Sat Feb 21 18:53:48 2026] device_remove+0x46/0x70\n[Sat Feb 21 18:53:48 2026] device_release_driver_internal+0x1e3/0x250\n[Sat Feb 21 18:53:48 2026] device_release_driver+0x12/0x20\n[Sat Feb 21 18:53:48 2026] pci_stop_bus_device+0x6a/0x90\n[Sat Feb 21 18:53:48 2026] pci_stop_and_remove_bus_device+0x13/0x30\n[Sat Feb 21 18:53:48 2026] mana_do_service+0x180/0x290 [mana]\n[Sat Feb 21 18:53:48 2026] mana_serv_func+0x24/0x50 [mana]\n[Sat Feb 21 18:53:48 2026] process_one_work+0x190/0x3d0\n[Sat Feb 21 18:53:48 2026] worker_thread+0x16e/0x2e0\n[Sat Feb 21 18:53:48 2026] kthread+0xf7/0x130\n[Sat Feb 21 18:53:48 2026] ? __pfx_worker_thread+0x10/0x10\n[Sat Feb 21 18:53:48 2026] ? __pfx_kthread+0x10/0x10\n[Sat Feb 21 18:53:48 2026] ret_from_fork+0x269/0x350\n[Sat Feb 21 18:53:48 2026] ? __pfx_kthread+0x10/0x10\n[Sat Feb 21 18:53:48 2026] ret_from_fork_asm+0x1a/0x30\n[Sat Feb 21 18:53:48 2026] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43276",
"url": "https://www.suse.com/security/cve/CVE-2026-43276"
},
{
"category": "external",
"summary": "SUSE Bug 1264558 for CVE-2026-43276",
"url": "https://bugzilla.suse.com/1264558"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43276"
},
{
"cve": "CVE-2026-43277",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43277"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nAPEI/GHES: ensure that won\u0027t go past CPER allocated record\n\nThe logic at ghes_new() prevents allocating too large records, by\nchecking if they\u0027re bigger than GHES_ESTATUS_MAX_SIZE (currently, 64KB).\nYet, the allocation is done with the actual number of pages from the\nCPER bios table location, which can be smaller.\n\nYet, a bad firmware could send data with a different size, which might\nbe bigger than the allocated memory, causing an OOPS:\n\n Unable to handle kernel paging request at virtual address fff00000f9b40000\n Mem abort info:\n ESR = 0x0000000096000007\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x07: level 3 translation fault\n Data abort info:\n ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000\n CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n swapper pgtable: 4k pages, 52-bit VAs, pgdp=000000008ba16000\n [fff00000f9b40000] pgd=180000013ffff403, p4d=180000013fffe403, pud=180000013f85b403, pmd=180000013f68d403, pte=0000000000000000\n Internal error: Oops: 0000000096000007 [#1] SMP\n Modules linked in:\n CPU: 0 UID: 0 PID: 303 Comm: kworker/0:1 Not tainted 6.19.0-rc1-00002-gda407d200220 #34 PREEMPT\n Hardware name: QEMU QEMU Virtual Machine, BIOS unknown 02/02/2022\n Workqueue: kacpi_notify acpi_os_execute_deferred\n pstate: 214020c5 (nzCv daIF +PAN -UAO -TCO +DIT -SSBS BTYPE=--)\n pc : hex_dump_to_buffer+0x30c/0x4a0\n lr : hex_dump_to_buffer+0x328/0x4a0\n sp : ffff800080e13880\n x29: ffff800080e13880 x28: ffffac9aba86f6a8 x27: 0000000000000083\n x26: fff00000f9b3fffc x25: 0000000000000004 x24: 0000000000000004\n x23: ffff800080e13905 x22: 0000000000000010 x21: 0000000000000083\n x20: 0000000000000001 x19: 0000000000000008 x18: 0000000000000010\n x17: 0000000000000001 x16: 00000007c7f20fec x15: 0000000000000020\n x14: 0000000000000008 x13: 0000000000081020 x12: 0000000000000008\n x11: ffff800080e13905 x10: ffff800080e13988 x9 : 0000000000000000\n x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000020\n x5 : 0000000000000030 x4 : 00000000fffffffe x3 : 0000000000000000\n x2 : ffffac9aba78c1c8 x1 : ffffac9aba76d0a8 x0 : 0000000000000008\n Call trace:\n hex_dump_to_buffer+0x30c/0x4a0 (P)\n print_hex_dump+0xac/0x170\n cper_estatus_print_section+0x90c/0x968\n cper_estatus_print+0xf0/0x158\n __ghes_print_estatus+0xa0/0x148\n ghes_proc+0x1bc/0x220\n ghes_notify_hed+0x5c/0xb8\n notifier_call_chain+0x78/0x148\n blocking_notifier_call_chain+0x4c/0x80\n acpi_hed_notify+0x28/0x40\n acpi_ev_notify_dispatch+0x50/0x80\n acpi_os_execute_deferred+0x24/0x48\n process_one_work+0x15c/0x3b0\n worker_thread+0x2d0/0x400\n kthread+0x148/0x228\n ret_from_fork+0x10/0x20\n Code: 6b14033f 540001ad a94707e2 f100029f (b8747b44)\n ---[ end trace 0000000000000000 ]---\n\nPrevent that by taking the actual allocated are into account when\nchecking for CPER length.\n\n[ rjw: Subject tweaks ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43277",
"url": "https://www.suse.com/security/cve/CVE-2026-43277"
},
{
"category": "external",
"summary": "SUSE Bug 1264594 for CVE-2026-43277",
"url": "https://bugzilla.suse.com/1264594"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43277"
},
{
"cve": "CVE-2026-43279",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43279"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Add sanity check for OOB writes at silencing\n\nAt silencing the playback URB packets in the implicit fb mode before\nthe actual playback, we blindly assume that the received packets fit\nwith the buffer size. But when the setup in the capture stream\ndiffers from the playback stream (e.g. due to the USB core limitation\nof max packet size), such an inconsistency may lead to OOB writes to\nthe buffer, resulting in a crash.\n\nFor addressing it, add a sanity check of the transfer buffer size at\nprepare_silent_urb(), and stop the data copy if the received data\noverflows. Also, report back the transfer error properly from there,\ntoo.\n\nNote that this doesn\u0027t fix the root cause of the playback error\nitself, but this merely covers the kernel Oops.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43279",
"url": "https://www.suse.com/security/cve/CVE-2026-43279"
},
{
"category": "external",
"summary": "SUSE Bug 1264618 for CVE-2026-43279",
"url": "https://bugzilla.suse.com/1264618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43279"
},
{
"cve": "CVE-2026-43281",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43281"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()\n\nAlthough it is guided that `#mbox-cells` must be at least 1, there are\nmany instances of `#mbox-cells = \u003c0\u003e;` in the device tree. If that is\nthe case and the corresponding mailbox controller does not provide\n`fw_xlate` and of_xlate` function pointers, `fw_mbox_index_xlate()` will\nbe used by default and out-of-bounds accesses could occur due to lack of\nbounds check in that function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43281",
"url": "https://www.suse.com/security/cve/CVE-2026-43281"
},
{
"category": "external",
"summary": "SUSE Bug 1264534 for CVE-2026-43281",
"url": "https://bugzilla.suse.com/1264534"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43281"
},
{
"cve": "CVE-2026-43287",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43287"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: Account property blob allocations to memcg\n\nDRM_IOCTL_MODE_CREATEPROPBLOB allows userspace to allocate arbitrary-sized\nproperty blobs backed by kernel memory.\n\nCurrently, the blob data allocation is not accounted to the allocating\nprocess\u0027s memory cgroup, allowing unprivileged users to trigger unbounded\nkernel memory consumption and potentially cause system-wide OOM.\n\nMark the property blob data allocation with GFP_KERNEL_ACCOUNT so that the memory\nis properly charged to the caller\u0027s memcg. This ensures existing cgroup\nmemory limits apply and prevents uncontrolled kernel memory growth without\nintroducing additional policy or per-file limits.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43287",
"url": "https://www.suse.com/security/cve/CVE-2026-43287"
},
{
"category": "external",
"summary": "SUSE Bug 1265037 for CVE-2026-43287",
"url": "https://bugzilla.suse.com/1265037"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43287"
},
{
"cve": "CVE-2026-43291",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43291"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: nfc: nci: Fix parameter validation for packet data\n\nSince commit 9c328f54741b (\"net: nfc: nci: Add parameter validation for\npacket data\") communication with nci nfc chips is not working any more.\n\nThe mentioned commit tries to fix access of uninitialized data, but\nfailed to understand that in some cases the data packet is of variable\nlength and can therefore not be compared to the maximum packet length\ngiven by the sizeof(struct).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43291",
"url": "https://www.suse.com/security/cve/CVE-2026-43291"
},
{
"category": "external",
"summary": "SUSE Bug 1264819 for CVE-2026-43291",
"url": "https://bugzilla.suse.com/1264819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43291"
},
{
"cve": "CVE-2026-43295",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43295"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()\n\nWhen idtab allocation fails, net is not registered with rio_add_net() yet,\nso kfree(net) is sufficient to release the memory. Set mport-\u003enet to NULL\nto avoid dangling pointer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43295",
"url": "https://www.suse.com/security/cve/CVE-2026-43295"
},
{
"category": "external",
"summary": "SUSE Bug 1265100 for CVE-2026-43295",
"url": "https://bugzilla.suse.com/1265100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43295"
},
{
"cve": "CVE-2026-43302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43302"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/v3d: Set DMA segment size to avoid debug warnings\n\nWhen using V3D rendering with CONFIG_DMA_API_DEBUG enabled, the\nkernel occasionally reports a segment size mismatch. This is because\n\u0027max_seg_size\u0027 is not set. The kernel defaults to 64K. setting\n\u0027max_seg_size\u0027 to the maximum will prevent \u0027debug_dma_map_sg()\u0027\nfrom complaining about the over-mapping of the V3D segment length.\n\nDMA-API: v3d 1002000000.v3d: mapping sg segment longer than device\n claims to support [len=8290304] [max=65536]\nWARNING: CPU: 0 PID: 493 at kernel/dma/debug.c:1179 debug_dma_map_sg+0x330/0x388\nCPU: 0 UID: 0 PID: 493 Comm: Xorg Not tainted 6.12.53-yocto-standard #1\nHardware name: Raspberry Pi 5 Model B Rev 1.0 (DT)\npstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : debug_dma_map_sg+0x330/0x388\nlr : debug_dma_map_sg+0x330/0x388\nsp : ffff8000829a3ac0\nx29: ffff8000829a3ac0 x28: 0000000000000001 x27: ffff8000813fe000\nx26: ffffc1ffc0000000 x25: ffff00010fdeb760 x24: 0000000000000000\nx23: ffff8000816a9bf0 x22: 0000000000000001 x21: 0000000000000002\nx20: 0000000000000002 x19: ffff00010185e810 x18: ffffffffffffffff\nx17: 69766564206e6168 x16: 74207265676e6f6c x15: 20746e656d676573\nx14: 20677320676e6970 x13: 5d34303334393134 x12: 0000000000000000\nx11: 00000000000000c0 x10: 00000000000009c0 x9 : ffff8000800e0b7c\nx8 : ffff00010a315ca0 x7 : ffff8000816a5110 x6 : 0000000000000001\nx5 : 000000000000002b x4 : 0000000000000002 x3 : 0000000000000008\nx2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00010a315280\nCall trace:\n debug_dma_map_sg+0x330/0x388\n __dma_map_sg_attrs+0xc0/0x278\n dma_map_sgtable+0x30/0x58\n drm_gem_shmem_get_pages_sgt+0xb4/0x140\n v3d_bo_create_finish+0x28/0x130 [v3d]\n v3d_create_bo_ioctl+0x54/0x180 [v3d]\n drm_ioctl_kernel+0xc8/0x140\n drm_ioctl+0x2d4/0x4d8",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43302",
"url": "https://www.suse.com/security/cve/CVE-2026-43302"
},
{
"category": "external",
"summary": "SUSE Bug 1265102 for CVE-2026-43302",
"url": "https://bugzilla.suse.com/1265102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43302"
},
{
"cve": "CVE-2026-43308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43308"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: don\u0027t BUG() on unexpected delayed ref type in run_one_delayed_ref()\n\nThere is no need to BUG(), we can just return an error and log an error\nmessage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43308",
"url": "https://www.suse.com/security/cve/CVE-2026-43308"
},
{
"category": "external",
"summary": "SUSE Bug 1264712 for CVE-2026-43308",
"url": "https://bugzilla.suse.com/1264712"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43308"
},
{
"cve": "CVE-2026-43309",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43309"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd raid: fix hang when stopping arrays with metadata through dm-raid\n\nWhen using device-mapper\u0027s dm-raid target, stopping a RAID array can cause\nthe system to hang under specific conditions.\n\nThis occurs when:\n\n- A dm-raid managed device tree is suspended from top to bottom\n (the top-level RAID device is suspended first, followed by its\n underlying metadata and data devices)\n\n- The top-level RAID device is then removed\n\nRemoving the top-level device triggers a hang in the following sequence:\nthe dm-raid destructor calls md_stop(), which tries to flush the\nwrite-intent bitmap by writing to the metadata sub-devices. However, these\ndevices are already suspended, making them unable to complete the write-intent\noperations and causing an indefinite block.\n\nFix:\n\n- Prevent bitmap flushing when md_stop() is called from dm-raid\ndestructor context\n and avoid a quiescing/unquescing cycle which could also cause I/O\n\n- Still allow write-intent bitmap flushing when called from dm-raid\nsuspend context\n\nThis ensures that RAID array teardown can complete successfully even when the\nunderlying devices are in a suspended state.\n\nThis second patch uses md_is_rdwr() to distinguish between suspend and\ndestructor paths as elaborated on above.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43309",
"url": "https://www.suse.com/security/cve/CVE-2026-43309"
},
{
"category": "external",
"summary": "SUSE Bug 1264827 for CVE-2026-43309",
"url": "https://bugzilla.suse.com/1264827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43309"
},
{
"cve": "CVE-2026-43312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43312"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: ov5647: Initialize subdev before controls\n\nIn ov5647_init_controls() we call v4l2_get_subdevdata, but it is\ninitialized by v4l2_i2c_subdev_init() in the probe, which currently\nhappens after init_controls(). This can result in a segfault if the\nerror condition is hit, and we try to access i2c_client, so fix the\norder.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43312",
"url": "https://www.suse.com/security/cve/CVE-2026-43312"
},
{
"category": "external",
"summary": "SUSE Bug 1265101 for CVE-2026-43312",
"url": "https://bugzilla.suse.com/1265101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43312"
},
{
"cve": "CVE-2026-43313",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43313"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()\n\nIn acpi_processor_errata_piix4(), the pointer dev is first assigned an IDE\ndevice and then reassigned an ISA device:\n\n dev = pci_get_subsys(..., PCI_DEVICE_ID_INTEL_82371AB, ...);\n dev = pci_get_subsys(..., PCI_DEVICE_ID_INTEL_82371AB_0, ...);\n\nIf the first lookup succeeds but the second fails, dev becomes NULL. This\nleads to a potential null-pointer dereference when dev_dbg() is called:\n\n if (errata.piix4.bmisx)\n dev_dbg(\u0026dev-\u003edev, ...);\n\nTo prevent this, use two temporary pointers and retrieve each device\nindependently, avoiding overwriting dev with a possible NULL value.\n\n[ rjw: Subject adjustment, added an empty code line ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43313",
"url": "https://www.suse.com/security/cve/CVE-2026-43313"
},
{
"category": "external",
"summary": "SUSE Bug 1264821 for CVE-2026-43313",
"url": "https://bugzilla.suse.com/1264821"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43313"
},
{
"cve": "CVE-2026-43316",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43316"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: solo6x10: Check for out of bounds chip_id\n\nClang with CONFIG_UBSAN_SHIFT=y noticed a condition where a signed type\n(literal \"1\" is an \"int\") could end up being shifted beyond 32 bits,\nso instrumentation was added (and due to the double is_tw286x() call\nseen via inlining), Clang decides the second one must now be undefined\nbehavior and elides the rest of the function[1]. This is a known problem\nwith Clang (that is still being worked on), but we can avoid the entire\nproblem by actually checking the existing max chip ID, and now there is\nno runtime instrumentation added at all since everything is known to be\nwithin bounds.\n\nAdditionally use an unsigned value for the shift to remove the\ninstrumentation even without the explicit bounds checking.\n\n[hverkuil: fix checkpatch warning for is_tw286x]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43316",
"url": "https://www.suse.com/security/cve/CVE-2026-43316"
},
{
"category": "external",
"summary": "SUSE Bug 1264826 for CVE-2026-43316",
"url": "https://bugzilla.suse.com/1264826"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43316"
},
{
"cve": "CVE-2026-43318",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43318"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify\n\nInvalidating a dmabuf will impact other users of the shared BO.\nIn the scenario where process A moves the BO, it needs to inform\nprocess B about the move and process B will need to update its\npage table.\n\nThe commit fixes a synchronisation bug caused by the use of the\nticket: it made amdgpu_vm_handle_moved behave as if updating\nthe page table immediately was correct but in this case it\u0027s not.\n\nAn example is the following scenario, with 2 GPUs and glxgears\nrunning on GPU0 and Xorg running on GPU1, on a system where P2P\nPCI isn\u0027t supported:\n\nglxgears:\n export linear buffer from GPU0 and import using GPU1\n submit frame rendering to GPU0\n submit tiled-\u003elinear blit\nXorg:\n copy of linear buffer\n\nThe sequence of jobs would be:\n drm_sched_job_run # GPU0, frame rendering\n drm_sched_job_queue # GPU0, blit\n drm_sched_job_done # GPU0, frame rendering\n drm_sched_job_run # GPU0, blit\n move linear buffer for GPU1 access #\n amdgpu_dma_buf_move_notify -\u003e update pt # GPU0\n\nIt this point the blit job on GPU0 is still running and would\nlikely produce a page fault.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43318",
"url": "https://www.suse.com/security/cve/CVE-2026-43318"
},
{
"category": "external",
"summary": "SUSE Bug 1264991 for CVE-2026-43318",
"url": "https://bugzilla.suse.com/1264991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43318"
},
{
"cve": "CVE-2026-43324",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43324"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: dummy-hcd: Fix interrupt synchronization error\n\nThis fixes an error in synchronization in the dummy-hcd driver. The\nerror has a somewhat involved history. The synchronization mechanism\nwas introduced by commit 7dbd8f4cabd9 (\"USB: dummy-hcd: Fix erroneous\nsynchronization change\"), which added an emulated \"interrupts enabled\"\nflag together with code emulating synchronize_irq() (it waits until\nall current handler callbacks have returned).\n\nBut the emulated interrupt-disable occurred too late, after the driver\ncontaining the handler callback routines had been told that it was\nunbound and no more callbacks would occur. Commit 4a5d797a9f9c (\"usb:\ngadget: dummy_hcd: fix gpf in gadget_setup\") tried to fix this by\nmoving the synchronize_irq() emulation code from dummy_stop() to\ndummy_pullup(), which runs before the unbind callback.\n\nThere still were races, though, because the emulated interrupt-disable\nstill occurred too late. It couldn\u0027t be moved to dummy_pullup(),\nbecause that routine can be called for reasons other than an impending\nunbind. Therefore commits 7dc0c55e9f30 (\"USB: UDC core: Add\nudc_async_callbacks gadget op\") and 04145a03db9d (\"USB: UDC: Implement\nudc_async_callbacks in dummy-hcd\") added an API allowing the UDC core\nto tell dummy-hcd exactly when emulated interrupts and their callbacks\nshould be disabled.\n\nThat brings us to the current state of things, which is still wrong\nbecause the emulated synchronize_irq() occurs before the emulated\ninterrupt-disable! That\u0027s no good, beause it means that more emulated\ninterrupts can occur after the synchronize_irq() emulation has run,\nleading to the possibility that a callback handler may be running when\nthe gadget driver is unbound.\n\nTo fix this, we have to move the synchronize_irq() emulation code yet\nagain, to the dummy_udc_async_callbacks() routine, which takes care of\nenabling and disabling emulated interrupt requests. The\nsynchronization will now run immediately after emulated interrupts are\ndisabled, which is where it belongs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43324",
"url": "https://www.suse.com/security/cve/CVE-2026-43324"
},
{
"category": "external",
"summary": "SUSE Bug 1264803 for CVE-2026-43324",
"url": "https://bugzilla.suse.com/1264803"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43324"
},
{
"cve": "CVE-2026-43327",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43327"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: dummy-hcd: Fix locking/synchronization error\n\nSyzbot testing was able to provoke an addressing exception and crash\nin the usb_gadget_udc_reset() routine in\ndrivers/usb/gadgets/udc/core.c, resulting from the fact that the\nroutine was called with a second (\"driver\") argument of NULL. The bad\ncaller was set_link_state() in dummy_hcd.c, and the problem arose\nbecause of a race between a USB reset and driver unbind.\n\nThese sorts of races were not supposed to be possible; commit\n7dbd8f4cabd9 (\"USB: dummy-hcd: Fix erroneous synchronization change\"),\nalong with a few followup commits, was written specifically to prevent\nthem. As it turns out, there are (at least) two errors remaining in\nthe code. Another patch will address the second error; this one is\nconcerned with the first.\n\nThe error responsible for the syzbot crash occurred because the\nstop_activity() routine will sometimes drop and then re-acquire the\ndum-\u003elock spinlock. A call to stop_activity() occurs in\nset_link_state() when handling an emulated USB reset, after the test\nof dum-\u003eints_enabled and before the increment of dum-\u003ecallback_usage.\nThis allowed another thread (doing a driver unbind) to sneak in and\ngrab the spinlock, and then clear dum-\u003eints_enabled and dum-\u003edriver.\nNormally this other thread would have to wait for dum-\u003ecallback_usage\nto go down to 0 before it would clear dum-\u003edriver, but in this case it\ndidn\u0027t have to wait since dum-\u003ecallback_usage had not yet been\nincremented.\n\nThe fix is to increment dum-\u003ecallback_usage _before_ calling\nstop_activity() instead of after. Then the thread doing the unbind\nwill not clear dum-\u003edriver until after the call to\nusb_gadget_udc_reset() safely returns and dum-\u003ecallback_usage has been\ndecremented again.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43327",
"url": "https://www.suse.com/security/cve/CVE-2026-43327"
},
{
"category": "external",
"summary": "SUSE Bug 1265078 for CVE-2026-43327",
"url": "https://bugzilla.suse.com/1265078"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43327"
},
{
"cve": "CVE-2026-43328",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43328"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path\n\nWhen kobject_init_and_add() fails, cpufreq_dbs_governor_init() calls\nkobject_put(\u0026dbs_data-\u003eattr_set.kobj).\n\nThe kobject release callback cpufreq_dbs_data_release() calls\ngov-\u003eexit(dbs_data) and kfree(dbs_data), but the current error path\nthen calls gov-\u003eexit(dbs_data) and kfree(dbs_data) again, causing a\ndouble free.\n\nKeep the direct kfree(dbs_data) for the gov-\u003einit() failure path, but\nafter kobject_init_and_add() has been called, let kobject_put() handle\nthe cleanup through cpufreq_dbs_data_release().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43328",
"url": "https://www.suse.com/security/cve/CVE-2026-43328"
},
{
"category": "external",
"summary": "SUSE Bug 1264832 for CVE-2026-43328",
"url": "https://bugzilla.suse.com/1264832"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43328"
},
{
"cve": "CVE-2026-43340",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43340"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: Reinit dev-\u003espinlock between attachments to low-level drivers\n\n`struct comedi_device` is the main controlling structure for a COMEDI\ndevice created by the COMEDI subsystem. It contains a member `spinlock`\ncontaining a spin-lock that is initialized by the COMEDI subsystem, but\nis reserved for use by a low-level driver attached to the COMEDI device\n(at least since commit 25436dc9d84f (\"Staging: comedi: remove RT\ncode\")).\n\nSome COMEDI devices (those created on initialization of the COMEDI\nsubsystem when the \"comedi.comedi_num_legacy_minors\" parameter is\nnon-zero) can be attached to different low-level drivers over their\nlifetime using the `COMEDI_DEVCONFIG` ioctl command. This can result in\ninconsistent lock states being reported when there is a mismatch in the\nspin-lock locking levels used by each low-level driver to which the\nCOMEDI device has been attached. Fix it by reinitializing\n`dev-\u003espinlock` before calling the low-level driver\u0027s `attach` function\npointer if `CONFIG_LOCKDEP` is enabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43340",
"url": "https://www.suse.com/security/cve/CVE-2026-43340"
},
{
"category": "external",
"summary": "SUSE Bug 1265096 for CVE-2026-43340",
"url": "https://bugzilla.suse.com/1265096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43340"
},
{
"cve": "CVE-2026-43342",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43342"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_rndis: Protect RNDIS options with mutex\n\nThe class/subclass/protocol options are suspectible to race conditions\nas they can be accessed concurrently through configfs.\n\nUse existing mutex to protect these options. This issue was identified\nduring code inspection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43342",
"url": "https://www.suse.com/security/cve/CVE-2026-43342"
},
{
"category": "external",
"summary": "SUSE Bug 1264758 for CVE-2026-43342",
"url": "https://bugzilla.suse.com/1264758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43342"
},
{
"cve": "CVE-2026-43343",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43343"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_subset: Fix unbalanced refcnt in geth_free\n\ngeth_alloc() increments the reference count, but geth_free() fails to\ndecrement it. This prevents the configuration of attributes via configfs\nafter unlinking the function.\n\nDecrement the reference count in geth_free() to ensure proper cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43343",
"url": "https://www.suse.com/security/cve/CVE-2026-43343"
},
{
"category": "external",
"summary": "SUSE Bug 1264816 for CVE-2026-43343",
"url": "https://bugzilla.suse.com/1264816"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43343"
},
{
"cve": "CVE-2026-43352",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43352"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue\n\nThe logic used to abort the DMA ring contains several flaws:\n\n 1. The driver unconditionally issues a ring abort even when the ring has\n already stopped.\n 2. The completion used to wait for abort completion is never\n re-initialized, resulting in incorrect wait behavior.\n 3. The abort sequence unintentionally clears RING_CTRL_ENABLE, which\n resets hardware ring pointers and disrupts the controller state.\n 4. If the ring is already stopped, the abort operation should be\n considered successful without attempting further action.\n\nFix the abort handling by checking whether the ring is running before\nissuing an abort, re-initializing the completion when needed, ensuring that\nRING_CTRL_ENABLE remains asserted during abort, and treating an already\nstopped ring as a successful condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43352",
"url": "https://www.suse.com/security/cve/CVE-2026-43352"
},
{
"category": "external",
"summary": "SUSE Bug 1264793 for CVE-2026-43352",
"url": "https://bugzilla.suse.com/1264793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43352"
},
{
"cve": "CVE-2026-43353",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43353"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: mipi-i3c-hci: Fix race in DMA ring dequeue\n\nThe HCI DMA dequeue path (hci_dma_dequeue_xfer()) may be invoked for\nmultiple transfers that timeout around the same time. However, the\nfunction is not serialized and can race with itself.\n\nWhen a timeout occurs, hci_dma_dequeue_xfer() stops the ring, processes\nincomplete transfers, and then restarts the ring. If another timeout\ntriggers a parallel call into the same function, the two instances may\ninterfere with each other - stopping or restarting the ring at unexpected\ntimes.\n\nAdd a mutex so that hci_dma_dequeue_xfer() is serialized with respect to\nitself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43353",
"url": "https://www.suse.com/security/cve/CVE-2026-43353"
},
{
"category": "external",
"summary": "SUSE Bug 1265089 for CVE-2026-43353",
"url": "https://bugzilla.suse.com/1265089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43353"
},
{
"cve": "CVE-2026-43357",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43357"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: gyro: mpu3050-core: fix pm_runtime error handling\n\nThe return value of pm_runtime_get_sync() is not checked, allowing\nthe driver to access hardware that may fail to resume. The device\nusage count is also unconditionally incremented. Use\npm_runtime_resume_and_get() which propagates errors and avoids\nincrementing the usage count on failure.\n\nIn preenable, add pm_runtime_put_autosuspend() on set_8khz_samplerate()\nfailure since postdisable does not run when preenable fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43357",
"url": "https://www.suse.com/security/cve/CVE-2026-43357"
},
{
"category": "external",
"summary": "SUSE Bug 1264809 for CVE-2026-43357",
"url": "https://bugzilla.suse.com/1264809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-43357"
},
{
"cve": "CVE-2026-43370",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43370"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix use-after-free race in VM acquire\n\nReplace non-atomic vm-\u003eprocess_info assignment with cmpxchg()\nto prevent race when parent/child processes sharing a drm_file\nboth try to acquire the same VM after fork().\n\n(cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43370",
"url": "https://www.suse.com/security/cve/CVE-2026-43370"
},
{
"category": "external",
"summary": "SUSE Bug 1264782 for CVE-2026-43370",
"url": "https://bugzilla.suse.com/1264782"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43370"
},
{
"cve": "CVE-2026-43380",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43380"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read\n\nThe q54sj108a2_debugfs_read function suffers from a stack buffer overflow\ndue to incorrect arguments passed to bin2hex(). The function currently\npasses \u0027data\u0027 as the destination and \u0027data_char\u0027 as the source.\n\nBecause bin2hex() converts each input byte into two hex characters, a\n32-byte block read results in 64 bytes of output. Since \u0027data\u0027 is only\n34 bytes (I2C_SMBUS_BLOCK_MAX + 2), this writes 30 bytes past the end\nof the buffer onto the stack.\n\nAdditionally, the arguments were swapped: it was reading from the\nzero-initialized \u0027data_char\u0027 and writing to \u0027data\u0027, resulting in\nall-zero output regardless of the actual I2C read.\n\nFix this by:\n1. Expanding \u0027data_char\u0027 to 66 bytes to safely hold the hex output.\n2. Correcting the bin2hex() argument order and using the actual read count.\n3. Using a pointer to select the correct output buffer for the final\n simple_read_from_buffer call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43380",
"url": "https://www.suse.com/security/cve/CVE-2026-43380"
},
{
"category": "external",
"summary": "SUSE Bug 1264780 for CVE-2026-43380",
"url": "https://bugzilla.suse.com/1264780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43380"
},
{
"cve": "CVE-2026-43381",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43381"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau/dpcd: return EBUSY for aux xfer if the device is asleep\n\nIf we have runtime suspended, and userspace wants to use /dev/drm_dp_*\nthen just tell it the device is busy instead of crashing in the GSP\ncode.\n\nWARNING: CPU: 2 PID: 565741 at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/rpc.c:164 r535_gsp_msgq_wait+0x9a/0xb0 [nouveau]\nCPU: 2 UID: 0 PID: 565741 Comm: fwupd Not tainted 6.18.10-200.fc43.x86_64 #1 PREEMPT(lazy)\nHardware name: LENOVO 20QTS0PQ00/20QTS0PQ00, BIOS N2OET65W (1.52 ) 08/05/2024\nRIP: 0010:r535_gsp_msgq_wait+0x9a/0xb0 [nouveau]\n\nThis is a simple fix to get backported. We should probably engineer a\nproper power domain solution to wake up devices and keep them awake\nwhile fw updates are happening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43381",
"url": "https://www.suse.com/security/cve/CVE-2026-43381"
},
{
"category": "external",
"summary": "SUSE Bug 1265105 for CVE-2026-43381",
"url": "https://bugzilla.suse.com/1265105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43381"
},
{
"cve": "CVE-2026-43382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43382"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: Avoid double-rtnl_lock ELP metric worker\n\nbatadv_v_elp_get_throughput() might be called when the RTNL lock is already\nheld. This could be problematic when the work queue item is cancelled via\ncancel_delayed_work_sync() in batadv_v_elp_iface_disable(). In this case,\nan rtnl_lock() would cause a deadlock.\n\nTo avoid this, rtnl_trylock() was used in this function to skip the\nretrieval of the ethtool information in case the RTNL lock was already\nheld.\n\nBut for cfg80211 interfaces, batadv_get_real_netdev() was called - which\nalso uses rtnl_lock(). The approach for __ethtool_get_link_ksettings() must\nalso be used instead and the lockless version __batadv_get_real_netdev()\nhas to be called.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43382",
"url": "https://www.suse.com/security/cve/CVE-2026-43382"
},
{
"category": "external",
"summary": "SUSE Bug 1265047 for CVE-2026-43382",
"url": "https://bugzilla.suse.com/1265047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43382"
},
{
"cve": "CVE-2026-43387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43387"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8723bs: properly validate the data in rtw_get_ie_ex()\n\nJust like in commit 154828bf9559 (\"staging: rtl8723bs: fix out-of-bounds\nread in rtw_get_ie() parser\"), we don\u0027t trust the data in the frame so\nwe should check the length better before acting on it",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43387",
"url": "https://www.suse.com/security/cve/CVE-2026-43387"
},
{
"category": "external",
"summary": "SUSE Bug 1265032 for CVE-2026-43387",
"url": "https://bugzilla.suse.com/1265032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43387"
},
{
"cve": "CVE-2026-43397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43397"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: samsung-dsim: Fix memory leak in error path\n\nIn samsung_dsim_host_attach(), drm_bridge_add() is called to add the\nbridge. However, if samsung_dsim_register_te_irq() or\npdata-\u003ehost_ops-\u003eattach() fails afterwards, the function returns\nwithout removing the bridge, causing a memory leak.\n\nFix this by adding proper error handling with goto labels to ensure\ndrm_bridge_remove() is called in all error paths. Also ensure that\nsamsung_dsim_unregister_te_irq() is called if the attach operation\nfails after the TE IRQ has been registered.\n\nsamsung_dsim_unregister_te_irq() function is moved without changes\nto be before samsung_dsim_host_attach() to avoid forward declaration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43397",
"url": "https://www.suse.com/security/cve/CVE-2026-43397"
},
{
"category": "external",
"summary": "SUSE Bug 1264668 for CVE-2026-43397",
"url": "https://bugzilla.suse.com/1264668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-43397"
},
{
"cve": "CVE-2026-43412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43412"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start\n\nDuring ADSP stop and start, the kernel crashes due to the order in which\nASoC components are removed.\n\nOn ADSP stop, the q6apm-audio .remove callback unloads topology and removes\nPCM runtimes during ASoC teardown. This deletes the RTDs that contain the\nq6apm DAI components before their removal pass runs, leaving those\ncomponents still linked to the card and causing crashes on the next rebind.\n\nFix this by ensuring that all dependent (child) components are removed\nfirst, and the q6apm component is removed last.\n\n[ 48.105720] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000d0\n[ 48.114763] Mem abort info:\n[ 48.117650] ESR = 0x0000000096000004\n[ 48.121526] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 48.127010] SET = 0, FnV = 0\n[ 48.130172] EA = 0, S1PTW = 0\n[ 48.133415] FSC = 0x04: level 0 translation fault\n[ 48.138446] Data abort info:\n[ 48.141422] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[ 48.147079] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 48.152354] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 48.157859] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001173cf000\n[ 48.164517] [00000000000000d0] pgd=0000000000000000, p4d=0000000000000000\n[ 48.171530] Internal error: Oops: 0000000096000004 [#1] SMP\n[ 48.177348] Modules linked in: q6prm_clocks q6apm_lpass_dais q6apm_dai snd_q6dsp_common q6prm snd_q6apm 8021q garp mrp stp llc snd_soc_hdmi_codec apr pdr_interface phy_qcom_edp fastrpc qcom_pd_mapper rpmsg_ctrl qrtr_smd rpmsg_char qcom_pdr_msg qcom_iris v4l2_mem2mem videobuf2_dma_contig ath11k_pci msm ubwc_config at24 ath11k videobuf2_memops mac80211 ocmem videobuf2_v4l2 libarc4 drm_gpuvm mhi qrtr videodev drm_exec snd_soc_sc8280xp gpu_sched videobuf2_common nvmem_qcom_spmi_sdam snd_soc_qcom_sdw drm_dp_aux_bus qcom_q6v5_pas qcom_spmi_temp_alarm snd_soc_qcom_common rtc_pm8xxx qcom_pon drm_display_helper cec qcom_pil_info qcom_stats soundwire_bus drm_client_lib mc dispcc0_sa8775p videocc_sa8775p qcom_q6v5 camcc_sa8775p snd_soc_dmic phy_qcom_sgmii_eth snd_soc_max98357a i2c_qcom_geni snd_soc_core dwmac_qcom_ethqos llcc_qcom icc_bwmon qcom_sysmon snd_compress qcom_refgen_regulator coresight_stm stmmac_platform snd_pcm_dmaengine qcom_common coresight_tmc stmmac coresight_replicator qcom_glink_smem coresight_cti stm_core\n[ 48.177444] coresight_funnel snd_pcm ufs_qcom phy_qcom_qmp_usb gpi phy_qcom_snps_femto_v2 coresight phy_qcom_qmp_ufs qcom_wdt gpucc_sa8775p pcs_xpcs mdt_loader qcom_ice icc_osm_l3 qmi_helpers snd_timer snd soundcore display_connector qcom_rng nvmem_reboot_mode drm_kms_helper phy_qcom_qmp_pcie sha256 cfg80211 rfkill socinfo fuse drm backlight ipv6\n[ 48.301059] CPU: 2 UID: 0 PID: 293 Comm: kworker/u32:2 Not tainted 6.19.0-rc6-dirty #10 PREEMPT\n[ 48.310081] Hardware name: Qualcomm Technologies, Inc. Lemans EVK (DT)\n[ 48.316782] Workqueue: pdr_notifier_wq pdr_notifier_work [pdr_interface]\n[ 48.323672] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 48.330825] pc : mutex_lock+0xc/0x54\n[ 48.334514] lr : soc_dapm_shutdown_dapm+0x44/0x174 [snd_soc_core]\n[ 48.340794] sp : ffff800084ddb7b0\n[ 48.344207] x29: ffff800084ddb7b0 x28: ffff00009cd9cf30 x27: ffff00009cd9cc00\n[ 48.351544] x26: ffff000099610190 x25: ffffa31d2f19c810 x24: ffffa31d2f185098\n[ 48.358869] x23: ffff800084ddb7f8 x22: 0000000000000000 x21: 00000000000000d0\n[ 48.366198] x20: ffff00009ba6c338 x19: ffff00009ba6c338 x18: 00000000ffffffff\n[ 48.373528] x17: 000000040044ffff x16: ffffa31d4ae6dca8 x15: 072007740775076f\n[ 48.380853] x14: 0765076d07690774 x13: 00313a323a656369 x12: 767265733a637673\n[ 48.388182] x11: 00000000000003f9 x10: ffffa31d4c7dea98 x9 : 0000000000000001\n[ 48.395519] x8 : ffff00009a2aadc0 x7 : 0000000000000003 x6 : 0000000000000000\n[ 48.402854] x5 : 0000000000000\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43412",
"url": "https://www.suse.com/security/cve/CVE-2026-43412"
},
{
"category": "external",
"summary": "SUSE Bug 1265080 for CVE-2026-43412",
"url": "https://bugzilla.suse.com/1265080"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43412"
},
{
"cve": "CVE-2026-43425",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43425"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: image: mdc800: kill download URB on timeout\n\nmdc800_device_read() submits download_urb and waits for completion.\nIf the timeout fires and the device has not responded, the function\nreturns without killing the URB, leaving it active.\n\nA subsequent read() resubmits the same URB while it is still\nin-flight, triggering the WARN in usb_submit_urb():\n\n \"URB submitted while active\"\n\nCheck the return value of wait_event_timeout() and kill the URB if\nit indicates timeout, ensuring the URB is complete before its status\nis inspected or the URB is resubmitted.\n\nSimilar to\n- commit 372c93131998 (\"USB: yurex: fix control-URB timeout handling\")\n- commit b98d5000c505 (\"media: rc: iguanair: handle timeouts\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43425",
"url": "https://www.suse.com/security/cve/CVE-2026-43425"
},
{
"category": "external",
"summary": "SUSE Bug 1265133 for CVE-2026-43425",
"url": "https://bugzilla.suse.com/1265133"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43425"
},
{
"cve": "CVE-2026-43426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43426"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: renesas_usbhs: fix use-after-free in ISR during device removal\n\nIn usbhs_remove(), the driver frees resources (including the pipe array)\nwhile the interrupt handler (usbhs_interrupt) is still registered. If an\ninterrupt fires after usbhs_pipe_remove() but before the driver is fully\nunbound, the ISR may access freed memory, causing a use-after-free.\n\nFix this by calling devm_free_irq() before freeing resources. This ensures\nthe interrupt handler is both disabled and synchronized (waits for any\nrunning ISR to complete) before usbhs_pipe_remove() is called.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43426",
"url": "https://www.suse.com/security/cve/CVE-2026-43426"
},
{
"category": "external",
"summary": "SUSE Bug 1265074 for CVE-2026-43426",
"url": "https://bugzilla.suse.com/1265074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43426"
},
{
"cve": "CVE-2026-43427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43427"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: class: cdc-wdm: fix reordering issue in read code path\n\nQuoting the bug report:\n\nDue to compiler optimization or CPU out-of-order execution, the\ndesc-\u003elength update can be reordered before the memmove. If this\nhappens, wdm_read() can see the new length and call copy_to_user() on\nuninitialized memory. This also violates LKMM data race rules [1].\n\nFix it by using WRITE_ONCE and memory barriers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43427",
"url": "https://www.suse.com/security/cve/CVE-2026-43427"
},
{
"category": "external",
"summary": "SUSE Bug 1264746 for CVE-2026-43427",
"url": "https://bugzilla.suse.com/1264746"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43427"
},
{
"cve": "CVE-2026-43428",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43428"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: core: Limit the length of unkillable synchronous timeouts\n\nThe usb_control_msg(), usb_bulk_msg(), and usb_interrupt_msg() APIs in\nusbcore allow unlimited timeout durations. And since they use\nuninterruptible waits, this leaves open the possibility of hanging a\ntask for an indefinitely long time, with no way to kill it short of\nunplugging the target device.\n\nTo prevent this sort of problem, enforce a maximum limit on the length\nof these unkillable timeouts. The limit chosen here, somewhat\narbitrarily, is 60 seconds. On many systems (although not all) this\nis short enough to avoid triggering the kernel\u0027s hung-task detector.\n\nIn addition, clear up the ambiguity of negative timeout values by\ntreating them the same as 0, i.e., using the maximum allowed timeout.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43428",
"url": "https://www.suse.com/security/cve/CVE-2026-43428"
},
{
"category": "external",
"summary": "SUSE Bug 1265138 for CVE-2026-43428",
"url": "https://bugzilla.suse.com/1265138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-43428"
},
{
"cve": "CVE-2026-43429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43429"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts\n\nThe usbtmc driver accepts timeout values specified by the user in an\nioctl command, and uses these timeouts for some usb_bulk_msg() calls.\nSince the user can specify arbitrarily long timeouts and\nusb_bulk_msg() uses unkillable waits, call usb_bulk_msg_killable()\ninstead to avoid the possibility of the user hanging a kernel thread\nindefinitely.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43429",
"url": "https://www.suse.com/security/cve/CVE-2026-43429"
},
{
"category": "external",
"summary": "SUSE Bug 1265054 for CVE-2026-43429",
"url": "https://bugzilla.suse.com/1265054"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43429"
},
{
"cve": "CVE-2026-43430",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43430"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: yurex: fix race in probe\n\nThe bbu member of the descriptor must be set to the value\nstanding for uninitialized values before the URB whose\ncompletion handler sets bbu is submitted. Otherwise there is\na window during which probing can overwrite already retrieved\ndata.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43430",
"url": "https://www.suse.com/security/cve/CVE-2026-43430"
},
{
"category": "external",
"summary": "SUSE Bug 1264677 for CVE-2026-43430",
"url": "https://bugzilla.suse.com/1264677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43430"
},
{
"cve": "CVE-2026-43432",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43432"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: xhci: Fix memory leak in xhci_disable_slot()\n\nxhci_alloc_command() allocates a command structure and, when the\nsecond argument is true, also allocates a completion structure.\nCurrently, the error handling path in xhci_disable_slot() only frees\nthe command structure using kfree(), causing the completion structure\nto leak.\n\nUse xhci_free_command() instead of kfree(). xhci_free_command() correctly\nfrees both the command structure and the associated completion structure.\nSince the command structure is allocated with zero-initialization,\ncommand-\u003ein_ctx is NULL and will not be erroneously freed by\nxhci_free_command().\n\nThis bug was found using an experimental static analysis tool we are\ndeveloping. The tool is based on the LLVM framework and is specifically\ndesigned to detect memory management issues. It is currently under\nactive development and not yet publicly available, but we plan to\nopen-source it after our research is published.\n\nThe bug was originally detected on v6.13-rc1 using our static analysis\ntool, and we have verified that the issue persists in the latest mainline\nkernel.\n\nWe performed build testing on x86_64 with allyesconfig using GCC=11.4.0.\nSince triggering these error paths in xhci_disable_slot() requires specific\nhardware conditions or abnormal state, we were unable to construct a test\ncase to reliably trigger these specific error paths at runtime.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43432",
"url": "https://www.suse.com/security/cve/CVE-2026-43432"
},
{
"category": "external",
"summary": "SUSE Bug 1264783 for CVE-2026-43432",
"url": "https://bugzilla.suse.com/1264783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43432"
},
{
"cve": "CVE-2026-43436",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43436"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces\n\nThe Scarlett2 mixer quirk in USB-audio driver may hit a NULL\ndereference when a malformed USB descriptor is passed, since it\nassumes the presence of an endpoint in the parsed interface in\nscarlett2_find_fc_interface(), as reported by fuzzer.\n\nFor avoiding the NULL dereference, just add the sanity check of\nbNumEndpoints and skip the invalid interface.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43436",
"url": "https://www.suse.com/security/cve/CVE-2026-43436"
},
{
"category": "external",
"summary": "SUSE Bug 1264988 for CVE-2026-43436",
"url": "https://bugzilla.suse.com/1264988"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43436"
},
{
"cve": "CVE-2026-43439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43439"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup: fix race between task migration and iteration\n\nWhen a task is migrated out of a css_set, cgroup_migrate_add_task()\nfirst moves it from cset-\u003etasks to cset-\u003emg_tasks via:\n\n list_move_tail(\u0026task-\u003ecg_list, \u0026cset-\u003emg_tasks);\n\nIf a css_task_iter currently has it-\u003etask_pos pointing to this task,\ncss_set_move_task() calls css_task_iter_skip() to keep the iterator\nvalid. However, since the task has already been moved to -\u003emg_tasks,\nthe iterator is advanced relative to the mg_tasks list instead of the\noriginal tasks list. As a result, remaining tasks on cset-\u003etasks, as\nwell as tasks queued on cset-\u003emg_tasks, can be skipped by iteration.\n\nFix this by calling css_set_skip_task_iters() before unlinking\ntask-\u003ecg_list from cset-\u003etasks. This advances all active iterators to\nthe next task on cset-\u003etasks, so iteration continues correctly even\nwhen a task is concurrently being migrated.\n\nThis race is hard to hit in practice without instrumentation, but it\ncan be reproduced by artificially slowing down cgroup_procs_show().\nFor example, on an Android device a temporary\n/sys/kernel/cgroup/cgroup_test knob can be added to inject a delay\ninto cgroup_procs_show(), and then:\n\n 1) Spawn three long-running tasks (PIDs 101, 102, 103).\n 2) Create a test cgroup and move the tasks into it.\n 3) Enable a large delay via /sys/kernel/cgroup/cgroup_test.\n 4) In one shell, read cgroup.procs from the test cgroup.\n 5) Within the delay window, in another shell migrate PID 102 by\n writing it to a different cgroup.procs file.\n\nUnder this setup, cgroup.procs can intermittently show only PID 101\nwhile skipping PID 103. Once the migration completes, reading the\nfile again shows all tasks as expected.\n\nNote that this change does not allow removing the existing\ncss_set_skip_task_iters() call in css_set_move_task(). The new call\nin cgroup_migrate_add_task() only handles iterators that are racing\nwith migration while the task is still on cset-\u003etasks. Iterators may\nalso start after the task has been moved to cset-\u003emg_tasks. If we\ndropped css_set_skip_task_iters() from css_set_move_task(), such\niterators could keep task_pos pointing to a migrating task, causing\ncss_task_iter_advance() to malfunction on the destination css_set,\nup to and including crashes or infinite loops.\n\nThe race window between migration and iteration is very small, and\ncss_task_iter is not on a hot path. In the worst case, when an\niterator is positioned on the first thread of the migrating process,\ncgroup_migrate_add_task() may have to skip multiple tasks via\ncss_set_skip_task_iters(). However, this only happens when migration\nand iteration actually race, so the performance impact is negligible\ncompared to the correctness fix provided here.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43439",
"url": "https://www.suse.com/security/cve/CVE-2026-43439"
},
{
"category": "external",
"summary": "SUSE Bug 1265141 for CVE-2026-43439",
"url": "https://bugzilla.suse.com/1265141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43439"
},
{
"cve": "CVE-2026-43440",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43440"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mana: Null service_wq on setup error to prevent double destroy\n\nIn mana_gd_setup() error path, set gc-\u003eservice_wq to NULL after\ndestroy_workqueue() to match the cleanup in mana_gd_cleanup().\nThis prevents a use-after-free if the workqueue pointer is checked\nafter a failed setup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43440",
"url": "https://www.suse.com/security/cve/CVE-2026-43440"
},
{
"category": "external",
"summary": "SUSE Bug 1264779 for CVE-2026-43440",
"url": "https://bugzilla.suse.com/1264779"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43440"
},
{
"cve": "CVE-2026-43443",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43443"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: amd: acp-mach-common: Add missing error check for clock acquisition\n\nThe acp_card_rt5682_init() and acp_card_rt5682s_init() functions did not\ncheck the return values of clk_get(). This could lead to a kernel crash\nwhen the invalid pointers are later dereferenced by clock core\nfunctions.\n\nFix this by:\n1. Changing clk_get() to the device-managed devm_clk_get().\n2. Adding IS_ERR() checks immediately after each clock acquisition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43443",
"url": "https://www.suse.com/security/cve/CVE-2026-43443"
},
{
"category": "external",
"summary": "SUSE Bug 1264785 for CVE-2026-43443",
"url": "https://bugzilla.suse.com/1264785"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43443"
},
{
"cve": "CVE-2026-43451",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43451"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_queue: fix entry leak in bridge verdict error path\n\nnfqnl_recv_verdict() calls find_dequeue_entry() to remove the queue\nentry from the queue data structures, taking ownership of the entry.\nFor PF_BRIDGE packets, it then calls nfqa_parse_bridge() to parse VLAN\nattributes. If nfqa_parse_bridge() returns an error (e.g. NFQA_VLAN\npresent but NFQA_VLAN_TCI missing), the function returns immediately\nwithout freeing the dequeued entry or its sk_buff.\n\nThis leaks the nf_queue_entry, its associated sk_buff, and all held\nreferences (net_device refcounts, struct net refcount). Repeated\ntriggering exhausts kernel memory.\n\nFix this by dropping the entry via nfqnl_reinject() with NF_DROP verdict\non the error path, consistent with other error handling in this file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43451",
"url": "https://www.suse.com/security/cve/CVE-2026-43451"
},
{
"category": "external",
"summary": "SUSE Bug 1265009 for CVE-2026-43451",
"url": "https://bugzilla.suse.com/1265009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43451"
},
{
"cve": "CVE-2026-43459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43459"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: soc-core: flush delayed work before removing DAIs and widgets\n\nWhen a sound card is unbound while a PCM stream is open, a\nuse-after-free can occur in snd_soc_dapm_stream_event(), called from\nthe close_delayed_work workqueue handler.\n\nDuring unbind, snd_soc_unbind_card() flushes delayed work and then\ncalls soc_cleanup_card_resources(). Inside cleanup,\nsnd_card_disconnect_sync() releases all PCM file descriptors, and\nthe resulting PCM close path can call snd_soc_dapm_stream_stop()\nwhich schedules new delayed work with a pmdown_time timer delay.\nSince this happens after the flush in snd_soc_unbind_card(), the\nnew work is not caught. soc_remove_link_components() then frees\nDAPM widgets before this work fires, leading to the use-after-free.\n\nThe existing flush in soc_free_pcm_runtime() also cannot help as it\nruns after soc_remove_link_components() has already freed the widgets.\n\nAdd a flush in soc_cleanup_card_resources() after\nsnd_card_disconnect_sync() (after which no new PCM closes can\nschedule further delayed work) and before soc_remove_link_dais()\nand soc_remove_link_components() (which tear down the structures the\ndelayed work accesses).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43459",
"url": "https://www.suse.com/security/cve/CVE-2026-43459"
},
{
"category": "external",
"summary": "SUSE Bug 1264768 for CVE-2026-43459",
"url": "https://bugzilla.suse.com/1264768"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43459"
},
{
"cve": "CVE-2026-43467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43467"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix crash when moving to switchdev mode\n\nWhen moving to switchdev mode when the device doesn\u0027t support IPsec,\nwe try to clean up the IPsec resources anyway which causes the crash\nbelow, fix that by correctly checking for IPsec support before trying\nto clean up its resources.\n\n[27642.515799] WARNING: arch/x86/mm/fault.c:1276 at\ndo_user_addr_fault+0x18a/0x680, CPU#4: devlink/6490\n[27642.517159] Modules linked in: xt_conntrack xt_MASQUERADE\nip6table_nat ip6table_filter ip6_tables iptable_nat nf_nat xt_addrtype\nrpcsec_gss_krb5 auth_rpcgss oid_registry overlay mlx5_fwctl nfnetlink\nzram zsmalloc mlx5_ib fuse rpcrdma rdma_ucm ib_uverbs ib_iser libiscsi\nscsi_transport_iscsi ib_umad rdma_cm ib_ipoib iw_cm ib_cm mlx5_core\nib_core\n[27642.521358] CPU: 4 UID: 0 PID: 6490 Comm: devlink Not tainted\n6.19.0-rc5_for_upstream_min_debug_2026_01_14_16_47 #1 NONE\n[27642.522923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS\nrel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\n[27642.524528] RIP: 0010:do_user_addr_fault+0x18a/0x680\n[27642.525362] Code: ff 0f 84 75 03 00 00 48 89 ee 4c 89 e7 e8 5e b9 22\n00 49 89 c0 48 85 c0 0f 84 a8 02 00 00 f7 c3 60 80 00 00 74 22 31 c9 eb\n ae \u003c0f\u003e 0b 48 83 c4 10 48 89 ea 48 89 de 4c 89 f7 5b 5d 41 5c 41 5d\n41\n[27642.528166] RSP: 0018:ffff88810770f6b8 EFLAGS: 00010046\n[27642.529038] RAX: 0000000000000000 RBX: 0000000000000002 RCX:\nffff88810b980f00\n[27642.530158] RDX: 00000000000000a0 RSI: 0000000000000002 RDI:\nffff88810770f728\n[27642.531270] RBP: 00000000000000a0 R08: 0000000000000000 R09:\n0000000000000000\n[27642.532383] R10: 0000000000000000 R11: 0000000000000000 R12:\nffff888103f3c4c0\n[27642.533499] R13: 0000000000000000 R14: ffff88810770f728 R15:\n0000000000000000\n[27642.534614] FS: 00007f197c741740(0000) GS:ffff88856a94c000(0000)\nknlGS:0000000000000000\n[27642.535915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[27642.536858] CR2: 00000000000000a0 CR3: 000000011334c003 CR4:\n0000000000172eb0\n[27642.537982] Call Trace:\n[27642.538466] \u003cTASK\u003e\n[27642.538907] exc_page_fault+0x76/0x140\n[27642.539583] asm_exc_page_fault+0x22/0x30\n[27642.540282] RIP: 0010:_raw_spin_lock_irqsave+0x10/0x30\n[27642.541134] Code: 07 85 c0 75 11 ba ff 00 00 00 f0 0f b1 17 75 06 b8\n01 00 00 00 c3 31 c0 c3 90 0f 1f 44 00 00 53 9c 5b fa 31 c0 ba 01 00 00\n 00 \u003cf0\u003e 0f b1 17 75 05 48 89 d8 5b c3 89 c6 e8 7e 02 00 00 48 89 d8\n 5b\n[27642.543936] RSP: 0018:ffff88810770f7d8 EFLAGS: 00010046\n[27642.544803] RAX: 0000000000000000 RBX: 0000000000000202 RCX:\nffff888113ad96d8\n[27642.545916] RDX: 0000000000000001 RSI: ffff88810770f818 RDI:\n00000000000000a0\n[27642.547027] RBP: 0000000000000098 R08: 0000000000000400 R09:\nffff88810b980f00\n[27642.548140] R10: 0000000000000001 R11: ffff888101845a80 R12:\n00000000000000a8\n[27642.549263] R13: ffffffffa02a9060 R14: 00000000000000a0 R15:\nffff8881130d8a40\n[27642.550379] complete_all+0x20/0x90\n[27642.551010] mlx5e_ipsec_disable_events+0xb6/0xf0 [mlx5_core]\n[27642.552022] mlx5e_nic_disable+0x12d/0x220 [mlx5_core]\n[27642.552929] mlx5e_detach_netdev+0x66/0xf0 [mlx5_core]\n[27642.553822] mlx5e_netdev_change_profile+0x5b/0x120 [mlx5_core]\n[27642.554821] mlx5e_vport_rep_load+0x419/0x590 [mlx5_core]\n[27642.555757] ? xa_load+0x53/0x90\n[27642.556361] __esw_offloads_load_rep+0x54/0x70 [mlx5_core]\n[27642.557328] mlx5_esw_offloads_rep_load+0x45/0xd0 [mlx5_core]\n[27642.558320] esw_offloads_enable+0xb4b/0xc90 [mlx5_core]\n[27642.559247] mlx5_eswitch_enable_locked+0x34e/0x4f0 [mlx5_core]\n[27642.560257] ? mlx5_rescan_drivers_locked+0x222/0x2d0 [mlx5_core]\n[27642.561284] mlx5_devlink_eswitch_mode_set+0x5ac/0x9c0 [mlx5_core]\n[27642.562334] ? devlink_rate_set_ops_supported+0x21/0x3a0\n[27642.563220] devlink_nl_eswitch_set_doit+0x67/0xe0\n[27642.564026] genl_family_rcv_msg_doit+0xe0/0x130\n[27642.564816] genl_rcv_msg+0x183/0x290\n[27642.565466] ? __devlink_nl_pre_doit.isra.0+0x160/0x160\n[27642.566329] ? d\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43467",
"url": "https://www.suse.com/security/cve/CVE-2026-43467"
},
{
"category": "external",
"summary": "SUSE Bug 1264791 for CVE-2026-43467",
"url": "https://bugzilla.suse.com/1264791"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43467"
},
{
"cve": "CVE-2026-43475",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43475"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: storvsc: Fix scheduling while atomic on PREEMPT_RT\n\nThis resolves the follow splat and lock-up when running with PREEMPT_RT\nenabled on Hyper-V:\n\n[ 415.140818] BUG: scheduling while atomic: stress-ng-iomix/1048/0x00000002\n[ 415.140822] INFO: lockdep is turned off.\n[ 415.140823] Modules linked in: intel_rapl_msr intel_rapl_common intel_uncore_frequency_common intel_pmc_core pmt_telemetry pmt_discovery pmt_class intel_pmc_ssram_telemetry intel_vsec ghash_clmulni_intel aesni_intel rapl binfmt_misc nls_ascii nls_cp437 vfat fat snd_pcm hyperv_drm snd_timer drm_client_lib drm_shmem_helper snd sg soundcore drm_kms_helper pcspkr hv_balloon hv_utils evdev joydev drm configfs efi_pstore nfnetlink vsock_loopback vmw_vsock_virtio_transport_common hv_sock vmw_vsock_vmci_transport vsock vmw_vmci efivarfs autofs4 ext4 crc16 mbcache jbd2 sr_mod sd_mod cdrom hv_storvsc serio_raw hid_generic scsi_transport_fc hid_hyperv scsi_mod hid hv_netvsc hyperv_keyboard scsi_common\n[ 415.140846] Preemption disabled at:\n[ 415.140847] [\u003cffffffffc0656171\u003e] storvsc_queuecommand+0x2e1/0xbe0 [hv_storvsc]\n[ 415.140854] CPU: 8 UID: 0 PID: 1048 Comm: stress-ng-iomix Not tainted 6.19.0-rc7 #30 PREEMPT_{RT,(full)}\n[ 415.140856] Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/04/2024\n[ 415.140857] Call Trace:\n[ 415.140861] \u003cTASK\u003e\n[ 415.140861] ? storvsc_queuecommand+0x2e1/0xbe0 [hv_storvsc]\n[ 415.140863] dump_stack_lvl+0x91/0xb0\n[ 415.140870] __schedule_bug+0x9c/0xc0\n[ 415.140875] __schedule+0xdf6/0x1300\n[ 415.140877] ? rtlock_slowlock_locked+0x56c/0x1980\n[ 415.140879] ? rcu_is_watching+0x12/0x60\n[ 415.140883] schedule_rtlock+0x21/0x40\n[ 415.140885] rtlock_slowlock_locked+0x502/0x1980\n[ 415.140891] rt_spin_lock+0x89/0x1e0\n[ 415.140893] hv_ringbuffer_write+0x87/0x2a0\n[ 415.140899] vmbus_sendpacket_mpb_desc+0xb6/0xe0\n[ 415.140900] ? rcu_is_watching+0x12/0x60\n[ 415.140902] storvsc_queuecommand+0x669/0xbe0 [hv_storvsc]\n[ 415.140904] ? HARDIRQ_verbose+0x10/0x10\n[ 415.140908] ? __rq_qos_issue+0x28/0x40\n[ 415.140911] scsi_queue_rq+0x760/0xd80 [scsi_mod]\n[ 415.140926] __blk_mq_issue_directly+0x4a/0xc0\n[ 415.140928] blk_mq_issue_direct+0x87/0x2b0\n[ 415.140931] blk_mq_dispatch_queue_requests+0x120/0x440\n[ 415.140933] blk_mq_flush_plug_list+0x7a/0x1a0\n[ 415.140935] __blk_flush_plug+0xf4/0x150\n[ 415.140940] __submit_bio+0x2b2/0x5c0\n[ 415.140944] ? submit_bio_noacct_nocheck+0x272/0x360\n[ 415.140946] submit_bio_noacct_nocheck+0x272/0x360\n[ 415.140951] ext4_read_bh_lock+0x3e/0x60 [ext4]\n[ 415.140995] ext4_block_write_begin+0x396/0x650 [ext4]\n[ 415.141018] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ext4]\n[ 415.141038] ext4_da_write_begin+0x1c4/0x350 [ext4]\n[ 415.141060] generic_perform_write+0x14e/0x2c0\n[ 415.141065] ext4_buffered_write_iter+0x6b/0x120 [ext4]\n[ 415.141083] vfs_write+0x2ca/0x570\n[ 415.141087] ksys_write+0x76/0xf0\n[ 415.141089] do_syscall_64+0x99/0x1490\n[ 415.141093] ? rcu_is_watching+0x12/0x60\n[ 415.141095] ? finish_task_switch.isra.0+0xdf/0x3d0\n[ 415.141097] ? rcu_is_watching+0x12/0x60\n[ 415.141098] ? lock_release+0x1f0/0x2a0\n[ 415.141100] ? rcu_is_watching+0x12/0x60\n[ 415.141101] ? finish_task_switch.isra.0+0xe4/0x3d0\n[ 415.141103] ? rcu_is_watching+0x12/0x60\n[ 415.141104] ? __schedule+0xb34/0x1300\n[ 415.141106] ? hrtimer_try_to_cancel+0x1d/0x170\n[ 415.141109] ? do_nanosleep+0x8b/0x160\n[ 415.141111] ? hrtimer_nanosleep+0x89/0x100\n[ 415.141114] ? __pfx_hrtimer_wakeup+0x10/0x10\n[ 415.141116] ? xfd_validate_state+0x26/0x90\n[ 415.141118] ? rcu_is_watching+0x12/0x60\n[ 415.141120] ? do_syscall_64+0x1e0/0x1490\n[ 415.141121] ? do_syscall_64+0x1e0/0x1490\n[ 415.141123] ? rcu_is_watching+0x12/0x60\n[ 415.141124] ? do_syscall_64+0x1e0/0x1490\n[ 415.141125] ? do_syscall_64+0x1e0/0x1490\n[ 415.141127] ? irqentry_exit+0x140/0\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43475",
"url": "https://www.suse.com/security/cve/CVE-2026-43475"
},
{
"category": "external",
"summary": "SUSE Bug 1264795 for CVE-2026-43475",
"url": "https://bugzilla.suse.com/1264795"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43475"
},
{
"cve": "CVE-2026-43476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43476"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()\n\nsizeof(num) evaluates to sizeof(size_t) (8 bytes on 64-bit) instead\nof the intended __be32 element size (4 bytes). Use sizeof(*meas) to\ncorrectly match the buffer element type.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43476",
"url": "https://www.suse.com/security/cve/CVE-2026-43476"
},
{
"category": "external",
"summary": "SUSE Bug 1265257 for CVE-2026-43476",
"url": "https://bugzilla.suse.com/1265257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43476"
},
{
"cve": "CVE-2026-43480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43480"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition\n\nThe acp3x_5682_init() function did not check the return value of\nclk_get(), which could lead to dereferencing error pointers in\nrt5682_clk_enable().\n\nFix this by:\n1. Changing clk_get() to the device-managed devm_clk_get().\n2. Adding proper IS_ERR() checks for both clock acquisitions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43480",
"url": "https://www.suse.com/security/cve/CVE-2026-43480"
},
{
"category": "external",
"summary": "SUSE Bug 1265249 for CVE-2026-43480",
"url": "https://bugzilla.suse.com/1265249"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43480"
},
{
"cve": "CVE-2026-43488",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43488"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: xhci: Prevent interrupt storm on host controller error (HCE)\n\nThe xHCI controller reports a Host Controller Error (HCE) in UAS Storage\nDevice plug/unplug scenarios on Android devices. HCE is checked in\nxhci_irq() function and causes an interrupt storm (since the interrupt\nisn\u0027t cleared), leading to severe system-level faults.\n\nWhen the xHC controller reports HCE in the interrupt handler, the driver\nonly logs a warning and assumes xHC activity will stop as stated in xHCI\nspecification. An interrupt storm does however continue on some hosts\neven after HCE, and only ceases after manually disabling xHC interrupt\nand stopping the controller by calling xhci_halt().\n\nAdd xhci_halt() to xhci_irq() function where STS_HCE status is checked,\nmirroring the existing error handling pattern used for STS_FATAL errors.\n\nThis only fixes the interrupt storm. Proper HCE recovery requires resetting\nand re-initializing the xHC.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43488",
"url": "https://www.suse.com/security/cve/CVE-2026-43488"
},
{
"category": "external",
"summary": "SUSE Bug 1265264 for CVE-2026-43488",
"url": "https://bugzilla.suse.com/1265264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43488"
},
{
"cve": "CVE-2026-43493",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43493"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Fix handling of MAY_BACKLOG requests\n\nMAY_BACKLOG requests can return EBUSY. Handle them by checking\nfor that value and filtering out EINPROGRESS notifications.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43493",
"url": "https://www.suse.com/security/cve/CVE-2026-43493"
},
{
"category": "external",
"summary": "SUSE Bug 1265627 for CVE-2026-43493",
"url": "https://bugzilla.suse.com/1265627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43493"
},
{
"cve": "CVE-2026-43496",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43496"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked\n\nWhen red qdisc has children (eg qfq qdisc) whose peek() callback is\nqdisc_peek_dequeued(), we could get a kernel panic. When the parent of such\nqdiscs (eg illustrated in patch #3 as tbf) wants to retrieve an skb from\nits child (red in this case), it will do the following:\n 1a. do a peek() - and when sensing there\u0027s an skb the child can offer, then\n - the child in this case(red) calls its child\u0027s (qfq) peek.\n qfq does the right thing and will return the gso_skb queue packet.\n Note: if there wasnt a gso_skb entry then qfq will store it there.\n 1b. invoke a dequeue() on the child (red). And herein lies the problem.\n - red will call the child\u0027s dequeue() which will essentially just\n try to grab something of qfq\u0027s queue.\n\n[ 78.667668][ T363] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f]\n[ 78.667927][ T363] CPU: 1 UID: 0 PID: 363 Comm: ping Not tainted 7.1.0-rc1-00033-g46f74a3f7d57-dirty #790 PREEMPT(full)\n[ 78.668263][ T363] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011\n[ 78.668486][ T363] RIP: 0010:qfq_dequeue+0x446/0xc90 [sch_qfq]\n[ 78.668718][ T363] Code: 54 c0 e8 dd 90 00 f1 48 c7 c7 e0 03 54 c0 48 89 de e8 ce 90 00 f1 48 8d 7b 48 b8 ff ff 37 00 48 89 fa 48 c1 e0 2a 48 c1 ea 03 \u003c80\u003e 3c 02 00 74 05 e8 ef a1 e1 f1 48 8b 7b 48 48 8d 54 24 58 48 8d\n[ 78.669312][ T363] RSP: 0018:ffff88810de573e0 EFLAGS: 00010216\n[ 78.669533][ T363] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000\n[ 78.669790][ T363] RDX: 0000000000000009 RSI: 0000000000000004 RDI: 0000000000000048\n[ 78.670044][ T363] RBP: ffff888110dc4000 R08: ffffffffb1b0885a R09: fffffbfff6ba9078\n[ 78.670297][ T363] R10: 0000000000000003 R11: ffff888110e31c80 R12: 0000001880000000\n[ 78.670560][ T363] R13: ffff888110dc4150 R14: ffff888110dc42b8 R15: 0000000000000200\n[ 78.670814][ T363] FS: 00007f66a8f09c40(0000) GS:ffff888163428000(0000) knlGS:0000000000000000\n[ 78.671110][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 78.671324][ T363] CR2: 000055db4c6a30a8 CR3: 000000010da67000 CR4: 0000000000750ef0\n[ 78.671585][ T363] PKRU: 55555554\n[ 78.671713][ T363] Call Trace:\n[ 78.671843][ T363] \u003cTASK\u003e\n[ 78.671936][ T363] ? __pfx_qfq_dequeue+0x10/0x10 [sch_qfq]\n[ 78.672148][ T363] ? __pfx__printk+0x10/0x10\n[ 78.672322][ T363] ? srso_alias_return_thunk+0x5/0xfbef5\n[ 78.672496][ T363] ? lockdep_hardirqs_on_prepare+0xa8/0x1a0\n[ 78.672706][ T363] ? srso_alias_return_thunk+0x5/0xfbef5\n[ 78.672875][ T363] ? trace_hardirqs_on+0x19/0x1a0\n[ 78.673047][ T363] red_dequeue+0x65/0x270 [sch_red]\n[ 78.673217][ T363] ? srso_alias_return_thunk+0x5/0xfbef5\n[ 78.673385][ T363] tbf_dequeue.cold+0xb0/0x70c [sch_tbf]\n[ 78.673566][ T363] __qdisc_run+0x169/0x1900\n\nThe right thing to do in #1b is to grab the skb off gso_skb queue.\nThis patchset fixes that issue by changing #1b to use qdisc_dequeue_peeked()\nmethod instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43496",
"url": "https://www.suse.com/security/cve/CVE-2026-43496"
},
{
"category": "external",
"summary": "SUSE Bug 1266000 for CVE-2026-43496",
"url": "https://bugzilla.suse.com/1266000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-43496"
},
{
"cve": "CVE-2026-43497",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43497"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free\n\ndlfb_ops_mmap() uses remap_pfn_range() to map vmalloc framebuffer pages\nto userspace but sets no vm_ops on the VMA. This means the kernel cannot\ntrack active mmaps. When dlfb_realloc_framebuffer() replaces the backing\nbuffer via FBIOPUT_VSCREENINFO, existing mmap PTEs are not invalidated.\nOn USB disconnect, dlfb_ops_destroy() calls vfree() on the old pages\nwhile userspace PTEs still reference them, resulting in a use-after-free:\nthe process retains read/write access to freed kernel pages.\n\nAdd vm_operations_struct with open/close callbacks that maintain an\natomic mmap_count on struct dlfb_data. In dlfb_realloc_framebuffer(),\ncheck mmap_count and return -EBUSY if the buffer is currently mapped,\npreventing buffer replacement while userspace holds stale PTEs.\n\nTested with PoC using dummy_hcd + raw_gadget USB device emulation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43497",
"url": "https://www.suse.com/security/cve/CVE-2026-43497"
},
{
"category": "external",
"summary": "SUSE Bug 1266003 for CVE-2026-43497",
"url": "https://bugzilla.suse.com/1266003"
},
{
"category": "external",
"summary": "SUSE Bug 1266013 for CVE-2026-43497",
"url": "https://bugzilla.suse.com/1266013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-43497"
},
{
"cve": "CVE-2026-45834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45834"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()\n\nAdd the same NULL guard already present in\nl2cap_sock_resume_cb() and l2cap_sock_ready_cb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45834",
"url": "https://www.suse.com/security/cve/CVE-2026-45834"
},
{
"category": "external",
"summary": "SUSE Bug 1266412 for CVE-2026-45834",
"url": "https://bugzilla.suse.com/1266412"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45834"
},
{
"cve": "CVE-2026-45835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45835"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()\n\nAdd the same NULL guard already present in\nl2cap_sock_resume_cb() and l2cap_sock_ready_cb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45835",
"url": "https://www.suse.com/security/cve/CVE-2026-45835"
},
{
"category": "external",
"summary": "SUSE Bug 1266411 for CVE-2026-45835",
"url": "https://bugzilla.suse.com/1266411"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45835"
},
{
"cve": "CVE-2026-45839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45839"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()\n\nCO-RE accessor strings are colon-separated indices that describe a path\nfrom a root BTF type to a target field, e.g. \"0:1:2\" walks through\nnested struct members. bpf_core_parse_spec() parses each component with\nsscanf(\"%d\"), so negative values like -1 are silently accepted. The\nsubsequent bounds checks (access_idx \u003e= btf_vlen(t)) only guard the\nupper bound and always pass for negative values because C integer\npromotion converts the __u16 btf_vlen result to int, making the\ncomparison (int)(-1) \u003e= (int)(N) false for any positive N.\n\nWhen -1 reaches btf_member_bit_offset() it gets cast to u32 0xffffffff,\nproducing an out-of-bounds read far past the members array. A crafted\nBPF program with a negative CO-RE accessor on any struct that exists in\nvmlinux BTF (e.g. task_struct) crashes the kernel deterministically\nduring BPF_PROG_LOAD on any system with CONFIG_DEBUG_INFO_BTF=y\n(default on major distributions). The bug is reachable with CAP_BPF:\n\n BUG: unable to handle page fault for address: ffffed11818b6626\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n Oops: Oops: 0000 [#1] SMP KASAN NOPTI\n CPU: 0 UID: 0 PID: 85 Comm: poc Not tainted 7.0.0-rc6 #18 PREEMPT(full)\n RIP: 0010:bpf_core_parse_spec (tools/lib/bpf/relo_core.c:354)\n RAX: 00000000ffffffff\n Call Trace:\n \u003cTASK\u003e\n bpf_core_calc_relo_insn (tools/lib/bpf/relo_core.c:1321)\n bpf_core_apply (kernel/bpf/btf.c:9507)\n check_core_relo (kernel/bpf/verifier.c:19475)\n bpf_check (kernel/bpf/verifier.c:26031)\n bpf_prog_load (kernel/bpf/syscall.c:3089)\n __sys_bpf (kernel/bpf/syscall.c:6228)\n \u003c/TASK\u003e\n\nCO-RE accessor indices are inherently non-negative (struct member index,\narray element index, or enumerator index), so reject them immediately\nafter parsing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45839",
"url": "https://www.suse.com/security/cve/CVE-2026-45839"
},
{
"category": "external",
"summary": "SUSE Bug 1266399 for CVE-2026-45839",
"url": "https://bugzilla.suse.com/1266399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45839"
},
{
"cve": "CVE-2026-45851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45851"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: Fix reservation of unaccepted memory table\n\nThe reserve_unaccepted() function incorrectly calculates the size of the\nmemblock reservation for the unaccepted memory table. It aligns the\nsize of the table, but fails to account for cases where the table\u0027s\nstarting physical address (efi.unaccepted) is not page-aligned.\n\nIf the table starts at an offset within a page and its end crosses into\na subsequent page that the aligned size does not cover, the end of the\ntable will not be reserved. This can lead to the table being overwritten\nor inaccessible, causing a kernel panic in accept_memory().\n\nThis issue was observed when starting Intel TDX VMs with specific memory\nsizes (e.g., \u003e 64GB).\n\nFix this by calculating the end address first (including the unaligned\nstart) and then aligning it up, ensuring the entire range is covered\nby the reservation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45851",
"url": "https://www.suse.com/security/cve/CVE-2026-45851"
},
{
"category": "external",
"summary": "SUSE Bug 1266688 for CVE-2026-45851",
"url": "https://bugzilla.suse.com/1266688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45851"
},
{
"cve": "CVE-2026-45860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45860"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conncount: increase the connection clean up limit to 64\n\nAfter the optimization to only perform one GC per jiffy, a new problem\nwas introduced. If more than 8 new connections are tracked per jiffy the\nlist won\u0027t be cleaned up fast enough possibly reaching the limit\nwrongly.\n\nIn order to prevent this issue, only skip the GC if it was already\ntriggered during the same jiffy and the increment is lower than the\nclean up limit. In addition, increase the clean up limit to 64\nconnections to avoid triggering GC too often and do more effective GCs.\n\nThis has been tested using a HTTP server and several\nperformance tools while having nft_connlimit/xt_connlimit or OVS limit\nconfigured.\n\nOutput of slowhttptest + OVS limit at 52000 connections:\n\n slow HTTP test status on 340th second:\n initializing: 0\n pending: 432\n connected: 51998\n error: 0\n closed: 0\n service available: YES",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45860",
"url": "https://www.suse.com/security/cve/CVE-2026-45860"
},
{
"category": "external",
"summary": "SUSE Bug 1266710 for CVE-2026-45860",
"url": "https://bugzilla.suse.com/1266710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45860"
},
{
"cve": "CVE-2026-45867",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45867"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: act8945a: Fix use-after-free in power_supply_changed()\n\nUsing the `devm_` variant for requesting IRQ _before_ the `devm_`\nvariant for allocating/registering the `power_supply` handle, means that\nthe `power_supply` handle will be deallocated/unregistered _before_ the\ninterrupt handler (since `devm_` naturally deallocates in reverse\nallocation order). This means that during removal, there is a race\ncondition where an interrupt can fire just _after_ the `power_supply`\nhandle has been freed, *but* just _before_ the corresponding\nunregistration of the IRQ handler has run.\n\nThis will lead to the IRQ handler calling `power_supply_changed()` with\na freed `power_supply` handle. Which usually crashes the system or\notherwise silently corrupts the memory...\n\nNote that there is a similar situation which can also happen during\n`probe()`; the possibility of an interrupt firing _before_ registering\nthe `power_supply` handle. This would then lead to the nasty situation\nof using the `power_supply` handle *uninitialized* in\n`power_supply_changed()`.\n\nFix this racy use-after-free by making sure the IRQ is requested _after_\nthe registration of the `power_supply` handle.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45867",
"url": "https://www.suse.com/security/cve/CVE-2026-45867"
},
{
"category": "external",
"summary": "SUSE Bug 1268220 for CVE-2026-45867",
"url": "https://bugzilla.suse.com/1268220"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45867"
},
{
"cve": "CVE-2026-45868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45868"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: single: fix refcount leak in pcs_add_gpio_func()\n\nof_parse_phandle_with_args() returns a device_node pointer with refcount\nincremented in gpiospec.np. The loop iterates through all phandles but\nnever releases the reference, causing a refcount leak on each iteration.\n\nAdd of_node_put() calls to release the reference after extracting the\nneeded arguments and on the error path when devm_kzalloc() fails.\n\nThis bug was detected by our static analysis tool and verified by my\ncode review.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45868",
"url": "https://www.suse.com/security/cve/CVE-2026-45868"
},
{
"category": "external",
"summary": "SUSE Bug 1266741 for CVE-2026-45868",
"url": "https://bugzilla.suse.com/1266741"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45868"
},
{
"cve": "CVE-2026-45869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45869"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()\n\nIn `probe()`, `request_irq()` is called before allocating/registering a\n`power_supply` handle. If an interrupt is fired between the call to\n`request_irq()` and `power_supply_register()`, the `power_supply` handle\nwill be used uninitialized in `power_supply_changed()` in\n`wm97xx_bat_update()` (triggered from the interrupt handler). This will\nlead to a `NULL` pointer dereference since\n\nFix this racy `NULL` pointer dereference by making sure the IRQ is\nrequested _after_ the registration of the `power_supply` handle. Since\nthe IRQ is the last thing requests in the `probe()` now, remove the\nerror path for freeing it. Instead add one for unregistering the\n`power_supply` handle when IRQ request fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45869",
"url": "https://www.suse.com/security/cve/CVE-2026-45869"
},
{
"category": "external",
"summary": "SUSE Bug 1266467 for CVE-2026-45869",
"url": "https://bugzilla.suse.com/1266467"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45869"
},
{
"cve": "CVE-2026-45871",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45871"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: st33zp24: Fix missing cleanup on get_burstcount() error\n\nget_burstcount() can return -EBUSY on timeout. When this happens,\nst33zp24_send() returns directly without releasing the locality\nacquired earlier.\n\nUse goto out_err to ensure proper cleanup when get_burstcount() fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45871",
"url": "https://www.suse.com/security/cve/CVE-2026-45871"
},
{
"category": "external",
"summary": "SUSE Bug 1266755 for CVE-2026-45871",
"url": "https://bugzilla.suse.com/1266755"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45871"
},
{
"cve": "CVE-2026-45873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45873"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_rbtree: check for partial overlaps in anonymous sets\n\nUserspace provides an optimized representation in case intervals are\nadjacent, where the end element is omitted.\n\nThe existing partial overlap detection logic skips anonymous set checks\non start elements for this reason.\n\nHowever, it is possible to add intervals that overlap to this anonymous\nwhere two start elements with the same, eg. A-B, A-C where C \u003c B.\n\n start end\n\tA B\n start end\n A C\n\nRestore the check on overlapping start elements to report an overlap.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45873",
"url": "https://www.suse.com/security/cve/CVE-2026-45873"
},
{
"category": "external",
"summary": "SUSE Bug 1266715 for CVE-2026-45873",
"url": "https://bugzilla.suse.com/1266715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45873"
},
{
"cve": "CVE-2026-45875",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45875"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure\n\nThe wm5102_clear_write_sequencer() helper may return an error\nand just return, bypassing the cleanup sequence and causing\nregulators to remain enabled, leading to a resource leak.\n\nChange the direct return to jump to the err_reset label to\nproperly free the resources.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45875",
"url": "https://www.suse.com/security/cve/CVE-2026-45875"
},
{
"category": "external",
"summary": "SUSE Bug 1266707 for CVE-2026-45875",
"url": "https://bugzilla.suse.com/1266707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45875"
},
{
"cve": "CVE-2026-45877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45877"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients\n\nDuring a warm reset flow, the cl-\u003edevice pointer may be NULL if the\nreset occurs while clients are still being enumerated. Accessing\ncl-\u003edevice-\u003ereference_count without a NULL check leads to a kernel panic.\n\nThis issue was identified during multi-unit warm reboot stress clycles.\nAdd a defensive NULL check for cl-\u003edevice to ensure stability under\nsuch intensive testing conditions.\n\nKASAN: null-ptr-deref in range [0000000000000000-0000000000000007]\nWorkqueue: ish_fw_update_wq fw_reset_work_fn\n\nCall Trace:\n ishtp_bus_remove_all_clients+0xbe/0x130 [intel_ishtp]\n ishtp_reset_handler+0x85/0x1a0 [intel_ishtp]\n fw_reset_work_fn+0x8a/0xc0 [intel_ish_ipc]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45877",
"url": "https://www.suse.com/security/cve/CVE-2026-45877"
},
{
"category": "external",
"summary": "SUSE Bug 1266468 for CVE-2026-45877",
"url": "https://bugzilla.suse.com/1266468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45877"
},
{
"cve": "CVE-2026-45879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45879"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: bq25980: Fix use-after-free in power_supply_changed()\n\nUsing the `devm_` variant for requesting IRQ _before_ the `devm_`\nvariant for allocating/registering the `power_supply` handle, means that\nthe `power_supply` handle will be deallocated/unregistered _before_ the\ninterrupt handler (since `devm_` naturally deallocates in reverse\nallocation order). This means that during removal, there is a race\ncondition where an interrupt can fire just _after_ the `power_supply`\nhandle has been freed, *but* just _before_ the corresponding\nunregistration of the IRQ handler has run.\n\nThis will lead to the IRQ handler calling `power_supply_changed()` with\na freed `power_supply` handle. Which usually crashes the system or\notherwise silently corrupts the memory...\n\nNote that there is a similar situation which can also happen during\n`probe()`; the possibility of an interrupt firing _before_ registering\nthe `power_supply` handle. This would then lead to the nasty situation\nof using the `power_supply` handle *uninitialized* in\n`power_supply_changed()`.\n\nFix this racy use-after-free by making sure the IRQ is requested _after_\nthe registration of the `power_supply` handle.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45879",
"url": "https://www.suse.com/security/cve/CVE-2026-45879"
},
{
"category": "external",
"summary": "SUSE Bug 1266703 for CVE-2026-45879",
"url": "https://bugzilla.suse.com/1266703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45879"
},
{
"cve": "CVE-2026-45880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45880"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails\n\nWhen vm_insert_page() fails in p2pmem_alloc_mmap(), p2pmem_alloc_mmap()\ndoesn\u0027t invoke percpu_ref_put() to free the per-CPU ref of pgmap acquired\nafter gen_pool_alloc_owner(), and memunmap_pages() will hang forever when\ntrying to remove the PCI device.\n\nFix it by adding the missed percpu_ref_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45880",
"url": "https://www.suse.com/security/cve/CVE-2026-45880"
},
{
"category": "external",
"summary": "SUSE Bug 1268223 for CVE-2026-45880",
"url": "https://bugzilla.suse.com/1268223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45880"
},
{
"cve": "CVE-2026-45881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: mediatek: svs: Fix memory leak in svs_enable_debug_write()\n\nIn svs_enable_debug_write(), the buf allocated by memdup_user_nul()\nis leaked if kstrtoint() fails.\n\nFix this by using __free(kfree) to automatically free buf, eliminating\nthe need for explicit kfree() calls and preventing leaks.\n\n[Angelo: Added missing cleanup.h inclusion]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45881",
"url": "https://www.suse.com/security/cve/CVE-2026-45881"
},
{
"category": "external",
"summary": "SUSE Bug 1266721 for CVE-2026-45881",
"url": "https://bugzilla.suse.com/1266721"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45881"
},
{
"cve": "CVE-2026-45883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45883"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: sca3000: Fix a resource leak in sca3000_probe()\n\nspi-\u003eirq from request_threaded_irq() not released when\niio_device_register() fails. Add an return value check and jump to a\ncommon error handler when iio_device_register() fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45883",
"url": "https://www.suse.com/security/cve/CVE-2026-45883"
},
{
"category": "external",
"summary": "SUSE Bug 1266774 for CVE-2026-45883",
"url": "https://bugzilla.suse.com/1266774"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45883"
},
{
"cve": "CVE-2026-45885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45885"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: cpcap-battery: Fix use-after-free in power_supply_changed()\n\nUsing the `devm_` variant for requesting IRQ _before_ the `devm_`\nvariant for allocating/registering the `power_supply` handle, means that\nthe `power_supply` handle will be deallocated/unregistered _before_ the\ninterrupt handler (since `devm_` naturally deallocates in reverse\nallocation order). This means that during removal, there is a race\ncondition where an interrupt can fire just _after_ the `power_supply`\nhandle has been freed, *but* just _before_ the corresponding\nunregistration of the IRQ handler has run.\n\nThis will lead to the IRQ handler calling `power_supply_changed()` with\na freed `power_supply` handle. Which usually crashes the system or\notherwise silently corrupts the memory...\n\nNote that there is a similar situation which can also happen during\n`probe()`; the possibility of an interrupt firing _before_ registering\nthe `power_supply` handle. This would then lead to the nasty situation\nof using the `power_supply` handle *uninitialized* in\n`power_supply_changed()`.\n\nFix this racy use-after-free by making sure the IRQ is requested _after_\nthe registration of the `power_supply` handle.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45885",
"url": "https://www.suse.com/security/cve/CVE-2026-45885"
},
{
"category": "external",
"summary": "SUSE Bug 1266780 for CVE-2026-45885",
"url": "https://bugzilla.suse.com/1266780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45885"
},
{
"cve": "CVE-2026-45902",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45902"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: bq256xx: Fix use-after-free in power_supply_changed()\n\nUsing the `devm_` variant for requesting IRQ _before_ the `devm_`\nvariant for allocating/registering the `power_supply` handle, means that\nthe `power_supply` handle will be deallocated/unregistered _before_ the\ninterrupt handler (since `devm_` naturally deallocates in reverse\nallocation order). This means that during removal, there is a race\ncondition where an interrupt can fire just _after_ the `power_supply`\nhandle has been freed, *but* just _before_ the corresponding\nunregistration of the IRQ handler has run.\n\nThis will lead to the IRQ handler calling `power_supply_changed()` with\na freed `power_supply` handle. Which usually crashes the system or\notherwise silently corrupts the memory...\n\nNote that there is a similar situation which can also happen during\n`probe()`; the possibility of an interrupt firing _before_ registering\nthe `power_supply` handle. This would then lead to the nasty situation\nof using the `power_supply` handle *uninitialized* in\n`power_supply_changed()`.\n\nFix this racy use-after-free by making sure the IRQ is requested _after_\nthe registration of the `power_supply` handle.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45902",
"url": "https://www.suse.com/security/cve/CVE-2026-45902"
},
{
"category": "external",
"summary": "SUSE Bug 1266886 for CVE-2026-45902",
"url": "https://bugzilla.suse.com/1266886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45902"
},
{
"cve": "CVE-2026-45904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling\n\nThe recent commit 1010b4c012b0 (\"powerpc/eeh: Make EEH driver device\nhotplug safe\") restructured the EEH driver to improve synchronization\nwith the PCI hotplug layer.\n\nHowever, it inadvertently moved pci_lock_rescan_remove() outside its\nintended scope in eeh_handle_normal_event(), leading to broken PCI\nerror reporting and improper EEH event triggering. Specifically,\neeh_handle_normal_event() acquired pci_lock_rescan_remove() before\ncalling eeh_pe_bus_get(), but eeh_pe_bus_get() itself attempts to\nacquire the same lock internally, causing nested locking and disrupting\nnormal EEH event handling paths.\n\nThis patch adds a boolean parameter do_lock to _eeh_pe_bus_get(),\nwith two public wrappers:\n eeh_pe_bus_get() with locking enabled.\n eeh_pe_bus_get_nolock() that skips locking.\n\nCallers that already hold pci_lock_rescan_remove() now use\neeh_pe_bus_get_nolock() to avoid recursive lock acquisition.\n\nAdditionally, pci_lock_rescan_remove() calls are restored to the correct\nposition-after eeh_pe_bus_get() and immediately before iterating affected\nPEs and devices. This ensures EEH-triggered PCI removes occur under proper\nbus rescan locking without recursive lock contention.\n\nThe eeh_pe_loc_get() function has been split into two functions:\n eeh_pe_loc_get(struct eeh_pe *pe) which retrieves the loc for given PE.\n eeh_pe_loc_get_bus(struct pci_bus *bus) which retrieves the location\n code for given bus.\n\nThis resolves lockdep warnings such as:\n\u003csnip\u003e\n[ 84.964298] [ T928] ============================================\n[ 84.964304] [ T928] WARNING: possible recursive locking detected\n[ 84.964311] [ T928] 6.18.0-rc3 #51 Not tainted\n[ 84.964315] [ T928] --------------------------------------------\n[ 84.964320] [ T928] eehd/928 is trying to acquire lock:\n[ 84.964324] [ T928] c000000003b29d58 (pci_rescan_remove_lock){+.+.}-{3:3}, at: pci_lock_rescan_remove+0x28/0x40\n[ 84.964342] [ T928]\n but task is already holding lock:\n[ 84.964347] [ T928] c000000003b29d58 (pci_rescan_remove_lock){+.+.}-{3:3}, at: pci_lock_rescan_remove+0x28/0x40\n[ 84.964357] [ T928]\n other info that might help us debug this:\n[ 84.964363] [ T928] Possible unsafe locking scenario:\n\n[ 84.964367] [ T928] CPU0\n[ 84.964370] [ T928] ----\n[ 84.964373] [ T928] lock(pci_rescan_remove_lock);\n[ 84.964378] [ T928] lock(pci_rescan_remove_lock);\n[ 84.964383] [ T928]\n *** DEADLOCK ***\n\n[ 84.964388] [ T928] May be due to missing lock nesting notation\n\n[ 84.964393] [ T928] 1 lock held by eehd/928:\n[ 84.964397] [ T928] #0: c000000003b29d58 (pci_rescan_remove_lock){+.+.}-{3:3}, at: pci_lock_rescan_remove+0x28/0x40\n[ 84.964408] [ T928]\n stack backtrace:\n[ 84.964414] [ T928] CPU: 2 UID: 0 PID: 928 Comm: eehd Not tainted 6.18.0-rc3 #51 VOLUNTARY\n[ 84.964417] [ T928] Hardware name: IBM,9080-HEX POWER10 (architected) 0x800200 0xf000006 of:IBM,FW1060.00 (NH1060_022) hv:phyp pSeries\n[ 84.964419] [ T928] Call Trace:\n[ 84.964420] [ T928] [c0000011a7157990] [c000000001705de4] dump_stack_lvl+0xc8/0x130 (unreliable)\n[ 84.964424] [ T928] [c0000011a71579d0] [c0000000002f66e0] print_deadlock_bug+0x430/0x440\n[ 84.964428] [ T928] [c0000011a7157a70] [c0000000002fd0c0] __lock_acquire+0x1530/0x2d80\n[ 84.964431] [ T928] [c0000011a7157ba0] [c0000000002fea54] lock_acquire+0x144/0x410\n[ 84.964433] [ T928] [c0000011a7157cb0] [c0000011a7157cb0] __mutex_lock+0xf4/0x1050\n[ 84.964436] [ T928] [c0000011a7157e00] [c000000000de21d8] pci_lock_rescan_remove+0x28/0x40\n[ 84.964439] [ T928] [c0000011a7157e20] [c00000000004ed98] eeh_pe_bus_get+0x48/0xc0\n[ 84.964442] [ T928] [c0000011a7157e50] [c00000\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45904",
"url": "https://www.suse.com/security/cve/CVE-2026-45904"
},
{
"category": "external",
"summary": "SUSE Bug 1266890 for CVE-2026-45904",
"url": "https://bugzilla.suse.com/1266890"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45904"
},
{
"cve": "CVE-2026-45905",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45905"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: fix ip_rt_bug race in icmp_route_lookup reverse path\n\nicmp_route_lookup() performs multiple route lookups to find a suitable\nroute for sending ICMP error messages, with special handling for XFRM\n(IPsec) policies.\n\nThe lookup sequence is:\n1. First, lookup output route for ICMP reply (dst = original src)\n2. Pass through xfrm_lookup() for policy check\n3. If blocked (-EPERM) or dst is not local, enter \"reverse path\"\n4. In reverse path, call xfrm_decode_session_reverse() to get fl4_dec\n which reverses the original packet\u0027s flow (saddr\u003c-\u003edaddr swapped)\n5. If fl4_dec.saddr is local (we are the original destination), use\n __ip_route_output_key() for output route lookup\n6. If fl4_dec.saddr is NOT local (we are a forwarding node), use\n ip_route_input() to simulate the reverse packet\u0027s input path\n7. Finally, pass rt2 through xfrm_lookup() with XFRM_LOOKUP_ICMP flag\n\nThe bug occurs in step 6: ip_route_input() is called with fl4_dec.daddr\n(original packet\u0027s source) as destination. If this address becomes local\nbetween the initial check and ip_route_input() call (e.g., due to\nconcurrent \"ip addr add\"), ip_route_input() returns a LOCAL route with\ndst.output set to ip_rt_bug.\n\nThis route is then used for ICMP output, causing dst_output() to call\nip_rt_bug(), triggering a WARN_ON:\n\n ------------[ cut here ]------------\n WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x21/0x30, CPU#1\n Call Trace:\n \u003cTASK\u003e\n ip_push_pending_frames+0x202/0x240\n icmp_push_reply+0x30d/0x430\n __icmp_send+0x1149/0x24f0\n ip_options_compile+0xa2/0xd0\n ip_rcv_finish_core+0x829/0x1950\n ip_rcv+0x2d7/0x420\n __netif_receive_skb_one_core+0x185/0x1f0\n netif_receive_skb+0x90/0x450\n tun_get_user+0x3413/0x3fb0\n tun_chr_write_iter+0xe4/0x220\n ...\n\nFix this by checking rt2-\u003ert_type after ip_route_input(). If it\u0027s\nRTN_LOCAL, the route cannot be used for output, so treat it as an error.\n\nThe reproducer requires kernel modification to widen the race window,\nmaking it unsuitable as a selftest. It is available at:\n\n https://gist.github.com/mrpre/eae853b72ac6a750f5d45d64ddac1e81",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45905",
"url": "https://www.suse.com/security/cve/CVE-2026-45905"
},
{
"category": "external",
"summary": "SUSE Bug 1266685 for CVE-2026-45905",
"url": "https://bugzilla.suse.com/1266685"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45905"
},
{
"cve": "CVE-2026-45911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45911"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: cdns3: fix role switching during resume\n\nIf the role change while we are suspended, the cdns3 driver switches to the\nnew mode during resume. However, switching to host mode in this context\ncauses a NULL pointer dereference.\n\nThe host role\u0027s start() operation registers a xhci-hcd device, but its\nprobe is deferred while we are in the resume path. The host role\u0027s resume()\noperation assumes the xhci-hcd device is already probed, which is not the\ncase, leading to the dereference. Since the start() operation of the new\nrole is already called, the resume operation can be skipped.\n\nSo skip the resume operation for the new role if a role switch occurs\nduring resume. Once the resume sequence is complete, the xhci-hcd device\ncan be probed in case of host mode.\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000208\nMem abort info:\n...\nData abort info:\n...\n[0000000000000208] pgd=0000000000000000, p4d=0000000000000000\nInternal error: Oops: 0000000096000004 [#1] SMP\nModules linked in:\nCPU: 0 UID: 0 PID: 146 Comm: sh Not tainted\n6.19.0-rc7-00013-g6e64f4aabfae-dirty #135 PREEMPT\nHardware name: Texas Instruments J7200 EVM (DT)\npstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : usb_hcd_is_primary_hcd+0x0/0x1c\nlr : cdns_host_resume+0x24/0x5c\n...\nCall trace:\n usb_hcd_is_primary_hcd+0x0/0x1c (P)\n cdns_resume+0x6c/0xbc\n cdns3_controller_resume.isra.0+0xe8/0x17c\n cdns3_plat_resume+0x18/0x24\n platform_pm_resume+0x2c/0x68\n dpm_run_callback+0x90/0x248\n device_resume+0x100/0x24c\n dpm_resume+0x190/0x2ec\n dpm_resume_end+0x18/0x34\n suspend_devices_and_enter+0x2b0/0xa44\n pm_suspend+0x16c/0x5fc\n state_store+0x80/0xec\n kobj_attr_store+0x18/0x2c\n sysfs_kf_write+0x7c/0x94\n kernfs_fop_write_iter+0x130/0x1dc\n vfs_write+0x240/0x370\n ksys_write+0x70/0x108\n __arm64_sys_write+0x1c/0x28\n invoke_syscall+0x48/0x10c\n el0_svc_common.constprop.0+0x40/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x34/0x108\n el0t_64_sync_handler+0xa0/0xe4\n el0t_64_sync+0x198/0x19c\nCode: 52800003 f9407ca5 d63f00a0 17ffffe4 (f9410401)\n---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45911",
"url": "https://www.suse.com/security/cve/CVE-2026-45911"
},
{
"category": "external",
"summary": "SUSE Bug 1266898 for CVE-2026-45911",
"url": "https://bugzilla.suse.com/1266898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45911"
},
{
"cve": "CVE-2026-45913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mcast: always update mdb_n_entries for vlan contexts\n\nsyzbot triggered a warning[1] about the number of mdb entries in a context.\nIt turned out that there are multiple ways to trigger that warning today\n(some got added during the years), the root cause of the problem is that\nthe increase is done conditionally, and over the years these different\nconditions increased so there were new ways to trigger the warning, that is\nto do a decrease which wasn\u0027t paired with a previous increase.\n\nFor example one way to trigger it is with flush:\n $ ip l add br0 up type bridge vlan_filtering 1 mcast_snooping 1\n $ ip l add dumdum up master br0 type dummy\n $ bridge mdb add dev br0 port dumdum grp 239.0.0.1 permanent vid 1\n $ ip link set dev br0 down\n $ ip link set dev br0 type bridge mcast_vlan_snooping 1\n ^^^^ this will enable snooping, but will not update mdb_n_entries\n because in __br_multicast_enable_port_ctx() we check !netif_running\n $ bridge mdb flush dev br0\n ^^^ this will trigger the warning because it will delete the pg which\n we added above, which will try to decrease mdb_n_entries\n\nFix the problem by removing the conditional increase and always keep the\ncount up-to-date while the vlan exists. In order to do that we have to\nfirst initialize it on port-vlan context creation, and then always increase\nor decrease the value regardless of mcast options. To keep the current\nbehaviour we have to enforce the mdb limit only if the context is port\u0027s or\nif the port-vlan\u0027s mcast snooping is enabled.\n\n[1]\n ------------[ cut here ]------------\n n == 0\n WARNING: net/bridge/br_multicast.c:718 at br_multicast_port_ngroups_dec_one net/bridge/br_multicast.c:718 [inline], CPU#0: syz.4.4607/22043\n WARNING: net/bridge/br_multicast.c:718 at br_multicast_port_ngroups_dec net/bridge/br_multicast.c:771 [inline], CPU#0: syz.4.4607/22043\n WARNING: net/bridge/br_multicast.c:718 at br_multicast_del_pg+0x1bbe/0x1e20 net/bridge/br_multicast.c:825, CPU#0: syz.4.4607/22043\n Modules linked in:\n CPU: 0 UID: 0 PID: 22043 Comm: syz.4.4607 Not tainted syzkaller #0 PREEMPT(full)\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026\n RIP: 0010:br_multicast_port_ngroups_dec_one net/bridge/br_multicast.c:718 [inline]\n RIP: 0010:br_multicast_port_ngroups_dec net/bridge/br_multicast.c:771 [inline]\n RIP: 0010:br_multicast_del_pg+0x1bbe/0x1e20 net/bridge/br_multicast.c:825\n Code: 41 5f 5d e9 04 7a 48 f7 e8 3f 73 5c f7 90 0f 0b 90 e9 cf fd ff ff e8 31 73 5c f7 90 0f 0b 90 e9 16 fd ff ff e8 23 73 5c f7 90 \u003c0f\u003e 0b 90 e9 60 fd ff ff e8 15 73 5c f7 eb 05 e8 0e 73 5c f7 48 8b\n RSP: 0018:ffffc9000c207220 EFLAGS: 00010293\n RAX: ffffffff8a68042d RBX: ffff88807c6f1800 RCX: ffff888066e90000\n RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000\n RBP: 0000000000000000 R08: ffff888066e90000 R09: 000000000000000c\n R10: 000000000000000c R11: 0000000000000000 R12: ffff8880303ef800\n R13: dffffc0000000000 R14: ffff888050eb11c4 R15: 1ffff1100a1d6238\n FS: 00007fa45921b6c0(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007fa4591f9ff8 CR3: 0000000081df2000 CR4: 00000000003526f0\n Call Trace:\n \u003cTASK\u003e\n br_mdb_flush_pgs net/bridge/br_mdb.c:1525 [inline]\n br_mdb_flush net/bridge/br_mdb.c:1544 [inline]\n br_mdb_del_bulk+0x5e2/0xb20 net/bridge/br_mdb.c:1561\n rtnl_mdb_del+0x48a/0x640 net/core/rtnetlink.c:-1\n rtnetlink_rcv_msg+0x77e/0xbe0 net/core/rtnetlink.c:6967\n netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550\n netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]\n netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344\n netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894\n sock_sendmsg_nosec net/socket.c:727 [inline]\n __sock_sendmsg net/socket.c:742 [inline]\n ____sys_sendmsg+0xa68/0xad0 net/socket.c:2592\n ___sys_sendmsg+0x2a5/0x360 net/socke\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45913",
"url": "https://www.suse.com/security/cve/CVE-2026-45913"
},
{
"category": "external",
"summary": "SUSE Bug 1266891 for CVE-2026-45913",
"url": "https://bugzilla.suse.com/1266891"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45913"
},
{
"cve": "CVE-2026-45914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45914"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"hwmon: (ibmpex) fix use-after-free in high/low store\"\n\nThis reverts commit 6946c726c3f4c36f0f049e6f97e88c510b15f65d.\n\nJean Delvare points out that the patch does not completely\nfix the reported problem, that it in fact introduces a\n(new) race condition, and that it may actually not be needed in\nthe first place.\n\nVarious AI reviews agree. Specific and relevant AI feedback:\n\n\"\nThis reordering sets the driver data to NULL before removing the sensor\nattributes in the loop below.\n\nibmpex_show_sensor() retrieves this driver data via dev_get_drvdata() but\ndoes not check if it is NULL before dereferencing it to access\ndata-\u003esensors[].\n\nIf a userspace process reads a sensor file (like temp1_input) while this\ndelete function is running, could it race with the dev_set_drvdata(...,\nNULL) call here and crash in ibmpex_show_sensor()?\n\nWould it be safer to keep the original order where device_remove_file() is\ncalled before clearing the driver data? device_remove_file() should wait\nfor any active sysfs callbacks to complete, which might already prevent the\nuse-after-free this patch intends to fix.\n\"\n\nRevert the offending patch. If it can be shown that the originally reported\nalleged race condition does indeed exist, it can always be re-introduced\nwith a complete fix.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45914",
"url": "https://www.suse.com/security/cve/CVE-2026-45914"
},
{
"category": "external",
"summary": "SUSE Bug 1266884 for CVE-2026-45914",
"url": "https://bugzilla.suse.com/1266884"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45914"
},
{
"cve": "CVE-2026-45915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45915"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfat: avoid parent link count underflow in rmdir\n\nCorrupted FAT images can leave a directory inode with an incorrect\ni_nlink (e.g. 2 even though subdirectories exist). rmdir then\nunconditionally calls drop_nlink(dir) and can drive i_nlink to 0,\ntriggering the WARN_ON in drop_nlink().\n\nAdd a sanity check in vfat_rmdir() and msdos_rmdir(): only drop the\nparent link count when it is at least 3, otherwise report a filesystem\nerror.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45915",
"url": "https://www.suse.com/security/cve/CVE-2026-45915"
},
{
"category": "external",
"summary": "SUSE Bug 1266896 for CVE-2026-45915",
"url": "https://bugzilla.suse.com/1266896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45915"
},
{
"cve": "CVE-2026-45916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: sbs-battery: Fix use-after-free in power_supply_changed()\n\nUsing the `devm_` variant for requesting IRQ _before_ the `devm_`\nvariant for allocating/registering the `power_supply` handle, means that\nthe `power_supply` handle will be deallocated/unregistered _before_ the\ninterrupt handler (since `devm_` naturally deallocates in reverse\nallocation order). This means that during removal, there is a race\ncondition where an interrupt can fire just _after_ the `power_supply`\nhandle has been freed, *but* just _before_ the corresponding\nunregistration of the IRQ handler has run.\n\nThis will lead to the IRQ handler calling `power_supply_changed()` with\na freed `power_supply` handle. Which usually crashes the system or\notherwise silently corrupts the memory...\n\nNote that there is a similar situation which can also happen during\n`probe()`; the possibility of an interrupt firing _before_ registering\nthe `power_supply` handle. This would then lead to the nasty situation\nof using the `power_supply` handle *uninitialized* in\n`power_supply_changed()`.\n\nFix this racy use-after-free by making sure the IRQ is requested _after_\nthe registration of the `power_supply` handle. Keep the old behavior of\njust printing a warning in case of any failures during the IRQ request\nand finishing the probe successfully.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45916",
"url": "https://www.suse.com/security/cve/CVE-2026-45916"
},
{
"category": "external",
"summary": "SUSE Bug 1266679 for CVE-2026-45916",
"url": "https://bugzilla.suse.com/1266679"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45916"
},
{
"cve": "CVE-2026-45917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45917"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: do not keep dest_dst if dev is going down\n\nThere is race between the netdev notifier ip_vs_dst_event()\nand the code that caches dst with dev that is going down.\nAs the FIB can be notified for the closed device after our\nhandler finishes, it is possible valid route to be returned\nand cached resuling in a leaked dev reference until the dest\nis not removed.\n\nTo prevent new dest_dst to be attached to dest just after the\nhandler dropped the old one, add a netif_running() check\nto make sure the notifier handler is not currently running\nfor device that is closing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45917",
"url": "https://www.suse.com/security/cve/CVE-2026-45917"
},
{
"category": "external",
"summary": "SUSE Bug 1266900 for CVE-2026-45917",
"url": "https://bugzilla.suse.com/1266900"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45917"
},
{
"cve": "CVE-2026-45919",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45919"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/rt: Skip currently executing CPU in rto_next_cpu()\n\nCPU0 becomes overloaded when hosting a CPU-bound RT task, a non-CPU-bound\nRT task, and a CFS task stuck in kernel space. When other CPUs switch from\nRT to non-RT tasks, RT load balancing (LB) is triggered; with\nHAVE_RT_PUSH_IPI enabled, they send IPIs to CPU0 to drive the execution\nof rto_push_irq_work_func. During push_rt_task on CPU0,\nif next_task-\u003eprio \u003c rq-\u003edonor-\u003eprio, resched_curr() sets NEED_RESCHED\nand after the push operation completes, CPU0 calls rto_next_cpu().\nSince only CPU0 is overloaded in this scenario, rto_next_cpu() should\nideally return -1 (no further IPI needed).\n\nHowever, multiple CPUs invoking tell_cpu_to_push() during LB increments\nrd-\u003erto_loop_next. Even when rd-\u003erto_cpu is set to -1, the mismatch between\nrd-\u003erto_loop and rd-\u003erto_loop_next forces rto_next_cpu() to restart its\nsearch from -1. With CPU0 remaining overloaded (satisfying rt_nr_migratory\n\u0026\u0026 rt_nr_total \u003e 1), it gets reselected, causing CPU0 to queue irq_work to\nitself and send self-IPIs repeatedly. As long as CPU0 stays overloaded and\nother CPUs run pull_rt_tasks(), it falls into an infinite self-IPI loop,\nwhich triggers a CPU hardlockup due to continuous self-interrupts.\n\nThe trigging scenario is as follows:\n\n cpu0 cpu1 cpu2\n pull_rt_task\n tell_cpu_to_push\n \u003c------------irq_work_queue_on\nrto_push_irq_work_func\n push_rt_task\n resched_curr(rq) pull_rt_task\n rto_next_cpu tell_cpu_to_push\n \u003c-------------------------- atomic_inc(rto_loop_next)\nrd-\u003erto_loop != next\n rto_next_cpu\n irq_work_queue_on\nrto_push_irq_work_func\n\nFix redundant self-IPI by filtering the initiating CPU in rto_next_cpu().\nThis solution has been verified to effectively eliminate spurious self-IPIs\nand prevent CPU hardlockup scenarios.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45919",
"url": "https://www.suse.com/security/cve/CVE-2026-45919"
},
{
"category": "external",
"summary": "SUSE Bug 1266777 for CVE-2026-45919",
"url": "https://bugzilla.suse.com/1266777"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45919"
},
{
"cve": "CVE-2026-45921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45921"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()\n\nThe function mtd_parser_tplink_safeloader_parse() allocates buf via\nmtd_parser_tplink_safeloader_read_table(). If the allocation for\nparts[idx].name fails inside the loop, the code jumps to the err_free\nlabel without freeing buf, leading to a memory leak.\n\nFix this by freeing the temporary buffer buf in the err_free label.\n\nCompile tested only. Issue found using a prototype static analysis tool\nand code review.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45921",
"url": "https://www.suse.com/security/cve/CVE-2026-45921"
},
{
"category": "external",
"summary": "SUSE Bug 1266806 for CVE-2026-45921",
"url": "https://bugzilla.suse.com/1266806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-45921"
},
{
"cve": "CVE-2026-45923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45923"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: catc: enable basic endpoint checking\n\ncatc_probe() fills three URBs with hardcoded endpoint pipes without\nverifying the endpoint descriptors:\n\n - usb_sndbulkpipe(usbdev, 1) and usb_rcvbulkpipe(usbdev, 1) for TX/RX\n - usb_rcvintpipe(usbdev, 2) for interrupt status\n\nA malformed USB device can present these endpoints with transfer types\nthat differ from what the driver assumes.\n\nAdd a catc_usb_ep enum for endpoint numbers, replacing magic constants\nthroughout. Add usb_check_bulk_endpoints() and usb_check_int_endpoints()\ncalls after usb_set_interface() to verify endpoint types before use,\nrejecting devices with mismatched descriptors at probe time.\n\nSimilar to\n- commit 90b7f2961798 (\"net: usb: rtl8150: enable basic endpoint checking\")\nwhich fixed the issue in rtl8150.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45923",
"url": "https://www.suse.com/security/cve/CVE-2026-45923"
},
{
"category": "external",
"summary": "SUSE Bug 1266894 for CVE-2026-45923",
"url": "https://bugzilla.suse.com/1266894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45923"
},
{
"cve": "CVE-2026-45936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45936"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: goldfish: Fix use-after-free in power_supply_changed()\n\nUsing the `devm_` variant for requesting IRQ _before_ the `devm_`\nvariant for allocating/registering the `power_supply` handle, means that\nthe `power_supply` handle will be deallocated/unregistered _before_ the\ninterrupt handler (since `devm_` naturally deallocates in reverse\nallocation order). This means that during removal, there is a race\ncondition where an interrupt can fire just _after_ the `power_supply`\nhandle has been freed, *but* just _before_ the corresponding\nunregistration of the IRQ handler has run.\n\nThis will lead to the IRQ handler calling `power_supply_changed()` with\na freed `power_supply` handle. Which usually crashes the system or\notherwise silently corrupts the memory...\n\nNote that there is a similar situation which can also happen during\n`probe()`; the possibility of an interrupt firing _before_ registering\nthe `power_supply` handle. This would then lead to the nasty situation\nof using the `power_supply` handle *uninitialized* in\n`power_supply_changed()`.\n\nFix this racy use-after-free by making sure the IRQ is requested _after_\nthe registration of the `power_supply` handle.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45936",
"url": "https://www.suse.com/security/cve/CVE-2026-45936"
},
{
"category": "external",
"summary": "SUSE Bug 1266947 for CVE-2026-45936",
"url": "https://bugzilla.suse.com/1266947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45936"
},
{
"cve": "CVE-2026-45941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45941"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure\n\nget_burstcount() can return -EBUSY on timeout. When this happens, the\nfunction returns directly without releasing the locality that was\nacquired at the beginning of tpm_tis_i2c_send().\n\nUse goto out_err to ensure proper cleanup when get_burstcount() fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45941",
"url": "https://www.suse.com/security/cve/CVE-2026-45941"
},
{
"category": "external",
"summary": "SUSE Bug 1266920 for CVE-2026-45941",
"url": "https://bugzilla.suse.com/1266920"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45941"
},
{
"cve": "CVE-2026-45944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45944"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Clear Present bit before tearing down context entry\n\nWhen tearing down a context entry, the current implementation zeros the\nentire 128-bit entry using multiple 64-bit writes. This creates a window\nwhere the hardware can fetch a \"torn\" entry - where some fields are\nalready zeroed while the \u0027Present\u0027 bit is still set - leading to\nunpredictable behavior or spurious faults.\n\nWhile x86 provides strong write ordering, the compiler may reorder writes\nto the two 64-bit halves of the context entry. Even without compiler\nreordering, the hardware fetch is not guaranteed to be atomic with\nrespect to multiple CPU writes.\n\nAlign with the \"Guidance to Software for Invalidations\" in the VT-d spec\n(Section 6.5.3.3) by implementing the recommended ownership handshake:\n\n1. Clear only the \u0027Present\u0027 (P) bit of the context entry first to\n signal the transition of ownership from hardware to software.\n2. Use dma_wmb() to ensure the cleared bit is visible to the IOMMU.\n3. Perform the required cache and context-cache invalidation to ensure\n hardware no longer has cached references to the entry.\n4. Fully zero out the entry only after the invalidation is complete.\n\nAlso, add a dma_wmb() to context_set_present() to ensure the entry\nis fully initialized before the \u0027Present\u0027 bit becomes visible.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45944",
"url": "https://www.suse.com/security/cve/CVE-2026-45944"
},
{
"category": "external",
"summary": "SUSE Bug 1267203 for CVE-2026-45944",
"url": "https://bugzilla.suse.com/1267203"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45944"
},
{
"cve": "CVE-2026-45946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45946"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: ab8500: Fix use-after-free in power_supply_changed()\n\nUsing the `devm_` variant for requesting IRQ _before_ the `devm_`\nvariant for allocating/registering the `power_supply` handle, means that\nthe `power_supply` handle will be deallocated/unregistered _before_ the\ninterrupt handler (since `devm_` naturally deallocates in reverse\nallocation order). This means that during removal, there is a race\ncondition where an interrupt can fire just _after_ the `power_supply`\nhandle has been freed, *but* just _before_ the corresponding\nunregistration of the IRQ handler has run.\n\nThis will lead to the IRQ handler calling `power_supply_changed()` with\na freed `power_supply` handle. Which usually crashes the system or\notherwise silently corrupts the memory...\n\nNote that there is a similar situation which can also happen during\n`probe()`; the possibility of an interrupt firing _before_ registering\nthe `power_supply` handle. This would then lead to the nasty situation\nof using the `power_supply` handle *uninitialized* in\n`power_supply_changed()`.\n\nCommit 1c1f13a006ed (\"power: supply: ab8500: Move to componentized\nbinding\") introduced this issue during a refactorization. Fix this racy\nuse-after-free by making sure the IRQ is requested _after_ the\nregistration of the `power_supply` handle.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45946",
"url": "https://www.suse.com/security/cve/CVE-2026-45946"
},
{
"category": "external",
"summary": "SUSE Bug 1268221 for CVE-2026-45946",
"url": "https://bugzilla.suse.com/1268221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45946"
},
{
"cve": "CVE-2026-45947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45947"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()\n\nIn amdgpu_acpi_enumerate_xcc(), if amdgpu_acpi_dev_init() returns -ENOMEM,\nthe function returns directly without releasing the allocated xcc_info,\nresulting in a memory leak.\n\nFix this by ensuring that xcc_info is properly freed in the error paths.\n\nCompile tested only. Issue found using a prototype static analysis tool\nand code review.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45947",
"url": "https://www.suse.com/security/cve/CVE-2026-45947"
},
{
"category": "external",
"summary": "SUSE Bug 1267198 for CVE-2026-45947",
"url": "https://bugzilla.suse.com/1267198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-45947"
},
{
"cve": "CVE-2026-45954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45954"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()\n\nIn au1200fb_drv_probe(), when platform_get_irq fails(), it directly\nreturns from the function with an error code, which causes a memory\nleak.\n\nReplace it with a goto label to ensure proper cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45954",
"url": "https://www.suse.com/security/cve/CVE-2026-45954"
},
{
"category": "external",
"summary": "SUSE Bug 1266939 for CVE-2026-45954",
"url": "https://bugzilla.suse.com/1266939"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-45954"
},
{
"cve": "CVE-2026-45963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45963"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: nau8821: Cancel delayed work on component remove\n\nAttempting to unload the driver while a jack detection work is pending\nwould likely crash the kernel when it is eventually scheduled for\nexecution:\n\n[ 1984.896308] BUG: unable to handle page fault for address: ffffffffc10c2a20\n[...]\n[ 1984.896388] Hardware name: Valve Jupiter/Jupiter, BIOS F7A0131 01/30/2024\n[ 1984.896396] Workqueue: events nau8821_jdet_work [snd_soc_nau8821]\n[ 1984.896414] RIP: 0010:__mutex_lock+0x9f/0x11d0\n[...]\n[ 1984.896504] Call Trace:\n[ 1984.896511] \u003cTASK\u003e\n[ 1984.896524] ? snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core]\n[ 1984.896572] ? snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core]\n[ 1984.896596] snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core]\n[ 1984.896622] nau8821_jdet_work+0xeb/0x1e0 [snd_soc_nau8821]\n[ 1984.896636] process_one_work+0x211/0x590\n[ 1984.896649] ? srso_return_thunk+0x5/0x5f\n[ 1984.896670] worker_thread+0x1cd/0x3a0\n\nCancel unscheduled jdet_work or wait for its execution to finish before\nthe component driver gets removed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45963",
"url": "https://www.suse.com/security/cve/CVE-2026-45963"
},
{
"category": "external",
"summary": "SUSE Bug 1267021 for CVE-2026-45963",
"url": "https://bugzilla.suse.com/1267021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45963"
},
{
"cve": "CVE-2026-45969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45969"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: playstation: Add missing check for input_ff_create_memless\n\nThe ps_gamepad_create() function calls input_ff_create_memless()\nwithout verifying its return value, which can lead to incorrect\nbehavior or potential crashes when FF effects are triggered.\n\nAdd a check for the return value of input_ff_create_memless().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45969",
"url": "https://www.suse.com/security/cve/CVE-2026-45969"
},
{
"category": "external",
"summary": "SUSE Bug 1266743 for CVE-2026-45969",
"url": "https://bugzilla.suse.com/1266743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45969"
},
{
"cve": "CVE-2026-45973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45973"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Fix UMR hang in LAG error state unload\n\nDuring firmware reset in LAG mode, a race condition causes the driver\nto hang indefinitely while waiting for UMR completion during device\nunload. See [1].\n\nIn LAG mode the bond device is only registered on the master, so it\nnever sees sys_error events from the slave.\nDuring firmware reset this causes UMR waits to hang forever on unload\nas the slave is dead but the master hasn\u0027t entered error state yet, so\nUMR posts succeed but completions never arrive.\n\nFix this by adding a sys_error notifier that gets registered before\nMLX5_IB_STAGE_IB_REG and stays alive until after ib_unregister_device().\nThis ensures error events reach the bond device throughout teardown.\n\n[1]\nCall Trace:\n __schedule+0x2bd/0x760\n schedule+0x37/0xa0\n schedule_preempt_disabled+0xa/0x10\n __mutex_lock.isra.6+0x2b5/0x4a0\n __mlx5_ib_dereg_mr+0x606/0x870 [mlx5_ib]\n ? __xa_erase+0x4a/0xa0\n ? _cond_resched+0x15/0x30\n ? wait_for_completion+0x31/0x100\n ib_dereg_mr_user+0x48/0xc0 [ib_core]\n ? rdmacg_uncharge_hierarchy+0xa0/0x100\n destroy_hw_idr_uobject+0x20/0x50 [ib_uverbs]\n uverbs_destroy_uobject+0x37/0x150 [ib_uverbs]\n __uverbs_cleanup_ufile+0xda/0x140 [ib_uverbs]\n uverbs_destroy_ufile_hw+0x3a/0xf0 [ib_uverbs]\n ib_uverbs_remove_one+0xc3/0x140 [ib_uverbs]\n remove_client_context+0x8b/0xd0 [ib_core]\n disable_device+0x8c/0x130 [ib_core]\n __ib_unregister_device+0x10d/0x180 [ib_core]\n ib_unregister_device+0x21/0x30 [ib_core]\n __mlx5_ib_remove+0x1e4/0x1f0 [mlx5_ib]\n auxiliary_bus_remove+0x1e/0x30\n device_release_driver_internal+0x103/0x1f0\n bus_remove_device+0xf7/0x170\n device_del+0x181/0x410\n mlx5_rescan_drivers_locked.part.10+0xa9/0x1d0 [mlx5_core]\n mlx5_disable_lag+0x253/0x260 [mlx5_core]\n mlx5_lag_disable_change+0x89/0xc0 [mlx5_core]\n mlx5_eswitch_disable+0x67/0xa0 [mlx5_core]\n mlx5_unload+0x15/0xd0 [mlx5_core]\n mlx5_unload_one+0x71/0xc0 [mlx5_core]\n mlx5_sync_reset_reload_work+0x83/0x100 [mlx5_core]\n process_one_work+0x1a7/0x360\n worker_thread+0x30/0x390\n ? create_worker+0x1a0/0x1a0\n kthread+0x116/0x130\n ? kthread_flush_work_fn+0x10/0x10\n ret_from_fork+0x22/0x40",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45973",
"url": "https://www.suse.com/security/cve/CVE-2026-45973"
},
{
"category": "external",
"summary": "SUSE Bug 1267025 for CVE-2026-45973",
"url": "https://bugzilla.suse.com/1267025"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45973"
},
{
"cve": "CVE-2026-45976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45976"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix memory leak in amdgpu_ras_init()\n\nWhen amdgpu_nbio_ras_sw_init() fails in amdgpu_ras_init(), the function\nreturns directly without freeing the allocated con structure, leading\nto a memory leak.\n\nFix this by jumping to the release_con label to properly clean up the\nallocated memory before returning the error code.\n\nCompile tested only. Issue found using a prototype static analysis tool\nand code review.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45976",
"url": "https://www.suse.com/security/cve/CVE-2026-45976"
},
{
"category": "external",
"summary": "SUSE Bug 1267027 for CVE-2026-45976",
"url": "https://bugzilla.suse.com/1267027"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-45976"
},
{
"cve": "CVE-2026-45981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45981"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cio: Fix device lifecycle handling in css_alloc_subchannel()\n\n`css_alloc_subchannel()` calls `device_initialize()` before setting up\nthe DMA masks. If `dma_set_coherent_mask()` or `dma_set_mask()` fails,\nthe error path frees the subchannel structure directly, bypassing\nthe device model reference counting.\n\nOnce `device_initialize()` has been called, the embedded struct device\nmust be released via `put_device()`, allowing the release callback to\nfree the container structure.\n\nFix the error path by dropping the initial device reference with\n`put_device()` instead of calling `kfree()` directly.\n\nThis ensures correct device lifetime handling and avoids potential\nuse-after-free or double-free issues.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45981",
"url": "https://www.suse.com/security/cve/CVE-2026-45981"
},
{
"category": "external",
"summary": "SUSE Bug 1267204 for CVE-2026-45981",
"url": "https://bugzilla.suse.com/1267204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45981"
},
{
"cve": "CVE-2026-45982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45982"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch()\n\nCover a missed execution path with a new check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45982",
"url": "https://www.suse.com/security/cve/CVE-2026-45982"
},
{
"category": "external",
"summary": "SUSE Bug 1266872 for CVE-2026-45982",
"url": "https://bugzilla.suse.com/1266872"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45982"
},
{
"cve": "CVE-2026-45986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45986"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccree - fix a memory leak in cc_mac_digest()\n\nAdd cc_unmap_result() if cc_map_hash_request_final()\nfails to prevent potential memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45986",
"url": "https://www.suse.com/security/cve/CVE-2026-45986"
},
{
"category": "external",
"summary": "SUSE Bug 1266739 for CVE-2026-45986",
"url": "https://bugzilla.suse.com/1266739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45986"
},
{
"cve": "CVE-2026-45994",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45994"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nibmasm: fix OOB reads in command_file_write due to missing size checks\n\nThe command_file_write() handler allocates a kernel buffer of exactly\ncount bytes and copies user data into it, but does not validate the\nbuffer against the dot command protocol before passing it to\nget_dot_command_size() and get_dot_command_timeout().\n\nSince both the allocation size (count) and the header fields (command_size,\ndata_size) are independently user-controlled, an attacker can cause\nget_dot_command_size() to return a value exceeding the allocation,\ntriggering OOB reads in get_dot_command_timeout() and an out-of-bounds\nmemcpy_toio() that leaks kernel heap memory to the service processor.\n\nFix with two guards: reject writes smaller than sizeof(struct\ndot_command_header) before allocation, then after copying user data\nreject commands where the buffer is smaller than the total size declared\nby the header (sizeof(header) + command_size + data_size). This ensures\nall subsequent header and payload field accesses stay within the buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45994",
"url": "https://www.suse.com/security/cve/CVE-2026-45994"
},
{
"category": "external",
"summary": "SUSE Bug 1267432 for CVE-2026-45994",
"url": "https://bugzilla.suse.com/1267432"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45994"
},
{
"cve": "CVE-2026-45996",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45996"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: imx: fix use-after-free on unbind\n\nThe SPI subsystem frees the controller and any subsystem allocated\ndriver data as part of deregistration (unless the allocation is device\nmanaged).\n\nTake another reference before deregistering the controller so that the\ndriver data is not freed until the driver is done with it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45996",
"url": "https://www.suse.com/security/cve/CVE-2026-45996"
},
{
"category": "external",
"summary": "SUSE Bug 1267436 for CVE-2026-45996",
"url": "https://bugzilla.suse.com/1267436"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-45996"
},
{
"cve": "CVE-2026-46003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46003"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: qrtr: ns: Limit the total number of nodes\n\nCurrently, the nameserver doesn\u0027t limit the number of nodes it handles.\nThis can be an attack vector if a malicious client starts registering\nrandom nodes, leading to memory exhaustion.\n\nHence, limit the maximum number of nodes to 64. Note that, limit of 64 is\nchosen based on the current platform requirements. If requirement changes\nin the future, this limit can be increased.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46003",
"url": "https://www.suse.com/security/cve/CVE-2026-46003"
},
{
"category": "external",
"summary": "SUSE Bug 1267210 for CVE-2026-46003",
"url": "https://bugzilla.suse.com/1267210"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46003"
},
{
"cve": "CVE-2026-46006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46006"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: fix u32 overflow in pushbuf reloc bounds check\n\nnouveau_gem_pushbuf_reloc_apply() validates each relocation with\n\n if (r-\u003ereloc_bo_offset + 4 \u003e nvbo-\u003ebo.base.size)\n\nbut reloc_bo_offset is __u32 (uapi/drm/nouveau_drm.h) and the integer\nliteral 4 promotes to unsigned int, so the addition is performed in 32\nbits and wraps before the comparison against the size_t bo size.\n\nCast to u64 so the addition happens in 64-bit arithmetic.\n\n[ Add Fixes: tag. - Danilo ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46006",
"url": "https://www.suse.com/security/cve/CVE-2026-46006"
},
{
"category": "external",
"summary": "SUSE Bug 1267479 for CVE-2026-46006",
"url": "https://bugzilla.suse.com/1267479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46006"
},
{
"cve": "CVE-2026-46009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46009"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown\n\nepf_ntb_epc_destroy() duplicates the teardown that the caller is\nsupposed to do later. This leads to an oops when .allow_link fails or\nwhen .drop_link is performed. Remove the helper.\n\nAlso drop pci_epc_put(). EPC device refcounting is tied to configfs EPC\ngroup lifetime, and pci_epc_put() in the .drop_link path is sufficient.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46009",
"url": "https://www.suse.com/security/cve/CVE-2026-46009"
},
{
"category": "external",
"summary": "SUSE Bug 1266684 for CVE-2026-46009",
"url": "https://bugzilla.suse.com/1266684"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46009"
},
{
"cve": "CVE-2026-46011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46011"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-jpeg: fix use-after-free in release path due to uncancelled work\n\nThe mtk_jpeg_release() function frees the context structure (ctx) without\nfirst cancelling any pending or running work in ctx-\u003ejpeg_work. This\ncreates a race window where the workqueue callback may still be accessing\nthe context memory after it has been freed.\n\nRace condition:\n\n CPU 0 (release) CPU 1 (workqueue)\n ---------------- ------------------\n close()\n mtk_jpeg_release()\n mtk_jpegenc_worker()\n ctx = work-\u003edata\n // accessing ctx\n\n kfree(ctx) // freed!\n access ctx // UAF!\n\nThe work is queued via queue_work() during JPEG encode/decode operations\n(via mtk_jpeg_device_run). If the device is closed while work is pending\nor running, the work handler will access freed memory.\n\nFix this by calling cancel_work_sync() BEFORE acquiring the mutex. This\nordering is critical: if cancel_work_sync() is called after mutex_lock(),\nand the work handler also tries to acquire the same mutex, it would cause\na deadlock.\n\nNote: The open error path does NOT need cancel_work_sync() because\nINIT_WORK() only initializes the work structure - it does not schedule\nit. Work is only scheduled later during ioctl operations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46011",
"url": "https://www.suse.com/security/cve/CVE-2026-46011"
},
{
"category": "external",
"summary": "SUSE Bug 1267491 for CVE-2026-46011",
"url": "https://bugzilla.suse.com/1267491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46011"
},
{
"cve": "CVE-2026-46015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46015"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: call sk_data_ready() after listener migration\n\nWhen inet_csk_listen_stop() migrates an established child socket from\na closing listener to another socket in the same SO_REUSEPORT group,\nthe target listener gets a new accept-queue entry via\ninet_csk_reqsk_queue_add(), but that path never notifies the target\nlistener\u0027s waiters. A nonblocking accept() still works because it\nchecks the queue directly, but poll()/epoll_wait() waiters and\nblocking accept() callers can also remain asleep indefinitely.\n\nCall READ_ONCE(nsk-\u003esk_data_ready)(nsk) after a successful migration\nin inet_csk_listen_stop().\n\nHowever, after inet_csk_reqsk_queue_add() succeeds, the ref acquired\nin reuseport_migrate_sock() is effectively transferred to\nnreq-\u003ersk_listener. Another CPU can then dequeue nreq via accept()\nor listener shutdown, hit reqsk_put(), and drop that listener ref.\nSince listeners are SOCK_RCU_FREE, wrap the post-queue_add()\ndereferences of nsk in rcu_read_lock()/rcu_read_unlock(), which also\ncovers the existing sock_net(nsk) access in that path.\n\nThe reqsk_timer_handler() path does not need the same changes for two\nreasons: half-open requests become readable only after the final ACK,\nwhere tcp_child_process() already wakes the listener; and once nreq is\nvisible via inet_ehash_insert(), the success path no longer touches\nnsk directly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46015",
"url": "https://www.suse.com/security/cve/CVE-2026-46015"
},
{
"category": "external",
"summary": "SUSE Bug 1267439 for CVE-2026-46015",
"url": "https://bugzilla.suse.com/1267439"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46015"
},
{
"cve": "CVE-2026-46016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46016"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: xlnx: Only access buffer information if IPI is buffered\n\nIn the receive callback check if message is NULL to prevent\npossibility of crash by NULL pointer dereferencing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46016",
"url": "https://www.suse.com/security/cve/CVE-2026-46016"
},
{
"category": "external",
"summary": "SUSE Bug 1266729 for CVE-2026-46016",
"url": "https://bugzilla.suse.com/1266729"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46016"
},
{
"cve": "CVE-2026-46018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46018"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES\n\nparse_uac2_sample_rate_range() caps the number of enumerated\nrates at MAX_NR_RATES, but it only breaks out of the current\nrate loop. A malformed UAC2 RANGE response with additional\ntriplets continues parsing the remaining triplets and repeatedly\nprints \"invalid uac2 rates\" while probe still holds\nregister_mutex.\n\nStop the whole parse once the cap is reached and return the\nnumber of rates collected so far.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46018",
"url": "https://www.suse.com/security/cve/CVE-2026-46018"
},
{
"category": "external",
"summary": "SUSE Bug 1266751 for CVE-2026-46018",
"url": "https://bugzilla.suse.com/1266751"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46018"
},
{
"cve": "CVE-2026-46019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46019"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup\n\natmel_aes_buff_init() allocates 4 pages using __get_free_pages() with\nATMEL_AES_BUFFER_ORDER, but atmel_aes_buff_cleanup() frees only the\nfirst page using free_page(), leaking the remaining 3 pages. Use\nfree_pages() with ATMEL_AES_BUFFER_ORDER to fix the memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46019",
"url": "https://www.suse.com/security/cve/CVE-2026-46019"
},
{
"category": "external",
"summary": "SUSE Bug 1266732 for CVE-2026-46019",
"url": "https://bugzilla.suse.com/1266732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46019"
},
{
"cve": "CVE-2026-46023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46023"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm mirror: fix integer overflow in create_dirty_log()\n\nThe argument count calculation in create_dirty_log() performs\n`*args_used = 2 + param_count` before validating against argc. When a\nuser provides a param_count close to UINT_MAX via the device mapper\ntable string, this unsigned addition wraps around to a small value,\ncausing the subsequent `argc \u003c *args_used` check to be bypassed.\n\nThe overflowed param_count is then passed as argc to dm_dirty_log_create(),\nwhere it can cause out-of-bounds reads on the argv array.\n\nFix by comparing param_count against argc - 2 before performing the\naddition, following the same pattern used by parse_features() in the\nsame file. Since argc \u003e= 2 is already guaranteed, the subtraction is\nsafe.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46023",
"url": "https://www.suse.com/security/cve/CVE-2026-46023"
},
{
"category": "external",
"summary": "SUSE Bug 1267449 for CVE-2026-46023",
"url": "https://bugzilla.suse.com/1267449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46023"
},
{
"cve": "CVE-2026-46026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46026"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: qrtr: ns: Limit the maximum number of lookups\n\nCurrent code does no bound checking on the number of lookups a client can\nperform. Though the code restricts the lookups to local clients, there is\nstill a possibility of a malicious local client sending a flood of\nNEW_LOOKUP messages over the same socket.\n\nFix this issue by limiting the maximum number of lookups to 64 globally.\nSince the nameserver allows only atmost one local observer, this global\nlookup count will ensure that the lookups stay within the limit.\n\nNote that, limit of 64 is chosen based on the current platform\nrequirements. If requirement changes in the future, this limit can be\nincreased.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46026",
"url": "https://www.suse.com/security/cve/CVE-2026-46026"
},
{
"category": "external",
"summary": "SUSE Bug 1266876 for CVE-2026-46026",
"url": "https://bugzilla.suse.com/1266876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46026"
},
{
"cve": "CVE-2026-46027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46027"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: avoid early lgr access in smc_clc_wait_msg\n\nA CLC decline can be received while the handshake is still in an early\nstage, before the connection has been associated with a link group.\n\nThe decline handling in smc_clc_wait_msg() updates link-group level sync\nstate for first-contact declines, but that state only exists after link\ngroup setup has completed. Guard the link-group update accordingly and\nkeep the per-socket peer diagnosis handling unchanged.\n\nThis preserves the existing sync_err handling for established link-group\ncontexts and avoids touching link-group state before it is available.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46027",
"url": "https://www.suse.com/security/cve/CVE-2026-46027"
},
{
"category": "external",
"summary": "SUSE Bug 1266744 for CVE-2026-46027",
"url": "https://bugzilla.suse.com/1266744"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46027"
},
{
"cve": "CVE-2026-46033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46033"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: authencesn - reject short ahash digests during instance creation\n\nauthencesn requires either a zero authsize or an authsize of at least\n4 bytes because the ESN encrypt/decrypt paths always move 4 bytes of\nhigh-order sequence number data at the end of the authenticated data.\n\nWhile crypto_authenc_esn_setauthsize() already rejects explicit\nnon-zero authsizes in the range 1..3, crypto_authenc_esn_create()\nstill copied auth-\u003edigestsize into inst-\u003ealg.maxauthsize without\nvalidating it. The AEAD core then initialized the tfm\u0027s default\nauthsize from that value.\n\nAs a result, selecting an ahash with digest size 1..3, such as\ncbcmac(cipher_null), exposed authencesn instances whose default\nauthsize was invalid even though setauthsize() would have rejected the\nsame value. AF_ALG could then trigger the ESN tail handling with a\ntoo-short tag and hit an out-of-bounds access.\n\nReject authencesn instances whose ahash digest size is in the invalid\nnon-zero range 1..3 so that no tfm can inherit an unsupported default\nauthsize.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46033",
"url": "https://www.suse.com/security/cve/CVE-2026-46033"
},
{
"category": "external",
"summary": "SUSE Bug 1266692 for CVE-2026-46033",
"url": "https://bugzilla.suse.com/1266692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46033"
},
{
"cve": "CVE-2026-46038",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46038"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: qrtr: ns: Free the node during ctrl_cmd_bye()\n\nA node sends the BYE packet when it is about to go down. So the nameserver\nshould advertise the removal of the node to all remote and local observers\nand free the node finally. But currently, the nameserver doesn\u0027t free the\nnode memory even after processing the BYE packet. This causes the node\nmemory to leak.\n\nHence, remove the node from Xarray list and free the node memory during\nboth success and failure case of ctrl_cmd_bye().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46038",
"url": "https://www.suse.com/security/cve/CVE-2026-46038"
},
{
"category": "external",
"summary": "SUSE Bug 1266695 for CVE-2026-46038",
"url": "https://bugzilla.suse.com/1266695"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46038"
},
{
"cve": "CVE-2026-46040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46040"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails\n\nWhen fsnotify_add_inode_mark_locked() fails in inotify_new_watch(),\nthe error path calls inotify_remove_from_idr() but does not call\ndec_inotify_watches() to undo the preceding inc_inotify_watches().\nThis leaks a watch count, and repeated failures can exhaust the\nmax_user_watches limit with -ENOSPC even when no watches are active.\n\nPrior to commit 1cce1eea0aff (\"inotify: Convert to using per-namespace\nlimits\"), the watch count was incremented after fsnotify_add_mark_locked()\nsucceeded, so this path was not affected. The conversion moved\ninc_inotify_watches() before the mark insertion without adding the\ncorresponding rollback.\n\nAdd the missing dec_inotify_watches() call in the error path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46040",
"url": "https://www.suse.com/security/cve/CVE-2026-46040"
},
{
"category": "external",
"summary": "SUSE Bug 1267472 for CVE-2026-46040",
"url": "https://bugzilla.suse.com/1267472"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46040"
},
{
"cve": "CVE-2026-46048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46048"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: fix usb_dev refcount leak on probe failure\n\ncreate_card() takes a reference on the USB device with usb_get_dev()\nand stores the matching usb_put_dev() in card_free(), which is\ninstalled as the snd_card\u0027s -\u003eprivate_free destructor.\n\nHowever, -\u003eprivate_free is only assigned near the end of init_card(),\nafter several failure points (usb_set_interface(), EP type checks,\nusb_submit_urb(), the EP1_CMD_GET_DEVICE_INFO exchange, and its\ntimeout). When any of those fail, init_card() returns an error to\nsnd_probe(), which calls snd_card_free(card). Because -\u003eprivate_free\nis still NULL, card_free() never runs, the usb_get_dev() reference\nis not dropped, and the struct usb_device leaks along with its\ndescriptor allocations and device_private.\n\nsyzbot reproduces this with a malformed UAC3 device whose only valid\naltsetting is 0; init_card()\u0027s usb_set_interface(usb_dev, 0, 1) call\nfails with -EIO and triggers the leak.\n\nMove the -\u003eprivate_free assignment into create_card(), immediately\nafter usb_get_dev(), so that every error path reaching snd_card_free()\nbalances the reference. card_free()\u0027s callees (snd_usb_caiaq_input_free,\nfree_urbs, kfree) already tolerate the partially-initialized state\nbecause the chip private area is zero-initialized by snd_card_new().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46048",
"url": "https://www.suse.com/security/cve/CVE-2026-46048"
},
{
"category": "external",
"summary": "SUSE Bug 1267496 for CVE-2026-46048",
"url": "https://bugzilla.suse.com/1267496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46048"
},
{
"cve": "CVE-2026-46049",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46049"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ctxfi: Add fallback to default RSR for S/PDIF\n\nspdif_passthru_playback_get_resources() uses atc-\u003epll_rate as the RSR\nfor the MSR calculation loop. However, pll_rate is only updated in\natc_pll_init() and not in hw_pll_init(), so it remains 0 after the\ncard init.\n\nWhen spdif_passthru_playback_setup() skips atc_pll_init() for\n32000 Hz, (rsr * desc.msr) always becomes 0, causing the loop to spin\nindefinitely.\n\nAdd fallback to use atc-\u003ersr when atc-\u003epll_rate is 0. This reflects\nthe hardware state, since hw_card_init() already configures the PLL\nto the default RSR.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46049",
"url": "https://www.suse.com/security/cve/CVE-2026-46049"
},
{
"category": "external",
"summary": "SUSE Bug 1267448 for CVE-2026-46049",
"url": "https://bugzilla.suse.com/1267448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46049"
},
{
"cve": "CVE-2026-46056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46056"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: fix potential UAF in SSP passkey handlers\n\nhci_conn lookup and field access must be covered by hdev lock in\nhci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise\nthe connection can be freed concurrently.\n\nExtend the hci_dev_lock critical section to cover all conn usage in both\nhandlers.\n\nKeep the existing keypress notification behavior unchanged by routing\nthe early exits through a common unlock path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46056",
"url": "https://www.suse.com/security/cve/CVE-2026-46056"
},
{
"category": "external",
"summary": "SUSE Bug 1267435 for CVE-2026-46056",
"url": "https://bugzilla.suse.com/1267435"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46056"
},
{
"cve": "CVE-2026-46058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46058"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: amphion: Fix race between m2m job_abort and device_run\n\nFix kernel panic caused by race condition where v4l2_m2m_ctx_release()\nfrees m2m_ctx while v4l2_m2m_try_run() is about to call device_run\nwith the same context.\n\nRace sequence:\n v4l2_m2m_try_run(): v4l2_m2m_ctx_release():\n lock/unlock v4l2_m2m_cancel_job()\n job_abort()\n v4l2_m2m_job_finish()\n kfree(m2m_ctx) \u003c- frees ctx\n device_run() \u003c- use-after-free crash at 0x538\n\nCrash trace:\n Unable to handle kernel read from unreadable memory at virtual address\n 0000000000000538\n v4l2_m2m_try_run+0x78/0x138\n v4l2_m2m_device_run_work+0x14/0x20\n\nThe amphion vpu driver does not rely on the m2m framework\u0027s device_run\ncallback to perform encode/decode operations.\n\nFix the race by preventing m2m framework job scheduling entirely:\n- Add job_ready callback returning 0 (no jobs ready for m2m framework)\n- Remove job_abort callback to avoid the race condition",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46058",
"url": "https://www.suse.com/security/cve/CVE-2026-46058"
},
{
"category": "external",
"summary": "SUSE Bug 1266677 for CVE-2026-46058",
"url": "https://bugzilla.suse.com/1266677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46058"
},
{
"cve": "CVE-2026-46064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46064"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nibmasm: fix heap over-read in ibmasm_send_i2o_message()\n\nThe ibmasm_send_i2o_message() function uses get_dot_command_size() to\ncompute the byte count for memcpy_toio(), but this value is derived from\nuser-controlled fields in the dot_command_header (command_size: u8,\ndata_size: u16) and is never validated against the actual allocation size.\nA root user can write a small buffer with inflated header fields, causing\nmemcpy_toio() to read up to ~65 KB past the end of the allocation into\nadjacent kernel heap, which is then forwarded to the service processor\nover MMIO.\n\nSilently clamping the copy size is not sufficient: if the header fields\nclaim a larger size than the buffer, the SP receives a dot command whose\nown header is inconsistent with the I2O message length, which can cause\nthe SP to desynchronize. Reject such commands outright by returning\nfailure.\n\nValidate command_size before calling get_mfa_inbound() to avoid leaking\nan I2O message frame: reading INBOUND_QUEUE_PORT dequeues a hardware\nframe from the controller\u0027s free pool, and returning without a\ncorresponding set_mfa_inbound() call would permanently exhaust it.\n\nAdditionally, clamp command_size to I2O_COMMAND_SIZE before the\nmemcpy_toio() so the MMIO write stays within the I2O message frame,\nconsistent with the clamping already performed by outgoing_message_size()\nfor the header field.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46064",
"url": "https://www.suse.com/security/cve/CVE-2026-46064"
},
{
"category": "external",
"summary": "SUSE Bug 1267497 for CVE-2026-46064",
"url": "https://bugzilla.suse.com/1267497"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46064"
},
{
"cve": "CVE-2026-46068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46068"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx\n\nThe bounce buffers are allocated with __get_free_pages() using\nBOUNCE_BUFFER_ORDER (order 2 = 4 pages), but both the allocation error\npath and nx842_crypto_free_ctx() release the buffers with free_page().\nUse free_pages() with the matching order instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46068",
"url": "https://www.suse.com/security/cve/CVE-2026-46068"
},
{
"category": "external",
"summary": "SUSE Bug 1267592 for CVE-2026-46068",
"url": "https://bugzilla.suse.com/1267592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-46068"
},
{
"cve": "CVE-2026-46075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46075"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: atmel-sha204a - Fix potential UAF and memory leak in remove path\n\nUnregister the hwrng to prevent new -\u003eread() calls and flush the Atmel\nI2C workqueue before teardown to prevent a potential UAF if a queued\ncallback runs while the device is being removed.\n\nDrop the early return to ensure sysfs entries are removed and\n-\u003ehwrng.priv is freed, preventing a memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46075",
"url": "https://www.suse.com/security/cve/CVE-2026-46075"
},
{
"category": "external",
"summary": "SUSE Bug 1267367 for CVE-2026-46075",
"url": "https://bugzilla.suse.com/1267367"
},
{
"category": "external",
"summary": "SUSE Bug 1267368 for CVE-2026-46075",
"url": "https://bugzilla.suse.com/1267368"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46075"
},
{
"cve": "CVE-2026-46077",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46077"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: atmel-tdes - fix DMA sync direction\n\nBefore DMA output is consumed by the CPU, -\u003edma_addr_out must be synced\nwith dma_sync_single_for_cpu() instead of dma_sync_single_for_device().\nUsing the wrong direction can return stale cache data on non-coherent\nplatforms.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46077",
"url": "https://www.suse.com/security/cve/CVE-2026-46077"
},
{
"category": "external",
"summary": "SUSE Bug 1267466 for CVE-2026-46077",
"url": "https://bugzilla.suse.com/1267466"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46077"
},
{
"cve": "CVE-2026-46080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46080"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: split transactions in dio completion to avoid credit exhaustion\n\nDuring ocfs2 dio operations, JBD2 may report warnings via following\ncall trace:\nocfs2_dio_end_io_write\n ocfs2_mark_extent_written\n ocfs2_change_extent_flag\n ocfs2_split_extent\n ocfs2_try_to_merge_extent\n ocfs2_extend_rotate_transaction\n ocfs2_extend_trans\n jbd2__journal_restart\n start_this_handle\n output: JBD2: kworker/6:2 wants too many credits credits:5450 rsv_credits:0 max:5449\n\nTo prevent exceeding the credits limit, modify ocfs2_dio_end_io_write() to\nhandle extents in a batch of transaction.\n\nAdditionally, relocate ocfs2_del_inode_from_orphan(). The orphan inode\nshould only be removed from the orphan list after the extent tree update\nis complete. This ensures that if a crash occurs in the middle of extent\ntree updates, we won\u0027t leave stale blocks beyond EOF.\n\nThis patch also changes the logic for updating the inode size and removing\norphan, making it similar to ext4_dio_write_end_io(). Both operations are\nperformed only when everything looks good.\n\nFinally, thanks to Jans and Joseph for providing the bug fix prototype and\nsuggestions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46080",
"url": "https://www.suse.com/security/cve/CVE-2026-46080"
},
{
"category": "external",
"summary": "SUSE Bug 1267596 for CVE-2026-46080",
"url": "https://bugzilla.suse.com/1267596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46080"
},
{
"cve": "CVE-2026-46082",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46082"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0\n\nINVLPGA should cause a #UD when EFER.SVME is not set. Add a check to\nproperly inject #UD when EFER.SVME=0.\n\n[sean: tag for stable@]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46082",
"url": "https://www.suse.com/security/cve/CVE-2026-46082"
},
{
"category": "external",
"summary": "SUSE Bug 1267473 for CVE-2026-46082",
"url": "https://bugzilla.suse.com/1267473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46082"
},
{
"cve": "CVE-2026-46084",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46084"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mana_ib: Disable RX steering on RSS QP destroy\n\nWhen an RSS QP is destroyed (e.g. DPDK exit), mana_ib_destroy_qp_rss()\ndestroys the RX WQ objects but does not disable vPort RX steering in\nfirmware. This leaves stale steering configuration that still points to\nthe destroyed RX objects.\n\nIf traffic continues to arrive (e.g. peer VM is still transmitting) and\nthe VF interface is subsequently brought up (mana_open), the firmware\nmay deliver completions using stale CQ IDs from the old RX objects.\nThese CQ IDs can be reused by the ethernet driver for new TX CQs,\ncausing RX completions to land on TX CQs:\n\n WARNING: mana_poll_tx_cq+0x1b8/0x220 [mana] (is_sq == false)\n WARNING: mana_gd_process_eq_events+0x209/0x290 (cq_table lookup fails)\n\nFix this by disabling vPort RX steering before destroying RX WQ objects.\nNote that mana_fence_rqs() cannot be used here because the fence\ncompletion is delivered on the CQ, which is polled by user-mode (e.g.\nDPDK) and not visible to the kernel driver.\n\nRefactor the disable logic into a shared mana_disable_vport_rx() in\nmana_en, exported for use by mana_ib, replacing the duplicate code.\nThe ethernet driver\u0027s mana_dealloc_queues() is also updated to call\nthis common function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46084",
"url": "https://www.suse.com/security/cve/CVE-2026-46084"
},
{
"category": "external",
"summary": "SUSE Bug 1266758 for CVE-2026-46084",
"url": "https://bugzilla.suse.com/1266758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46084"
},
{
"cve": "CVE-2026-46086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46086"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: use a stable FDB dst snapshot in RCU readers\n\nLocal FDB entries can be rewritten in place by `fdb_delete_local()`, which\nupdates `f-\u003edst` to another port or to `NULL` while keeping the entry\nalive. Several bridge RCU readers inspect `f-\u003edst`, including\n`br_fdb_fillbuf()` through the `brforward_read()` sysfs path.\n\nThese readers currently load `f-\u003edst` multiple times and can therefore\nobserve inconsistent values across the check and later dereference.\nIn `br_fdb_fillbuf()`, this means a concurrent local-FDB update can change\n`f-\u003edst` after the NULL check and before the `port_no` dereference,\nleading to a NULL-ptr-deref.\n\nFix this by taking a single `READ_ONCE()` snapshot of `f-\u003edst` in each\naffected RCU reader and using that snapshot for the rest of the access\nsequence. Also publish the in-place `f-\u003edst` updates in `fdb_delete_local()`\nwith `WRITE_ONCE()` so the readers and writer use matching access patterns.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46086",
"url": "https://www.suse.com/security/cve/CVE-2026-46086"
},
{
"category": "external",
"summary": "SUSE Bug 1267524 for CVE-2026-46086",
"url": "https://bugzilla.suse.com/1267524"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46086"
},
{
"cve": "CVE-2026-46088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46088"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()\n\nsnd_ctl_elem_init_enum_names() advances pointer p through the names\nbuffer while decrementing buf_len. If buf_len reaches zero but items\nremain, the next iteration calls strnlen(p, 0).\n\nWhile strnlen(p, 0) returns 0 and would hit the existing name_len == 0\nerror path, CONFIG_FORTIFY_SOURCE\u0027s fortified strnlen() first checks\nmaxlen against __builtin_dynamic_object_size(). When Clang loses track\nof p\u0027s object size inside the loop, this triggers a BRK exception panic\nbefore the return value is examined.\n\nAdd a buf_len == 0 guard at the loop entry to prevent calling fortified\nstrnlen() on an exhausted buffer.\n\nFound by kernel fuzz testing through Xiaomi Smartphone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46088",
"url": "https://www.suse.com/security/cve/CVE-2026-46088"
},
{
"category": "external",
"summary": "SUSE Bug 1267226 for CVE-2026-46088",
"url": "https://bugzilla.suse.com/1267226"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46088"
},
{
"cve": "CVE-2026-46089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46089"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nzram: do not forget to endio for partial discard requests\n\nAs reported by Qu Wenruo and Avinesh Kumar, the following\n\n getconf PAGESIZE\n 65536\n blkdiscard -p 4k /dev/zram0\n\ntakes literally forever to complete. zram doesn\u0027t support partial\ndiscards and just returns immediately w/o doing any discard work in such\ncases. The problem is that we forget to endio on our way out, so\nblkdiscard sleeps forever in submit_bio_wait(). Fix this by jumping to\nend_bio label, which does bio_endio().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46089",
"url": "https://www.suse.com/security/cve/CVE-2026-46089"
},
{
"category": "external",
"summary": "SUSE Bug 1267445 for CVE-2026-46089",
"url": "https://bugzilla.suse.com/1267445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46089"
},
{
"cve": "CVE-2026-46092",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46092"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: check for PCI upstream bridge existence\n\npci_upstream_bridge() returns NULL if the device is on a root bus. If\n8821CE is installed in the system with such a PCI topology, the probing\nroutine will crash. This has probably been unnoticed as 8821CE is mostly\nsupplied in laptops where there is a PCI-to-PCI bridge located upstream\nfrom the device. However the card might be installed on a system with\ndifferent configuration.\n\nCheck if the bridge does exist for the specific workaround to be applied.\n\nFound by Linux Verification Center (linuxtesting.org) with Svace static\nanalysis tool.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46092",
"url": "https://www.suse.com/security/cve/CVE-2026-46092"
},
{
"category": "external",
"summary": "SUSE Bug 1267595 for CVE-2026-46092",
"url": "https://bugzilla.suse.com/1267595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46092"
},
{
"cve": "CVE-2026-46102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46102"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: strparser: fix skb_head leak in strp_abort_strp()\n\nWhen the stream parser is aborted, for example after a message assembly timeout,\nit can still hold a reference to a partially assembled message in\nstrp-\u003eskb_head.\n\nThat skb is not released in strp_abort_strp(), which leaks the partially\nassembled message and can be triggered repeatedly to exhaust memory.\n\nFix this by freeing strp-\u003eskb_head and resetting the parser state in the\nabort path. Leave strp_stop() unchanged so final cleanup still happens in\nstrp_done() after the work and timer have been synchronized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46102",
"url": "https://www.suse.com/security/cve/CVE-2026-46102"
},
{
"category": "external",
"summary": "SUSE Bug 1267502 for CVE-2026-46102",
"url": "https://bugzilla.suse.com/1267502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46102"
},
{
"cve": "CVE-2026-46103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46103"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: ucan: fix devres lifetime\n\nUSB drivers bind to USB interfaces and any device managed resources\nshould have their lifetime tied to the interface rather than parent USB\ndevice. This avoids issues like memory leaks when drivers are unbound\nwithout their devices being physically disconnected (e.g. on probe\ndeferral or configuration changes).\n\nFix the control message buffer lifetime so that it is released on driver\nunbind.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46103",
"url": "https://www.suse.com/security/cve/CVE-2026-46103"
},
{
"category": "external",
"summary": "SUSE Bug 1267555 for CVE-2026-46103",
"url": "https://bugzilla.suse.com/1267555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46103"
},
{
"cve": "CVE-2026-46108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46108"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi:si: Return state to normal if message allocation fails\n\nThere were places where nothing would get started if a message\nallocation failed, so the driver needs to return to normal state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46108",
"url": "https://www.suse.com/security/cve/CVE-2026-46108"
},
{
"category": "external",
"summary": "SUSE Bug 1267615 for CVE-2026-46108",
"url": "https://bugzilla.suse.com/1267615"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46108"
},
{
"cve": "CVE-2026-46109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46109"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: ulpi: fix memory leak on ulpi_register() error paths\n\nCommit 01af542392b5 (\"usb: ulpi: fix double free in\nulpi_register_interface() error path\") removed kfree(ulpi) from\nulpi_register_interface() to fix a double-free when device_register()\nfails.\n\nBut when ulpi_of_register() or ulpi_read_id() fail before\ndevice_register() is called, the ulpi allocation is leaked.\n\nAdd kfree(ulpi) on both error paths to properly clean up the allocation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46109",
"url": "https://www.suse.com/security/cve/CVE-2026-46109"
},
{
"category": "external",
"summary": "SUSE Bug 1266850 for CVE-2026-46109",
"url": "https://bugzilla.suse.com/1266850"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46109"
},
{
"cve": "CVE-2026-46117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46117"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()\n\nSashiko points out that the user can specify WQs sharing the same CQ as a\npart of the uAPI and this will trigger the WARN_ON() then go on to corrupt\nthe kernel.\n\nJust reject it outright and fail the QP creation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46117",
"url": "https://www.suse.com/security/cve/CVE-2026-46117"
},
{
"category": "external",
"summary": "SUSE Bug 1267375 for CVE-2026-46117",
"url": "https://bugzilla.suse.com/1267375"
},
{
"category": "external",
"summary": "SUSE Bug 1267376 for CVE-2026-46117",
"url": "https://bugzilla.suse.com/1267376"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-46117"
},
{
"cve": "CVE-2026-46122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46122"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: b43: enforce bounds check on firmware key index in b43_rx()\n\nThe firmware-controlled key index in b43_rx() can exceed the dev-\u003ekey[]\narray size (58 entries). The existing B43_WARN_ON is non-enforcing in\nproduction builds, allowing an out-of-bounds read.\n\nMake the B43_WARN_ON check enforcing by dropping the frame when the\nfirmware returns an invalid key index.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46122",
"url": "https://www.suse.com/security/cve/CVE-2026-46122"
},
{
"category": "external",
"summary": "SUSE Bug 1267583 for CVE-2026-46122",
"url": "https://bugzilla.suse.com/1267583"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46122"
},
{
"cve": "CVE-2026-46125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46125"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: remove station if connection prep fails\n\nIf connection preparation fails for MLO connections, then the\ninterface is completely reset to non-MLD. In this case, we must\nnot keep the station since it\u0027s related to the link of the vif\nbeing removed. Delete an existing station. Any \"new_sta\" is\nalready being removed, so that doesn\u0027t need changes.\n\nThis fixes a use-after-free/double-free in debugfs if that\u0027s\nenabled, because a vif going from MLD (and to MLD, but that\u0027s\nnot relevant here) recreates its entire debugfs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46125",
"url": "https://www.suse.com/security/cve/CVE-2026-46125"
},
{
"category": "external",
"summary": "SUSE Bug 1266879 for CVE-2026-46125",
"url": "https://bugzilla.suse.com/1266879"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46125"
},
{
"cve": "CVE-2026-46126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46126"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()\n\nSashiko points out there are two bugs here in the error unwind flow, both\nrelated to how the WQ table is unwound.\n\nFirst there is a double i-- on the first failure path due to the while loop\nhaving a i--, remove it.\n\nSecond if mana_ib_install_cq_cb() fails then mana_create_wq_obj() is not\nundone due to the above i--.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46126",
"url": "https://www.suse.com/security/cve/CVE-2026-46126"
},
{
"category": "external",
"summary": "SUSE Bug 1267584 for CVE-2026-46126",
"url": "https://bugzilla.suse.com/1267584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-46126"
},
{
"cve": "CVE-2026-46128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46128"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: Check event message buffer response for bad data\n\nThe event message buffer response data size got checked later when\nprocessing, but check it right after the response comes back. It\nappears some BMCs may return an empty message instead of an error\nwhen fetching events.\n\nThere are apparently some new BMCs that make this error, so we need to\ncompensate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46128",
"url": "https://www.suse.com/security/cve/CVE-2026-46128"
},
{
"category": "external",
"summary": "SUSE Bug 1267643 for CVE-2026-46128",
"url": "https://bugzilla.suse.com/1267643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46128"
},
{
"cve": "CVE-2026-46131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46131"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: check for nEPT/nNPT in slow flush hypercalls\n\nChecking is_guest_mode(vcpu) is incorrect, because translate_nested_gpa()\nis only valid if an L2 guest is running *with nested EPT/NPT enabled*.\nInstead use the same condition as translate_nested_gpa() itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46131",
"url": "https://www.suse.com/security/cve/CVE-2026-46131"
},
{
"category": "external",
"summary": "SUSE Bug 1267636 for CVE-2026-46131",
"url": "https://bugzilla.suse.com/1267636"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46131"
},
{
"cve": "CVE-2026-46132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46132"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo\n\nrtnl_fill_vfinfo() declares struct ifla_vf_broadcast on the stack\nwithout initialisation:\n\n\tstruct ifla_vf_broadcast vf_broadcast;\n\nThe struct contains a single fixed 32-byte field:\n\n\t/* include/uapi/linux/if_link.h */\n\tstruct ifla_vf_broadcast {\n\t\t__u8 broadcast[32];\n\t};\n\nThe function then copies dev-\u003ebroadcast into it using dev-\u003eaddr_len\nas the length:\n\n\tmemcpy(vf_broadcast.broadcast, dev-\u003ebroadcast, dev-\u003eaddr_len);\n\nOn Ethernet devices (the overwhelming majority of SR-IOV NICs)\ndev-\u003eaddr_len is 6, so only the first 6 bytes of broadcast[] are\nwritten. The remaining 26 bytes retain whatever was previously on\nthe kernel stack. The full struct is then handed to userspace via:\n\n\tnla_put(skb, IFLA_VF_BROADCAST,\n\t\tsizeof(vf_broadcast), \u0026vf_broadcast)\n\nleaking up to 26 bytes of uninitialised kernel stack per VF per\nRTM_GETLINK request, repeatable.\n\nThe other vf_* structs in the same function are explicitly zeroed\nfor exactly this reason - see the memset() calls for ivi,\nvf_vlan_info, node_guid and port_guid a few lines above.\nvf_broadcast was simply missed when it was added.\n\nReachability: any unprivileged local process can open AF_NETLINK /\nNETLINK_ROUTE without capabilities and send RTM_GETLINK with an\nIFLA_EXT_MASK attribute carrying RTEXT_FILTER_VF. The kernel walks\neach VF and emits IFLA_VF_BROADCAST, leaking 26 bytes of stack per\nVF per request. Stack residue at this call site can include return\naddresses and transient sensitive data; KASAN with stack\ninstrumentation, or KMSAN, will flag the nla_put() when reproduced.\n\nZero the on-stack struct before the partial memcpy, matching the\nexisting pattern used for the other vf_* structs in the same\nfunction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46132",
"url": "https://www.suse.com/security/cve/CVE-2026-46132"
},
{
"category": "external",
"summary": "SUSE Bug 1267616 for CVE-2026-46132",
"url": "https://bugzilla.suse.com/1267616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46132"
},
{
"cve": "CVE-2026-46136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46136"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7921: fix a potential clc buffer length underflow\n\nThe buf_len is used to limit the iterations for retrieving the country\npower setting and may underflow under certain conditions due to changes\nin the power table in CLC.\n\nThis underflow leads to an almost infinite loop or an invalid power\nsetting resulting in driver initialization failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46136",
"url": "https://www.suse.com/security/cve/CVE-2026-46136"
},
{
"category": "external",
"summary": "SUSE Bug 1266831 for CVE-2026-46136",
"url": "https://bugzilla.suse.com/1266831"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46136"
},
{
"cve": "CVE-2026-46137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46137"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: ADD_ADDR rtx: fix potential data-race\n\nThis mptcp_pm_add_timer() helper is executed as a timer callback in\nsoftirq context. To avoid any data races, the socket lock needs to be\nheld with bh_lock_sock().\n\nIf the socket is in use, retry again soon after, similar to what is done\nwith the keepalive timer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46137",
"url": "https://www.suse.com/security/cve/CVE-2026-46137"
},
{
"category": "external",
"summary": "SUSE Bug 1267570 for CVE-2026-46137",
"url": "https://bugzilla.suse.com/1267570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46137"
},
{
"cve": "CVE-2026-46138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46138"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt\n\nhci_le_create_big_complete_evt() iterates over BT_BOUND connections for\na BIG handle using a while loop, accessing ev-\u003ebis_handle[i++] on each\niteration. However, there is no check that i stays within ev-\u003enum_bis\nbefore the array access.\n\nWhen a controller sends a LE_Create_BIG_Complete event with fewer\nbis_handle entries than there are BT_BOUND connections for that BIG,\nor with num_bis=0, the loop reads beyond the valid bis_handle[] flex\narray into adjacent heap memory. Since the out-of-bounds values\ntypically exceed HCI_CONN_HANDLE_MAX (0x0EFF), hci_conn_set_handle()\nrejects them and the connection remains in BT_BOUND state. The same\nconnection is then found again by hci_conn_hash_lookup_big_state(),\ncreating an infinite loop with hci_dev_lock held.\n\nFix this by terminating the BIG if in case not all BIS could be setup\nproperly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46138",
"url": "https://www.suse.com/security/cve/CVE-2026-46138"
},
{
"category": "external",
"summary": "SUSE Bug 1267649 for CVE-2026-46138",
"url": "https://bugzilla.suse.com/1267649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46138"
},
{
"cve": "CVE-2026-46143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens\n\nAs prepare can be called mulitple times, this can result in multiple\ngraph opens for playback path.\n\nThis will result in a memory leaks, fix this by adding a check before\nopening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46143",
"url": "https://www.suse.com/security/cve/CVE-2026-46143"
},
{
"category": "external",
"summary": "SUSE Bug 1267712 for CVE-2026-46143",
"url": "https://bugzilla.suse.com/1267712"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46143"
},
{
"cve": "CVE-2026-46144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46144"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mana: Fix error unwind in mana_ib_create_qp_rss()\n\nSashiko points out that mana_ib_cfg_vport_steering() is leaked, the normal\ndestroy path cleans it up.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46144",
"url": "https://www.suse.com/security/cve/CVE-2026-46144"
},
{
"category": "external",
"summary": "SUSE Bug 1266913 for CVE-2026-46144",
"url": "https://bugzilla.suse.com/1266913"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46144"
},
{
"cve": "CVE-2026-46145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46145"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mana: Validate rx_hash_key_len\n\nSashiko points out that rx_hash_key_len comes from a uAPI structure and is\nblindly passed to memcpy, allowing the userspace to trash kernel\nmemory. Bounds check it so the memcpy cannot overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46145",
"url": "https://www.suse.com/security/cve/CVE-2026-46145"
},
{
"category": "external",
"summary": "SUSE Bug 1267715 for CVE-2026-46145",
"url": "https://bugzilla.suse.com/1267715"
},
{
"category": "external",
"summary": "SUSE Bug 1267716 for CVE-2026-46145",
"url": "https://bugzilla.suse.com/1267716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-46145"
},
{
"cve": "CVE-2026-46146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46146"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()\n\nThe convert_chmap_v3() has a loop with its increment size of\ncs_desc-\u003ewLength, but we forgot to validate cs_desc-\u003ewLength itself,\nwhich may lead to potential endless loop by a malformed descriptor.\n\nAdd a proper size check to abort the loop for plugging the hole.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46146",
"url": "https://www.suse.com/security/cve/CVE-2026-46146"
},
{
"category": "external",
"summary": "SUSE Bug 1267571 for CVE-2026-46146",
"url": "https://bugzilla.suse.com/1267571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46146"
},
{
"cve": "CVE-2026-46147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46147"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()\n\nTwo bugs exist in the vCPU initialisation path:\n\n1. If a check fails after hyp_pin_shared_mem() succeeds, the cleanup\n path jumps to \u0027unlock\u0027 without calling unpin_host_vcpu() or\n unpin_host_sve_state(), permanently leaking pin references on the\n host vCPU and SVE state pages.\n\n Extract a register_hyp_vcpu() helper that performs the checks and\n the store. When register_hyp_vcpu() returns an error, call\n unpin_host_vcpu() and unpin_host_sve_state() inline before falling\n through to the existing \u0027unlock\u0027 label.\n\n2. register_hyp_vcpu() publishes the new vCPU pointer into\n \u0027hyp_vm-\u003evcpus[]\u0027 with a bare store, allowing a concurrent caller\n of pkvm_load_hyp_vcpu() to observe a partially initialised vCPU\n object.\n\n Ensure the store uses smp_store_release() and the load uses\n smp_load_acquire(). While \u0027vm_table_lock\u0027 currently serialises the\n store and the load, these barriers ensure the reader sees the fully\n initialised \u0027hyp_vcpu\u0027 object even if there were a lockless path or\n if the lock\u0027s own ordering guarantees were insufficient for nested\n object initialization.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46147",
"url": "https://www.suse.com/security/cve/CVE-2026-46147"
},
{
"category": "external",
"summary": "SUSE Bug 1267689 for CVE-2026-46147",
"url": "https://bugzilla.suse.com/1267689"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46147"
},
{
"cve": "CVE-2026-46151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: usblp: fix heap leak in IEEE 1284 device ID via short response\n\nusblp_ctrl_msg() collapses the usb_control_msg() return value to\n0/-errno, discarding the actual number of bytes transferred. A broken\nprinter can complete the GET_DEVICE_ID control transfer short and the\ndriver has no way to know.\n\nusblp_cache_device_id_string() reads the 2-byte big-endian length prefix\nfrom the response and trusts it (clamped only to the buffer bounds).\nThe buffer is kmalloc(1024) at probe time. A device that sends exactly\ntwo bytes (e.g. 0x03 0xFF, claiming a 1023-byte ID) leaves\ndevice_id_string[2..1022] holding stale kmalloc heap.\n\nThat stale data is then exposed:\n - via the ieee1284_id sysfs attribute (sprintf(\"%s\", buf+2), truncated\n at the first NUL in the stale heap), and\n - via the IOCNR_GET_DEVICE_ID ioctl, which copy_to_user()s the full\n claimed length regardless of NULs, up to 1021 bytes of uninitialized\n heap, with the leak size chosen by the device.\n\nFix this up by just zapping the buffer with zeros before each request\nsent to the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46151",
"url": "https://www.suse.com/security/cve/CVE-2026-46151"
},
{
"category": "external",
"summary": "SUSE Bug 1267728 for CVE-2026-46151",
"url": "https://bugzilla.suse.com/1267728"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46151"
},
{
"cve": "CVE-2026-46152",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46152"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: drop stray \u0027static\u0027 from fast-RX rx_result\n\nieee80211_invoke_fast_rx() is documented as safe for parallel RX, but\nits per-invocation rx_result is declared static. Concurrent callers then\nshare one instance and can overwrite each other\u0027s result between\nieee80211_rx_mesh_data() and the switch on res.\n\nThat can make a packet that was queued or consumed by\nieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make\na packet that should continue return as queued.\n\nMake res an automatic variable so each invocation keeps its own result.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46152",
"url": "https://www.suse.com/security/cve/CVE-2026-46152"
},
{
"category": "external",
"summary": "SUSE Bug 1266855 for CVE-2026-46152",
"url": "https://bugzilla.suse.com/1266855"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46152"
},
{
"cve": "CVE-2026-46158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46158"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: ADD_ADDR rtx: always decrease sk refcount\n\nWhen an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer().\nIt should then be released in all cases at the end.\n\nSome (unlikely) checks were returning directly instead of calling\nsock_put() to decrease the refcount. Jump to a new \u0027exit\u0027 label to call\n__sock_put() (which will become sock_put() in the next commit) to fix\nthis potential leak.\n\nWhile at it, drop the \u0027!msk\u0027 check which cannot happen because it is\nnever reset, and explicitly mark the remaining one as \"unlikely\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46158",
"url": "https://www.suse.com/security/cve/CVE-2026-46158"
},
{
"category": "external",
"summary": "SUSE Bug 1266880 for CVE-2026-46158",
"url": "https://bugzilla.suse.com/1266880"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46158"
},
{
"cve": "CVE-2026-46163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46163"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: b43legacy: enforce bounds check on firmware key index in RX path\n\nSame fix as b43: the firmware-controlled key index in b43legacy_rx()\ncan exceed dev-\u003emax_nr_keys. The existing B43legacy_WARN_ON is\nnon-enforcing in production builds, allowing an out-of-bounds read of\ndev-\u003ekey[].\n\nMake the check enforcing by dropping the frame for invalid indices.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46163",
"url": "https://www.suse.com/security/cve/CVE-2026-46163"
},
{
"category": "external",
"summary": "SUSE Bug 1266863 for CVE-2026-46163",
"url": "https://bugzilla.suse.com/1266863"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46163"
},
{
"cve": "CVE-2026-46165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46165"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: vport: fix self-deadlock on release of tunnel ports\n\nvports are used concurrently and protected by RCU, so netdev_put()\nmust happen after the RCU grace period. So, either in an RCU call or\nafter the synchronize_net(). The rtnl_delete_link() must happen under\nRTNL and so can\u0027t be executed in RCU context. Calling synchronize_net()\nwhile holding RTNL is not a good idea for performance and system\nstability under load in general, so calling netdev_put() in RCU call\nis the right solution here.\n\nHowever,\nwhen the device is deleted, rtnl_unlock() will call netdev_run_todo()\nand block until all the references are gone. In the current code this\nmeans that we never reach the call_rcu() and the vport is never freed\nand the reference is never released, causing a self-deadlock on device\nremoval.\n\nFix that by moving the rcu_call() before the rtnl_unlock(), so the\nscheduled RCU callback will be executed when synchronize_net() is\ncalled from the rtnl_unlock()-\u003enetdev_run_todo() while the RTNL itself\nis already released.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46165",
"url": "https://www.suse.com/security/cve/CVE-2026-46165"
},
{
"category": "external",
"summary": "SUSE Bug 1266836 for CVE-2026-46165",
"url": "https://bugzilla.suse.com/1266836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46165"
},
{
"cve": "CVE-2026-46167",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46167"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl\n\nJust like in a previous problem in this driver, usblp_ctrl_msg() will\ncollapse the usb_control_msg() return value to 0/-errno, discarding the\nactual number of bytes transferred.\n\nIdeally that short command should be detected and error out, but many\nprinters are known to send \"incorrect\" responses back so we can\u0027t just\ndo that.\n\nstatusbuf is kmalloc(8) at probe time and never filled before the first\nLPGETSTATUS ioctl.\n\nusblp_read_status() requests 1 byte. If a malicious printer responds\nwith zero bytes, *statusbuf is one byte of stale kmalloc heap,\nsign-extended into the local int status, which the LPGETSTATUS path then\ncopy_to_user()s directly to the ioctl caller.\n\nFix this all by just zapping out the memory buffer when allocated at\nprobe time. If a later call does a short read, the data will be\nidentical to what the device sent it the last time, so there is no\n\"leak\" of information happening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46167",
"url": "https://www.suse.com/security/cve/CVE-2026-46167"
},
{
"category": "external",
"summary": "SUSE Bug 1266832 for CVE-2026-46167",
"url": "https://bugzilla.suse.com/1266832"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46167"
},
{
"cve": "CVE-2026-46168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46168"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix scheduling with atomic in timestamp sockopt\n\nUsing lock_sock_fast() (atomic context) around sock_set_timestamp()\nand sock_set_timestamping() is unsafe, as both helpers can sleep.\n\nReplace lock_sock_fast() with sleepable lock_sock()/release_sock()\nto avoid scheduling while atomic panic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46168",
"url": "https://www.suse.com/security/cve/CVE-2026-46168"
},
{
"category": "external",
"summary": "SUSE Bug 1266869 for CVE-2026-46168",
"url": "https://bugzilla.suse.com/1266869"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46168"
},
{
"cve": "CVE-2026-46170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46170"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: ADD_ADDR rtx: free sk if last\n\nWhen an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer(),\nand released at the end.\n\nIf at that moment, it was the last reference being held, the sk would\nnot be freed. sock_put() should then be called instead of __sock_put().\n\nBut that\u0027s not enough: if it is the last reference, sock_put() will call\nsk_free(), which will end up calling sk_stop_timer_sync() on the same\ntimer, and waiting indefinitely to finish. So it is needed to mark that\nthe timer is done at the end of the timer handler when it has not been\nrescheduled, not to call sk_stop_timer_sync() on \"itself\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46170",
"url": "https://www.suse.com/security/cve/CVE-2026-46170"
},
{
"category": "external",
"summary": "SUSE Bug 1267714 for CVE-2026-46170",
"url": "https://bugzilla.suse.com/1267714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46170"
},
{
"cve": "CVE-2026-46174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46174"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache\n\nMake sure resources are not improperly shared in the op cache and\ncause instruction corruption this way.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46174",
"url": "https://www.suse.com/security/cve/CVE-2026-46174"
},
{
"category": "external",
"summary": "SUSE Bug 1267384 for CVE-2026-46174",
"url": "https://bugzilla.suse.com/1267384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46174"
},
{
"cve": "CVE-2026-46177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46177"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: Add limits to event and receive message requests\n\nThe driver would just fetch events and receive messages until the\nBMC said it was done. To avoid issues with BMCs that never say they are\ndone, add a limit of 10 fetches at a time.\n\nIn addition, an si interface has an attn state it can return from the\nhardware which is supposed to cause a flag fetch to see if the driver\nneeds to fetch events or message or a few other things. If the attn\nbit gets stuck, it\u0027s a similar problem. So allow messages in between\nflag fetches so the driver itself doesn\u0027t get stuck.\n\nThis is a more general fix than the previous fix for the specific bad\nBMC, but should fix the more general issue of a BMC that won\u0027t stop\nsaying it has data.\n\nThis has been there from the beginning of the driver. It\u0027s not a bug\nper-se, but it is accounting for bugs in BMCs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46177",
"url": "https://www.suse.com/security/cve/CVE-2026-46177"
},
{
"category": "external",
"summary": "SUSE Bug 1267725 for CVE-2026-46177",
"url": "https://bugzilla.suse.com/1267725"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46177"
},
{
"cve": "CVE-2026-46179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46179"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Don\u0027t allow pointer operations on unconfigured streams\n\nWhen reporting the pointer for a compressed stream we report the current\nI/O frame position by dividing the position by the number of channels\nmultiplied by the number of container bytes. These values default to 0 and\nare only configured as part of setting the stream parameters so this allows\na divide by zero to be configured. Validate that they are non zero,\nreturning an error if not",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46179",
"url": "https://www.suse.com/security/cve/CVE-2026-46179"
},
{
"category": "external",
"summary": "SUSE Bug 1267719 for CVE-2026-46179",
"url": "https://bugzilla.suse.com/1267719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46179"
},
{
"cve": "CVE-2026-46180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46180"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task\n\nWatchdog task might end between send_sig() and kthread_stop() calls, what\nresults in the use-after-free issue. Fix this by increasing watchdog task\nreference count before calling send_sig() and dropping it by switching to\nkthread_stop_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46180",
"url": "https://www.suse.com/security/cve/CVE-2026-46180"
},
{
"category": "external",
"summary": "SUSE Bug 1266813 for CVE-2026-46180",
"url": "https://bugzilla.suse.com/1266813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46180"
},
{
"cve": "CVE-2026-46184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46184"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsound: ua101: fix division by zero at probe\n\nAdd a missing sanity check for bNrChannels in detect_usb_format()\nto prevent a division by zero in playback_urb_complete() and\ncapture_urb_complete().\n\nUSB core does not validate class-specific descriptor fields such\nas bNrChannels, so drivers must verify them before use. If a\ndevice provides bNrChannels = 0, frame_bytes becomes zero and is\nlater used as a divisor in the URB completion handlers, leading\nto a kernel crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46184",
"url": "https://www.suse.com/security/cve/CVE-2026-46184"
},
{
"category": "external",
"summary": "SUSE Bug 1266864 for CVE-2026-46184",
"url": "https://bugzilla.suse.com/1266864"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46184"
},
{
"cve": "CVE-2026-46186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46186"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: virtio_bt: validate rx pkt_type header length\n\nvirtbt_rx_handle() reads the leading pkt_type byte from the RX skb\nand forwards the remainder to hci_recv_frame() for every\nevent/ACL/SCO/ISO type, without checking that the remaining payload\nis at least the fixed HCI header for that type.\n\nAfter the preceding patch bounds the backend-supplied used.len to\n[1, VIRTBT_RX_BUF_SIZE], a one-byte completion still reaches\nhci_recv_frame() with skb-\u003elen already pulled to 0. If the byte\nhappened to be HCI_ACLDATA_PKT, the ACL-vs-ISO classification\nfast-path in hci_dev_classify_pkt_type() dereferences\nhci_acl_hdr(skb)-\u003ehandle whenever the HCI device has an active\nCIS_LINK, BIS_LINK, or PA_LINK connection, reading two bytes of\nuninitialized RX-buffer data. The same hazard exists for every\npacket type the driver accepts because none of the switch cases in\nvirtbt_rx_handle() check skb-\u003elen against the per-type minimum HCI\nheader size before handing the frame to the core.\n\nAfter stripping pkt_type, require skb-\u003elen to cover the fixed\nheader size for the selected type (event 2, ACL 4, SCO 3, ISO 4)\nbefore calling hci_recv_frame(); drop ratelimited otherwise.\nUnknown pkt_type values still take the original kfree_skb() default\npath.\n\nUse bt_dev_err_ratelimited() because both the length and pkt_type\nvalues come from an untrusted backend that can otherwise flood the\nkernel log.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46186",
"url": "https://www.suse.com/security/cve/CVE-2026-46186"
},
{
"category": "external",
"summary": "SUSE Bug 1266917 for CVE-2026-46186",
"url": "https://bugzilla.suse.com/1266917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46186"
},
{
"cve": "CVE-2026-46187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46187"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rsi: fix kthread lifetime race between self-exit and external-stop\n\nRSI driver use both self-exit(kthread_complete_and_exit) and external-stop\n(kthread_stop) when killing a kthread. Generally, kthread_stop() is called\nfirst, and in this case, no particular issues occur.\n\nHowever, in rare instances where kthread_complete_and_exit() is called\nfirst and then kthread_stop() is called, a UAF occurs because the kthread\nobject, which has already exited and been freed, is accessed again.\n\nTherefore, to prevent this with minimal modification, you must remove\nkthread_stop() and change the code to wait until the self-exit operation\nis completed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46187",
"url": "https://www.suse.com/security/cve/CVE-2026-46187"
},
{
"category": "external",
"summary": "SUSE Bug 1266842 for CVE-2026-46187",
"url": "https://bugzilla.suse.com/1266842"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46187"
},
{
"cve": "CVE-2026-46189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46189"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path\n\nSashiko points out that pvrdma_uar_free() is already called within\npvrdma_dealloc_ucontext(), so calling it before triggers a double free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46189",
"url": "https://www.suse.com/security/cve/CVE-2026-46189"
},
{
"category": "external",
"summary": "SUSE Bug 1266918 for CVE-2026-46189",
"url": "https://bugzilla.suse.com/1266918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46189"
},
{
"cve": "CVE-2026-46191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46191"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbcon: Avoid OOB font access if console rotation fails\n\nClear the font buffer if the reallocation during console rotation fails\nin fbcon_rotate_font(). The putcs implementations for the rotated buffer\nwill return early in this case. See [1] for an example.\n\nCurrently, fbcon_rotate_font() keeps the old buffer, which is too small\nfor the rotated font. Printing to the rotated console with a high-enough\ncharacter code will overflow the font buffer.\n\nv2:\n- fix typos in commit message",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46191",
"url": "https://www.suse.com/security/cve/CVE-2026-46191"
},
{
"category": "external",
"summary": "SUSE Bug 1267690 for CVE-2026-46191",
"url": "https://bugzilla.suse.com/1267690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46191"
},
{
"cve": "CVE-2026-46193",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46193"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: ah: account for ESN high bits in async callbacks\n\nAH allocates its temporary auth/ICV layout differently when ESN is enabled:\nthe async ahash setup appends a 4-byte seqhi slot before the ICV or\nauth_data area, but the async completion callbacks still reconstruct the\ntemporary layout as if seqhi were absent.\n\nWith an async AH implementation selected, that makes AH copy or compare\nthe wrong bytes on both the IPv4 and IPv6 paths. In UML repro on IPv4 AH\nwith ESN and forced async hmac(sha1), ping fails with 100% packet loss,\nand the callback logs show the pre-fix drift:\n\n ah4 output_done: esn=1 err=0 icv_off=20 expected_off=24\n ah4 input_done: esn=1 auth_off=20 expected_auth_off=24 icv_off=32 expected_icv_off=36\n\nReconstruct the callback-side layout the same way the setup path built it\nby skipping the ESN seqhi slot before locating the saved auth_data or ICV.\nPer RFC 4302, the ESN high-order 32 bits participate in the AH ICV\ncomputation, so the async callbacks must account for the seqhi slot.\n\nPost-fix, the same IPv4 AH+ESN+forced-async-hmac(sha1) UML repro shows\nthe corrected offset (ah4 output_done: esn=1 err=0 icv_off=24\nexpected_off=24) and ping succeeds; net/ipv4/ah4.o and net/ipv6/ah6.o\nbuild clean at W=1. IPv6 AH+ESN was not exercised at runtime, and the\nchange has not been tested against a real async hardware AH engine.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46193",
"url": "https://www.suse.com/security/cve/CVE-2026-46193"
},
{
"category": "external",
"summary": "SUSE Bug 1267656 for CVE-2026-46193",
"url": "https://bugzilla.suse.com/1267656"
},
{
"category": "external",
"summary": "SUSE Bug 1267892 for CVE-2026-46193",
"url": "https://bugzilla.suse.com/1267892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46193"
},
{
"cve": "CVE-2026-46198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46198"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: fix integer overflow on buff_pos\n\nFixing an integer overflow present in batadv_iv_ogm_send_to_if. The size\ncheck is done using the int type in batadv_iv_ogm_aggr_packet whereas the\nbuff_pos variable uses the s16 type. This could lead to an out-of-bound\nread.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46198",
"url": "https://www.suse.com/security/cve/CVE-2026-46198"
},
{
"category": "external",
"summary": "SUSE Bug 1266854 for CVE-2026-46198",
"url": "https://bugzilla.suse.com/1266854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46198"
},
{
"cve": "CVE-2026-46199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46199"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg\n\nCheck bounds against the end of the BO whenever we access the msg.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46199",
"url": "https://www.suse.com/security/cve/CVE-2026-46199"
},
{
"category": "external",
"summary": "SUSE Bug 1267638 for CVE-2026-46199",
"url": "https://bugzilla.suse.com/1267638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46199"
},
{
"cve": "CVE-2026-46204",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46204"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn4: Prevent OOB reads when parsing IB\n\nRewrite the IB parsing to use amdgpu_ib_get_value() which handles the\nbounds checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46204",
"url": "https://www.suse.com/security/cve/CVE-2026-46204"
},
{
"category": "external",
"summary": "SUSE Bug 1267661 for CVE-2026-46204",
"url": "https://bugzilla.suse.com/1267661"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46204"
},
{
"cve": "CVE-2026-46205",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46205"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: media: atomisp: Disallow all private IOCTLs\n\nDisallow all private IOCTLs. These aren\u0027t quite as safe as one could\nassume of IOCTL handlers; disable them for now. Instead of removing the\ncode, return in the beginning of the function if cmd is non-zero in order\nto keep static checkers happy.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46205",
"url": "https://www.suse.com/security/cve/CVE-2026-46205"
},
{
"category": "external",
"summary": "SUSE Bug 1266908 for CVE-2026-46205",
"url": "https://bugzilla.suse.com/1266908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46205"
},
{
"cve": "CVE-2026-46206",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46206"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: reject new tp_meter sessions during teardown\n\nPrevent tp_meter from starting new sender or receiver sessions after\nmesh_state has left BATADV_MESH_ACTIVE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46206",
"url": "https://www.suse.com/security/cve/CVE-2026-46206"
},
{
"category": "external",
"summary": "SUSE Bug 1266834 for CVE-2026-46206",
"url": "https://bugzilla.suse.com/1266834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46206"
},
{
"cve": "CVE-2026-46207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46207"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: fix empty payload in tap skb for non-linear buffers\n\nFor non-linear skbs, virtio_transport_build_skb() goes through\nvirtio_transport_copy_nonlinear_skb() to copy the original payload\nin the new skb to be delivered to the vsockmon tap device.\nThis manually initializes an iov_iter but does not set iov_iter.count.\nSince the iov_iter is zero-initialized, the copy length is zero and no\npayload is actually copied to the monitor interface, leaving data\nun-initialized.\n\nFix this by removing the linear vs non-linear split and using\nskb_copy_datagram_iter() with iov_iter_kvec() for all cases, as\nvhost-vsock already does. This handles both linear and non-linear skbs,\nproperly initializes the iov_iter, and removes the now unused\nvirtio_transport_copy_nonlinear_skb().\n\nWhile touching this code, let\u0027s also check the return value of\nskb_copy_datagram_iter(), even though it\u0027s unlikely to fail.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46207",
"url": "https://www.suse.com/security/cve/CVE-2026-46207"
},
{
"category": "external",
"summary": "SUSE Bug 1267691 for CVE-2026-46207",
"url": "https://bugzilla.suse.com/1267691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-46207"
},
{
"cve": "CVE-2026-46212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46212"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: bla: prevent use-after-free when deleting claims\n\nWhen batadv_bla_del_backbone_claims() removes all claims for a backbone, it\ndoes this by dropping the link entry in the hash list. This list entry\nitself was one of the references which need to be dropped at the same time\nvia batadv_claim_put().\n\nBut the batadv_claim_put() must not be done before the last access to the\nclaim object in this function. Otherwise the claim might be freed already\nby the batadv_claim_release() function before the list entry was dropped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46212",
"url": "https://www.suse.com/security/cve/CVE-2026-46212"
},
{
"category": "external",
"summary": "SUSE Bug 1267693 for CVE-2026-46212",
"url": "https://bugzilla.suse.com/1267693"
},
{
"category": "external",
"summary": "SUSE Bug 1267694 for CVE-2026-46212",
"url": "https://bugzilla.suse.com/1267694"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-46212"
},
{
"cve": "CVE-2026-46218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46218"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Add bounds checking to ib_{get,set}_value\n\nThe uvd/vce/vcn code accesses the IB at predefined offsets without\nchecking that the IB is large enough. Check the bounds here. The caller\nis responsible for making sure it can handle arbitrary return values.\n\nAlso make the idx a uint32_t to prevent overflows causing the condition\nto fail.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46218",
"url": "https://www.suse.com/security/cve/CVE-2026-46218"
},
{
"category": "external",
"summary": "SUSE Bug 1267632 for CVE-2026-46218",
"url": "https://bugzilla.suse.com/1267632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46218"
},
{
"cve": "CVE-2026-46219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46219"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mpc52xx: fix use-after-free on unbind\n\nThe state machine work is scheduled by the interrupt handler and\ntherefore needs to be cancelled after disabling interrupts to avoid a\npotential use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46219",
"url": "https://www.suse.com/security/cve/CVE-2026-46219"
},
{
"category": "external",
"summary": "SUSE Bug 1267667 for CVE-2026-46219",
"url": "https://bugzilla.suse.com/1267667"
},
{
"category": "external",
"summary": "SUSE Bug 1267890 for CVE-2026-46219",
"url": "https://bugzilla.suse.com/1267890"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-46219"
},
{
"cve": "CVE-2026-46220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46220"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission\n\nsdma_v4_0_ring_emit_fence() contains two BUG_ON(addr \u0026 0x3) assertions\nthat verify fence writeback addresses are dword-aligned. These\nassertions can be reached from unprivileged userspace via crafted\nDRM_IOCTL_AMDGPU_CS submissions, causing a fatal kernel panic in a\nscheduler worker thread.\n\nReplace both BUG_ON() calls with WARN_ON() to log the condition without\ncrashing the kernel. A misaligned fence address at this point indicates\na driver bug, but crashing the kernel is never the correct response when\nthe assertion is reachable from userspace.\n\nThe CS IOCTL path is the correct place to filter invalid submissions;\nthe ring emission callback is too late to do anything about it.\n\n(cherry picked from commit b90250bd933afd1ba94d86d6b13821997b22b18e)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46220",
"url": "https://www.suse.com/security/cve/CVE-2026-46220"
},
{
"category": "external",
"summary": "SUSE Bug 1267704 for CVE-2026-46220",
"url": "https://bugzilla.suse.com/1267704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46220"
},
{
"cve": "CVE-2026-46225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46225"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: rspi: fix controller deregistration\n\nMake sure to deregister the controller before releasing underlying\nresources like DMA during driver unbind.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46225",
"url": "https://www.suse.com/security/cve/CVE-2026-46225"
},
{
"category": "external",
"summary": "SUSE Bug 1267627 for CVE-2026-46225",
"url": "https://bugzilla.suse.com/1267627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46225"
},
{
"cve": "CVE-2026-46230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46230"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg\n\nCheck bounds against the end of the BO whenever we access the msg.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46230",
"url": "https://www.suse.com/security/cve/CVE-2026-46230"
},
{
"category": "external",
"summary": "SUSE Bug 1267623 for CVE-2026-46230",
"url": "https://bugzilla.suse.com/1267623"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46230"
},
{
"cve": "CVE-2026-46231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: bla: put backbone reference on failed claim hash insert\n\nWhen batadv_bla_add_claim() fails to insert a new claim into the hash, it\nleaked a reference to the backbone_gw for which the claim was intended.\nCall batadv_backbone_gw_put() on the error path to release the reference\nand avoid leaking the backbone_gw object.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46231",
"url": "https://www.suse.com/security/cve/CVE-2026-46231"
},
{
"category": "external",
"summary": "SUSE Bug 1267565 for CVE-2026-46231",
"url": "https://bugzilla.suse.com/1267565"
},
{
"category": "external",
"summary": "SUSE Bug 1267566 for CVE-2026-46231",
"url": "https://bugzilla.suse.com/1267566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46231"
},
{
"cve": "CVE-2026-46232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46232"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: playstation: Clamp num_touch_reports\n\nA device would never lie about the number of touch reports would it?\n\nIf it does the loop in dualshock4_parse_report will read off the end of\nthe touch_reports array, up to about 2 KiB for the maximum number of 256\nloop iteraions. The data that is read is emitted via evdev if the\nDS4_TOUCH_POINT_INACTIVE bit happens to be set. Protect against this by\nclamping the num_touch_reports value provided by the device to the\nmaximum size of the touch_reports array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46232",
"url": "https://www.suse.com/security/cve/CVE-2026-46232"
},
{
"category": "external",
"summary": "SUSE Bug 1267669 for CVE-2026-46232",
"url": "https://bugzilla.suse.com/1267669"
},
{
"category": "external",
"summary": "SUSE Bug 1267889 for CVE-2026-46232",
"url": "https://bugzilla.suse.com/1267889"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46232"
},
{
"cve": "CVE-2026-46233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46233"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: bla: only purge non-released claims\n\nWhen batadv_bla_purge_claims() goes through the list of claims, it is only\ntraversing the hash list with an rcu_read_lock(). Due to a potential\nparallel batadv_claim_put(), it can happen that it encounters a claim which\nwas actually in the process of being released+freed by\nbatadv_claim_release(). In this case, backbone_gw is set to NULL before the\ndelayed RCU kfree is started. Calling batadv_bla_claim_get_backbone_gw() is\nthen no longer allowed because it would cause a NULL-ptr derefence.\n\nTo avoid this, only claims with a valid reference counter must be purged.\nAll others are already taken care of.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46233",
"url": "https://www.suse.com/security/cve/CVE-2026-46233"
},
{
"category": "external",
"summary": "SUSE Bug 1267701 for CVE-2026-46233",
"url": "https://bugzilla.suse.com/1267701"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46233"
},
{
"cve": "CVE-2026-46234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46234"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: fix buffer size clamping order\n\nIn vsock_update_buffer_size(), the buffer size was being clamped to the\nmaximum first, and then to the minimum. If a user sets a minimum buffer\nsize larger than the maximum, the minimum check overrides the maximum\ncheck, inverting the constraint.\n\nThis breaks the intended socket memory boundaries by allowing the\nvsk-\u003ebuffer_size to grow beyond the configured vsk-\u003ebuffer_max_size.\n\nFix this by checking the minimum first, and then the maximum. This\nensures the buffer size never exceeds the buffer_max_size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46234",
"url": "https://www.suse.com/security/cve/CVE-2026-46234"
},
{
"category": "external",
"summary": "SUSE Bug 1266904 for CVE-2026-46234",
"url": "https://bugzilla.suse.com/1266904"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46234"
},
{
"cve": "CVE-2026-46235",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46235"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: saa7164: add ioremap return checks and cleanups\n\nAdd checks for ioremap return values in saa7164_dev_setup(). If\nioremap for BAR0 or BAR2 fails, release the already allocated PCI\nmemory regions, remove the device from the global list, decrement\nthe device count, and return -ENODEV.\n\nThis prevents potential null pointer dereferences and ensures proper\ncleanup on memory mapping failures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46235",
"url": "https://www.suse.com/security/cve/CVE-2026-46235"
},
{
"category": "external",
"summary": "SUSE Bug 1267702 for CVE-2026-46235",
"url": "https://bugzilla.suse.com/1267702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46235"
},
{
"cve": "CVE-2026-46236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46236"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rc: xbox_remote: heed DMA restrictions\n\nThe buffer for IO must not be part of the device structure\nbecause that violates the DMA coherency rules.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46236",
"url": "https://www.suse.com/security/cve/CVE-2026-46236"
},
{
"category": "external",
"summary": "SUSE Bug 1266910 for CVE-2026-46236",
"url": "https://bugzilla.suse.com/1266910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46236"
},
{
"cve": "CVE-2026-46238",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46238"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: stop caching unowned originator pointers in BAT IV\n\nBAT IV keeps the last-hop neighbor address in each neigh_node, but some\npaths also cache an originator pointer derived from a temporary lookup.\nThat pointer is not owned by the neigh_node and may no longer refer to a\nlive originator entry after purge handling runs.\n\nStop storing the auxiliary originator pointer in the BAT IV neighbor\nstate. When BAT IV needs the neighbor originator data, resolve it from\nthe stored neighbor address and drop the reference again after use.\n\n[sven: avoid bonding logic for outgoing OGM]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46238",
"url": "https://www.suse.com/security/cve/CVE-2026-46238"
},
{
"category": "external",
"summary": "SUSE Bug 1266846 for CVE-2026-46238",
"url": "https://bugzilla.suse.com/1266846"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46238"
},
{
"cve": "CVE-2026-46243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46243"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject userspace cifs.spnego descriptions\n\ncifs.spnego key descriptions contain authority-bearing fields such as\npid, uid, creduid, and upcall_target that cifs.upcall treats as\nkernel-originating inputs. However, userspace can also create keys of\nthis type through request_key(2) or add_key(2), allowing those fields to\nbe supplied without CIFS origin.\n\nOnly accept cifs.spnego descriptions while CIFS is using its private\nspnego_cred to request the key.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46243",
"url": "https://www.suse.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "SUSE Bug 1266238 for CVE-2026-46243",
"url": "https://bugzilla.suse.com/1266238"
},
{
"category": "external",
"summary": "SUSE Bug 1266265 for CVE-2026-46243",
"url": "https://bugzilla.suse.com/1266265"
},
{
"category": "external",
"summary": "SUSE Bug 1271478 for CVE-2026-46243",
"url": "https://bugzilla.suse.com/1271478"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-46243"
},
{
"cve": "CVE-2026-46245",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46245"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix dc_link NULL handling in HPD init\n\namdgpu_dm_hpd_init() may see connectors without a valid dc_link.\n\nThe code already checks dc_link for the polling decision, but later\nunconditionally dereferences it when setting up HPD interrupts.\n\nAssign dc_link early and skip connectors where it is NULL.\n\nFixes the below:\ndrivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_irq.c:940 amdgpu_dm_hpd_init()\nerror: we previously assumed \u0027dc_link\u0027 could be null (see line 931)\n\ndrivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_irq.c\n 923 /*\n 924 * Analog connectors may be hot-plugged unlike other connector\n 925 * types that don\u0027t support HPD. Only poll analog connectors.\n 926 */\n 927 use_polling |=\n 928 amdgpu_dm_connector-\u003edc_link \u0026\u0026\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ The patch adds this NULL check but hopefully it can be removed\n\n 929 dc_connector_supports_analog(amdgpu_dm_connector-\u003edc_link-\u003elink_id.id);\n 930\n 931 dc_link = amdgpu_dm_connector-\u003edc_link;\n\ndc_link assigned here.\n\n 932\n 933 /*\n 934 * Get a base driver irq reference for hpd ints for the lifetime\n 935 * of dm. Note that only hpd interrupt types are registered with\n 936 * base driver; hpd_rx types aren\u0027t. IOW, amdgpu_irq_get/put on\n 937 * hpd_rx isn\u0027t available. DM currently controls hpd_rx\n 938 * explicitly with dc_interrupt_set()\n 939 */\n--\u003e 940 if (dc_link-\u003eirq_source_hpd != DC_IRQ_SOURCE_INVALID) {\n ^^^^^^^^^^^^^^^^^^^^^^^ If it\u0027s NULL then we are trouble because we dereference it here.\n\n 941 irq_type = dc_link-\u003eirq_source_hpd - DC_IRQ_SOURCE_HPD1;\n 942 /*\n 943 * TODO: There\u0027s a mismatch between mode_info.num_hpd\n 944 * and what bios reports as the # of connectors with hpd",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46245",
"url": "https://www.suse.com/security/cve/CVE-2026-46245"
},
{
"category": "external",
"summary": "SUSE Bug 1267678 for CVE-2026-46245",
"url": "https://bugzilla.suse.com/1267678"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46245"
},
{
"cve": "CVE-2026-46247",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46247"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: gfx3d: add parent to parent request map\n\nAfter commit d228ece36345 (\"clk: divider: remove round_rate() in favor\nof determine_rate()\") determining GFX3D clock rate crashes, because the\npassed parent map doesn\u0027t provide the expected best_parent_hw clock\n(with the roundd_rate path before the offending commit the\nbest_parent_hw was ignored).\n\nSet the field in parent_req in addition to setting it in the req,\nfixing the crash.\n\n clk_hw_round_rate (drivers/clk/clk.c:1764) (P)\n clk_divider_bestdiv (drivers/clk/clk-divider.c:336)\n divider_determine_rate (drivers/clk/clk-divider.c:358)\n clk_alpha_pll_postdiv_determine_rate (drivers/clk/qcom/clk-alpha-pll.c:1275)\n clk_core_determine_round_nolock (drivers/clk/clk.c:1606)\n clk_core_round_rate_nolock (drivers/clk/clk.c:1701)\n __clk_determine_rate (drivers/clk/clk.c:1741)\n clk_gfx3d_determine_rate (drivers/clk/qcom/clk-rcg2.c:1268)\n clk_core_determine_round_nolock (drivers/clk/clk.c:1606)\n clk_core_round_rate_nolock (drivers/clk/clk.c:1701)\n clk_core_round_rate_nolock (drivers/clk/clk.c:1710)\n clk_round_rate (drivers/clk/clk.c:1804)\n dev_pm_opp_set_rate (drivers/opp/core.c:1440 (discriminator 1))\n msm_devfreq_target (drivers/gpu/drm/msm/msm_gpu_devfreq.c:51)\n devfreq_set_target (drivers/devfreq/devfreq.c:360)\n devfreq_update_target (drivers/devfreq/devfreq.c:426)\n devfreq_monitor (drivers/devfreq/devfreq.c:458)\n process_one_work (arch/arm64/include/asm/jump_label.h:36 include/trace/events/workqueue.h:110 kernel/workqueue.c:3284)\n worker_thread (kernel/workqueue.c:3356 (discriminator 2) kernel/workqueue.c:3443 (discriminator 2))\n kthread (kernel/kthread.c:467)\n ret_from_fork (arch/arm64/kernel/entry.S:861)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46247",
"url": "https://www.suse.com/security/cve/CVE-2026-46247"
},
{
"category": "external",
"summary": "SUSE Bug 1267666 for CVE-2026-46247",
"url": "https://bugzilla.suse.com/1267666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46247"
},
{
"cve": "CVE-2026-46249",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46249"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: Fix PF driver crash with kexec kernel booting\n\nDuring a kexec reboot the hardware is not power-cycled, so AF state from\nthe old kernel can persist into the new kernel. When AF and PF drivers\nare built as modules, the PF driver may probe before AF reinitializes\nthe hardware.\n\nThe PF driver treats the RVUM block revision as an indication that AF\ninitialization is complete. If this value is left uncleared at shutdown,\nPF may incorrectly assume AF is ready and access stale hardware state,\nleading to a crash.\n\nClear the RVUM block revision during AF shutdown to avoid PF\nmis-detecting AF readiness after kexec.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46249",
"url": "https://www.suse.com/security/cve/CVE-2026-46249"
},
{
"category": "external",
"summary": "SUSE Bug 1267683 for CVE-2026-46249",
"url": "https://bugzilla.suse.com/1267683"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46249"
},
{
"cve": "CVE-2026-46252",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46252"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: core: fix locking in regulator_resolve_supply() error path\n\nIf late enabling of a supply regulator fails in\nregulator_resolve_supply(), the code currently triggers a lockdep\nwarning:\n\n WARNING: drivers/regulator/core.c:2649 at _regulator_put+0x80/0xa0, CPU#6: kworker/u32:4/596\n ...\n Call trace:\n _regulator_put+0x80/0xa0 (P)\n regulator_resolve_supply+0x7cc/0xbe0\n regulator_register_resolve_supply+0x28/0xb8\n\nas the regulator_list_mutex must be held when calling _regulator_put().\n\nTo solve this, simply switch to using regulator_put().\n\nWhile at it, we should also make sure that no concurrent access happens\nto our rdev while we clear out the supply pointer. Add appropriate\nlocking to ensure that.\n\nWhile the code in question will be removed altogether in a follow-up\ncommit, I believe it is still beneficial to have this corrected before\nremoval for future reference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46252",
"url": "https://www.suse.com/security/cve/CVE-2026-46252"
},
{
"category": "external",
"summary": "SUSE Bug 1267676 for CVE-2026-46252",
"url": "https://bugzilla.suse.com/1267676"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46252"
},
{
"cve": "CVE-2026-46261",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46261"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe()\n\nplatform_get_resource_byname() can return NULL, which would cause a crash\nwhen passed the pointer to resource_size().\n\nMove the fiu-\u003ememory_size assignment after the error check for\ndevm_ioremap_resource() to prevent the potential NULL pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46261",
"url": "https://www.suse.com/security/cve/CVE-2026-46261"
},
{
"category": "external",
"summary": "SUSE Bug 1267646 for CVE-2026-46261",
"url": "https://bugzilla.suse.com/1267646"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46261"
},
{
"cve": "CVE-2026-46265",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46265"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix WQ_MEM_RECLAIM warning\n\nWhen sunrpc is used, if a reset triggered, our wq may lead the\nfollowing trace:\n\nworkqueue: WQ_MEM_RECLAIM xprtiod:xprt_rdma_connect_worker [rpcrdma]\nis flushing !WQ_MEM_RECLAIM hns_roce_irq_workq:flush_work_handle\n[hns_roce_hw_v2]\nWARNING: CPU: 0 PID: 8250 at kernel/workqueue.c:2644 check_flush_dependency+0xe0/0x144\nCall trace:\n check_flush_dependency+0xe0/0x144\n start_flush_work.constprop.0+0x1d0/0x2f0\n __flush_work.isra.0+0x40/0xb0\n flush_work+0x14/0x30\n hns_roce_v2_destroy_qp+0xac/0x1e0 [hns_roce_hw_v2]\n ib_destroy_qp_user+0x9c/0x2b4\n rdma_destroy_qp+0x34/0xb0\n rpcrdma_ep_destroy+0x28/0xcc [rpcrdma]\n rpcrdma_ep_put+0x74/0xb4 [rpcrdma]\n rpcrdma_xprt_disconnect+0x1d8/0x260 [rpcrdma]\n xprt_rdma_connect_worker+0xc0/0x120 [rpcrdma]\n process_one_work+0x1cc/0x4d0\n worker_thread+0x154/0x414\n kthread+0x104/0x144\n ret_from_fork+0x10/0x18\n\nSince QP destruction frees memory, this wq should have the WQ_MEM_RECLAIM.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46265",
"url": "https://www.suse.com/security/cve/CVE-2026-46265"
},
{
"category": "external",
"summary": "SUSE Bug 1267662 for CVE-2026-46265",
"url": "https://bugzilla.suse.com/1267662"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46265"
},
{
"cve": "CVE-2026-46267",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46267"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: hci: shdlc: Stop timers and work before freeing context\n\nllc_shdlc_deinit() purges SHDLC skb queues and frees the llc_shdlc\nstructure while its timers and state machine work may still be active.\n\nTimer callbacks can schedule sm_work, and sm_work accesses SHDLC state\nand the skb queues. If teardown happens in parallel with a queued/running\nwork item, it can lead to UAF and other shutdown races.\n\nStop all SHDLC timers and cancel sm_work synchronously before purging the\nqueues and freeing the context.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46267",
"url": "https://www.suse.com/security/cve/CVE-2026-46267"
},
{
"category": "external",
"summary": "SUSE Bug 1267630 for CVE-2026-46267",
"url": "https://bugzilla.suse.com/1267630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46267"
},
{
"cve": "CVE-2026-46270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46270"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: rt9455: Fix use-after-free in power_supply_changed()\n\nUsing the `devm_` variant for requesting IRQ _before_ the `devm_`\nvariant for allocating/registering the `power_supply` handle, means that\nthe `power_supply` handle will be deallocated/unregistered _before_ the\ninterrupt handler (since `devm_` naturally deallocates in reverse\nallocation order). This means that during removal, there is a race\ncondition where an interrupt can fire just _after_ the `power_supply`\nhandle has been freed, *but* just _before_ the corresponding\nunregistration of the IRQ handler has run.\n\nThis will lead to the IRQ handler calling `power_supply_changed()` with\na freed `power_supply` handle. Which usually crashes the system or\notherwise silently corrupts the memory...\n\nNote that there is a similar situation which can also happen during\n`probe()`; the possibility of an interrupt firing _before_ registering\nthe `power_supply` handle. This would then lead to the nasty situation\nof using the `power_supply` handle *uninitialized* in\n`power_supply_changed()`.\n\nFix this racy use-after-free by making sure the IRQ is requested _after_\nthe registration of the `power_supply` handle.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46270",
"url": "https://www.suse.com/security/cve/CVE-2026-46270"
},
{
"category": "external",
"summary": "SUSE Bug 1267680 for CVE-2026-46270",
"url": "https://bugzilla.suse.com/1267680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46270"
},
{
"cve": "CVE-2026-46275",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46275"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_uart: fix UAFs and race conditions in close and init paths\n\nVulnerabilities leading to Use-After-Free (UAF) and Null Pointer\nDereference (NPD) conditions were observed in the lifecycle management\nof hci_uart.\n\nThe primary issue arises because the workqueues (init_ready and\nwrite_work) are only flushed/cancelled if the HCI_UART_PROTO_READY\nflag is set during TTY close. If a hangup occurs before setup completes,\nhci_uart_tty_close() skips the teardown of these workqueues and\nproceeds to free the `hu` struct. When the scheduled work executes\nlater, it blindly dereferences the freed `hu` struct.\n\nFurthermore, several data races and UAFs were identified in the teardown\nsequence:\n1. Calling hci_uart_flush() from hci_uart_close() without effectively\n disabling write_work causes a race condition where both can concurrently\n double-free hu-\u003etx_skb. This happens because protocol timers can\n concurrently invoke hci_uart_tx_wakeup() and requeue write_work.\n2. Calling hci_free_dev(hdev) before hu-\u003eproto-\u003eclose(hu) causes a UAF\n when vendor specific protocol close callbacks dereference hu-\u003ehdev.\n3. In the initialization error paths, failing to take the proto_lock\n write lock before clearing PROTO_READY leads to races with active\n readers. Additionally, hci_uart_tty_receive() accesses hu-\u003ehdev\n outside the read lock, leading to UAFs if the initialization error\n path frees hdev concurrently.\n\nFix these synchronization and lifecycle issues by:\n1. Re-ordering hci_uart_tty_close() to clear HCI_UART_PROTO_READY first,\n followed immediately by a cancel_work_sync(\u0026hu-\u003ewrite_work). Clearing\n the flag locks out concurrent protocol timers from successfully invoking\n hci_uart_tx_wakeup(), effectively rendering the cancellation permanent\n and preventing the tx_skb double-free.\n2. Note: Clearing PROTO_READY early causes hci_uart_close() to skip\n hu-\u003eproto-\u003eflush(). This is perfectly safe in the tty_close path\n because hu-\u003eproto-\u003eclose() executes shortly after, which intrinsically\n purges all protocol SKB queues and tears down the state.\n3. Relocating hu-\u003eproto-\u003eclose(hu) strictly prior to hci_free_dev(hdev)\n across all close and error paths to prevent vendor-level UAFs.\n4. Moving the hdev-\u003estat.byte_rx increment in hci_uart_tty_receive()\n inside the proto_lock read-side critical section to safely synchronize\n with device unregistration.\n5. Adding cancel_work_sync(\u0026hu-\u003ewrite_work) to hci_uart_close() to safely\n flush the workqueue before hci_uart_flush() is invoked via the HCI core.\n6. Utilizing cancel_work_sync() instead of disable_work_sync() across\n all paths to prevent permanently breaking user-space retry capabilities.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46275",
"url": "https://www.suse.com/security/cve/CVE-2026-46275"
},
{
"category": "external",
"summary": "SUSE Bug 1267968 for CVE-2026-46275",
"url": "https://bugzilla.suse.com/1267968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46275"
},
{
"cve": "CVE-2026-46276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46276"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix zero-size GDS range init on RDNA4\n\nRDNA4 (GFX 12) hardware removes the GDS, GWS, and OA on-chip memory\nresources. The gfx_v12_0 initialisation code correctly leaves\nadev-\u003egds.gds_size, adev-\u003egds.gws_size, and adev-\u003egds.oa_size at\nzero to reflect this.\n\namdgpu_ttm_init() unconditionally calls amdgpu_ttm_init_on_chip() for\neach of these resources regardless of size. When the size is zero,\namdgpu_ttm_init_on_chip() forwards the call to ttm_range_man_init(),\nwhich calls drm_mm_init(mm, 0, 0). drm_mm_init() immediately fires\nDRM_MM_BUG_ON(start + size \u003c= start) -- trivially true when size is\nzero -- crashing the kernel during modprobe of amdgpu on an RX 9070 XT.\n\nGuard against this by returning 0 early from\namdgpu_ttm_init_on_chip() when size_in_page is zero. This skips TTM\nresource manager registration for hardware resources that are absent,\nwithout affecting any other GPU type.\n\nDRM_MM_BUG_ON() only asserts if CONFIG_DRM_DEBUG_MM is enabled in\nthe kernel config. This is apparently rarely enabled as these chips\nhave been in the market for over a year and this issue was only reported\nnow.\n\nOops-Analysis: http://oops.fenrus.org/reports/bugzilla.korg/221376/report.html\n(cherry picked from commit 5719ce5865279cad4fd5f01011fe037168503f2d)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46276",
"url": "https://www.suse.com/security/cve/CVE-2026-46276"
},
{
"category": "external",
"summary": "SUSE Bug 1267922 for CVE-2026-46276",
"url": "https://bugzilla.suse.com/1267922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46276"
},
{
"cve": "CVE-2026-46285",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46285"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: docg3: fix use-after-free in docg3_release()\n\nIn docg3_release(), the docg3 pointer is obtained from\ncascade-\u003efloors[0]-\u003epriv before the loop that calls\ndoc_release_device() on each floor. doc_release_device() frees the\ndocg3 struct via kfree(docg3) at line 1881. After the loop,\ndocg3-\u003ecascade-\u003ebch dereferences the already-freed pointer.\n\nFix this by accessing cascade-\u003ebch directly, which is equivalent\nsince docg3-\u003ecascade points back to the same cascade struct, and\nis already available as a local variable. This also removes the\nnow-unused docg3 local variable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46285",
"url": "https://www.suse.com/security/cve/CVE-2026-46285"
},
{
"category": "external",
"summary": "SUSE Bug 1267948 for CVE-2026-46285",
"url": "https://bugzilla.suse.com/1267948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46285"
},
{
"cve": "CVE-2026-46292",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46292"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: core: Fix detach procedure for virtual devices in genpd\n\nIf a device is attached to a PM domain through genpd_dev_pm_attach_by_id(),\ngenpd calls pm_runtime_enable() for the corresponding virtual device that\nit registers. While this avoids boilerplate code in drivers, there is no\ncorresponding call to pm_runtime_disable() in genpd_dev_pm_detach().\n\nThis means these virtual devices are typically detached from its genpd,\nwhile runtime PM remains enabled for them, which is not how things are\ndesigned to work. In worst cases it may lead to critical errors, like a\nNULL pointer dereference bug in genpd_runtime_suspend(), which was recently\nreported. For another case, we may end up keeping an unnecessary vote for a\nperformance state for the device.\n\nTo fix these problems, let\u0027s add this missing call to pm_runtime_disable()\nin genpd_dev_pm_detach().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46292",
"url": "https://www.suse.com/security/cve/CVE-2026-46292"
},
{
"category": "external",
"summary": "SUSE Bug 1267943 for CVE-2026-46292",
"url": "https://bugzilla.suse.com/1267943"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46292"
},
{
"cve": "CVE-2026-46294",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46294"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm: fix a buffer overflow in ioctl processing\n\nTony Asleson (using Claude) found a buffer overflow in dm-ioctl in the\nfunction retrieve_status:\n\n1. The code in retrieve_status checks that the output string fits into\n the output buffer and writes the output string there\n2. Then, the code aligns the \"outptr\" variable to the next 8-byte\n boundary:\n\toutptr = align_ptr(outptr);\n3. The alignment doesn\u0027t check overflow, so outptr could point past the\n buffer end\n4. The \"for\" loop is iterated again, it executes:\n\tremaining = len - (outptr - outbuf);\n5. If \"outptr\" points past \"outbuf + len\", the arithmetics wraps around\n and the variable \"remaining\" contains unusually high number\n6. With \"remaining\" being high, the code writes more data past the end of\n the buffer\n\nLuckily, this bug has no security implications because:\n1. Only root can issue device mapper ioctls\n2. The commonly used libraries that communicate with device mapper\n (libdevmapper and devicemapper-rs) use buffer size that is aligned to\n 8 bytes - thus, \"outptr = align_ptr(outptr)\" can\u0027t overshoot the input\n buffer and the bug can\u0027t happen accidentally",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46294",
"url": "https://www.suse.com/security/cve/CVE-2026-46294"
},
{
"category": "external",
"summary": "SUSE Bug 1267939 for CVE-2026-46294",
"url": "https://bugzilla.suse.com/1267939"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46294"
},
{
"cve": "CVE-2026-46306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46306"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nflow_dissector: do not dissect PPPoE PFC frames\n\nRFC 2516 Section 7 states that Protocol Field Compression (PFC) is NOT\nRECOMMENDED for PPPoE. In practice, pppd does not support negotiating\nPFC for PPPoE sessions, and the flow dissector driver has assumed an\nuncompressed frame until the blamed commit.\n\nDuring the review process of that commit [1], support for PFC is\nsuggested. However, having a compressed (1-byte) protocol field means\nthe subsequent PPP payload is shifted by one byte, causing 4-byte\nmisalignment for the network header and an unaligned access exception\non some architectures.\n\nThe exception can be reproduced by sending a PPPoE PFC frame to an\nethernet interface of a MIPS board, with RPS enabled, even if no PPPoE\nsession is active on that interface:\n\n$ 0 : 00000000 80c40000 00000000 85144817\n$ 4 : 00000008 00000100 80a75758 81dc9bb8\n$ 8 : 00000010 8087ae2c 0000003d 00000000\n$12 : 000000e0 00000039 00000000 00000000\n$16 : 85043240 80a75758 81dc9bb8 00006488\n$20 : 0000002f 00000007 85144810 80a70000\n$24 : 81d1bda0 00000000\n$28 : 81dc8000 81dc9aa8 00000000 805ead08\nHi : 00009d51\nLo : 2163358a\nepc : 805e91f0 __skb_flow_dissect+0x1b0/0x1b50\nra : 805ead08 __skb_get_hash_net+0x74/0x12c\nStatus: 11000403 KERNEL EXL IE\nCause : 40800010 (ExcCode 04)\nBadVA : 85144817\nPrId : 0001992f (MIPS 1004Kc)\nCall Trace:\n[\u003c805e91f0\u003e] __skb_flow_dissect+0x1b0/0x1b50\n[\u003c805ead08\u003e] __skb_get_hash_net+0x74/0x12c\n[\u003c805ef330\u003e] get_rps_cpu+0x1b8/0x3fc\n[\u003c805fca70\u003e] netif_receive_skb_list_internal+0x324/0x364\n[\u003c805fd120\u003e] napi_complete_done+0x68/0x2a4\n[\u003c8058de5c\u003e] mtk_napi_rx+0x228/0xfec\n[\u003c805fd398\u003e] __napi_poll+0x3c/0x1c4\n[\u003c805fd754\u003e] napi_threaded_poll_loop+0x234/0x29c\n[\u003c805fd848\u003e] napi_threaded_poll+0x8c/0xb0\n[\u003c80053544\u003e] kthread+0x104/0x12c\n[\u003c80002bd8\u003e] ret_from_kernel_thread+0x14/0x1c\n\nCode: 02d51821 1060045b 00000000 \u003c8c640000\u003e 3084000f 2c820005 144001a2 00042080 8e220000\n\nTo reduce the attack surface and maintain performance, do not process\nPPPoE PFC frames.\n\n[1] https://lore.kernel.org/r/20220630231016.GA392@debian.home",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46306",
"url": "https://www.suse.com/security/cve/CVE-2026-46306"
},
{
"category": "external",
"summary": "SUSE Bug 1267986 for CVE-2026-46306",
"url": "https://bugzilla.suse.com/1267986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46306"
},
{
"cve": "CVE-2026-46307",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46307"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath5k: do not access array OOB\n\nVincent reports:\n\u003e The ath5k driver seems to do an array-index-out-of-bounds access as\n\u003e shown by the UBSAN kernel message:\n\u003e UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath5k/base.c:1741:20\n\u003e index 4 is out of range for type \u0027ieee80211_tx_rate [4]\u0027\n\u003e ...\n\u003e Call Trace:\n\u003e \u003cTASK\u003e\n\u003e dump_stack_lvl+0x5d/0x80\n\u003e ubsan_epilogue+0x5/0x2b\n\u003e __ubsan_handle_out_of_bounds.cold+0x46/0x4b\n\u003e ath5k_tasklet_tx+0x4e0/0x560 [ath5k]\n\u003e tasklet_action_common+0xb5/0x1c0\n\nIt is real. \u0027ts-\u003ets_final_idx\u0027 can be 3 on 5212, so:\n info-\u003estatus.rates[ts-\u003ets_final_idx + 1].idx = -1;\nwith the array defined as:\n struct ieee80211_tx_rate rates[IEEE80211_TX_MAX_RATES];\nwhile the size is:\n #define IEEE80211_TX_MAX_RATES 4\nis indeed bogus.\n\nSet this \u0027idx = -1\u0027 sentinel only if the array index is less than the\narray size. As mac80211 will not look at rates beyond the size\n(IEEE80211_TX_MAX_RATES).\n\nNote: The effect of the OOB write is negligible. It just overwrites the\nnext member of info-\u003estatus, i.e. ack_signal.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46307",
"url": "https://www.suse.com/security/cve/CVE-2026-46307"
},
{
"category": "external",
"summary": "SUSE Bug 1267987 for CVE-2026-46307",
"url": "https://bugzilla.suse.com/1267987"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46307"
},
{
"cve": "CVE-2026-46312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46312"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: videobuf2: Set vma_flags in vb2_dma_sg_mmap\n\nvb2_dma_contig sets VMA flags VM_DONTEXPAND and VM_DONTDUMP and I do not\nsee a reason why vb2_dma_sg should behave differently. This avoids\nhitting `WARN_ON(!(vma-\u003evm_flags \u0026 VM_DONTEXPAND));` in\ndrm_gem_mmap_obj() during mmap() of an imported dma-buf from the out of\ntree Apple ISP camera capture driver which uses vb2_dma_sg_memops.\n\ngst-launch-1.0 v4l2src ! gtk4paintablesink\n\n[ 38.201528] ------------[ cut here ]------------\n[ 38.202135] WARNING: CPU: 7 PID: 2362 at drivers/gpu/drm/drm_gem.c:1144 drm_gem_mmap_obj+0x1f8/0x210\n[ 38.203278] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer\nsnd_seq snd_seq_device uinput nf_conntrack_netbios_ns\nnf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib\nnft_reject_inet nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat\nnf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr bnep\nnls_ascii i2c_dev loop fuse dm_multipath nfnetlink brcmfmac_wcc\nhid_magicmouse hci_bcm4377 brcmfmac brcmutil bluetooth ecdh_generic\ncfg80211 ecc btrfs xor xor_neon rfkill hid_apple raid6_pq joydev\naop_als apple_nvmem_spmi industrialio snd_soc_aop apple_z2\nsnd_soc_cs42l84 tps6598x snd_soc_tas2764 macsmc_reboot spi_nor\nmacsmc_hwmon rtc_macsmc gpio_macsmc macsmc_power regmap_spmi\nmacsmc_input dockchannel_hid panel_summit appledrm nvme_apple dwc3\nsnd_soc_macaudio drm_client_lib nvme_core phy_apple_atc hwmon\napple_sart apple_dockchannel macsmc apple_rtkit_helper\nspmi_apple_controller aop apple_wdt mfd_core nvmem_apple_efuses\npinctrl_apple_gpio apple_isp apple_dcp videobuf2_dma_sg mux_core\nspi_apple\n[ 38.203300] videobuf2_memops i2c_pasemi_platform snd_soc_apple_mca videobuf2_v4l2 videodev clk_apple_nco videobuf2_common snd_pcm_dmaengine adpdrm asahi apple_admac adpdrm_mipi drm_dma_helper pwm_apple i2c_pasemi_core drm_display_helper mc cec apple_dart ofpart apple_soc_cpufreq leds_pwm phram\n[ 38.217677] CPU: 7 UID: 1000 PID: 2362 Comm: gst-launch-1.0 Tainted: G W 6.17.6+ #asahi-dev PREEMPT(full)\n[ 38.219040] Tainted: [W]=WARN\n[ 38.219398] Hardware name: Apple MacBook Pro (13-inch, M2, 2022) (DT)\n[ 38.220213] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)\n[ 38.221088] pc : drm_gem_mmap_obj+0x1f8/0x210\n[ 38.221643] lr : drm_gem_mmap_obj+0x78/0x210\n[ 38.222178] sp : ffffc0008dc678e0\n[ 38.222579] x29: ffffc0008dc678e0 x28: 0000000000042a97 x27: ffff8000b701b480\n[ 38.223465] x26: 00000000000000fb x25: ffffc0008dc67d20 x24: ffffc0008dc67968\n[ 38.224402] x23: ffff8000e3ca5600 x22: ffff8000265b7800 x21: ffff80003000c0c0\n[ 38.225279] x20: 0000000000000000 x19: ffff8000b68c5200 x18: ffffc0008dc67968\n[ 38.226151] x17: 0000000000000000 x16: 0000000000000000 x15: ffffc000810a30a8\n[ 38.227042] x14: 00007fff637effff x13: 00005555de91ffff x12: 00007fff63293fff\n[ 38.227942] x11: 0000000000000000 x10: ffff8000184ecf08 x9 : ffffc0007a1900c8\n[ 38.228824] x8 : ffffc0008dc67968 x7 : 0000000000000012 x6 : ffffc0015cf1c000\n[ 38.229703] x5 : ffffc0008dc676a0 x4 : ffffc00081a27dc0 x3 : 0000000000000038\n[ 38.230607] x2 : 0000000000000003 x1 : 0000000000000003 x0 : 00000000100000fb\n[ 38.231488] Call trace:\n[ 38.231806] drm_gem_mmap_obj+0x1f8/0x210 (P)\n[ 38.232342] drm_gem_mmap+0x140/0x260\n[ 38.232813] __mmap_region+0x488/0x9a0\n[ 38.233277] mmap_region+0xd0/0x148\n[ 38.233703] do_mmap+0x350/0x5c0\n[ 38.234148] vm_mmap_pgoff+0x14c/0x200\n[ 38.234612] ksys_mmap_pgoff+0x150/0x208\n[ 38.235107] __arm64_sys_mmap+0x34/0x50\n[ 38.235611] invoke_syscall+0x50/0x120\n[ 38.236075] el0_svc_common.constprop.0+0x48/0xf0\n[ 38.236680] do_el0_svc+0x24/0x38\n[ 38.237113] el0_svc+0x38/0x168\n[ 38.237507] el0t_64_sync_handler+0xa0/0xe8\n[ 38.238034] el0t_64_sync+0x198/0x1a0\n[ 38.238491] ---[ end trace 0000000000000000 ]---\n\nThere were discussions in [1] at the end of 2023 that mmap() on imported\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46312",
"url": "https://www.suse.com/security/cve/CVE-2026-46312"
},
{
"category": "external",
"summary": "SUSE Bug 1267990 for CVE-2026-46312",
"url": "https://bugzilla.suse.com/1267990"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46312"
},
{
"cve": "CVE-2026-46321",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46321"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntun: free page on short-frame rejection in tun_xdp_one()\n\ntun_xdp_one() returns -EINVAL on a frame shorter than ETH_HLEN without\nfreeing the page that vhost_net_build_xdp() allocated for it.\ntun_sendmsg() discards that -EINVAL and still returns total_len, so\nvhost_tx_batch() takes the success path and never frees the page; each\nshort frame in a batch leaks one page-frag chunk.\n\nA local process that can open /dev/net/tun and /dev/vhost-net can hit\nthis path: it attaches a tun/tap device as the vhost-net backend and\nfeeds TX descriptors whose length minus the virtio-net header is below\nETH_HLEN. Each kick leaks the page-frag chunks for that batch, and a\ntight submission loop exhausts host memory and triggers an OOM panic.\nFree the page before returning -EINVAL, matching the XDP-program error\npath in the same function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46321",
"url": "https://www.suse.com/security/cve/CVE-2026-46321"
},
{
"category": "external",
"summary": "SUSE Bug 1268024 for CVE-2026-46321",
"url": "https://bugzilla.suse.com/1268024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-46321"
},
{
"cve": "CVE-2026-46323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0027t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0027t hold a reference\non the pages in shinfo-\u003efrags. Appending those frags to another skb\u0027s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0027t merge the skbs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46323",
"url": "https://www.suse.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "SUSE Bug 1268029 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "external",
"summary": "SUSE Bug 1268282 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-46323"
},
{
"cve": "CVE-2026-46324",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46324"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: use list_del_rcu for netlink hooks\n\nnft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need\nto use list_del_rcu(), this list can be walked by concurrent dumpers.\n\nAdd a new helper and use it consistently.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46324",
"url": "https://www.suse.com/security/cve/CVE-2026-46324"
},
{
"category": "external",
"summary": "SUSE Bug 1267995 for CVE-2026-46324",
"url": "https://bugzilla.suse.com/1267995"
},
{
"category": "external",
"summary": "SUSE Bug 1268865 for CVE-2026-46324",
"url": "https://bugzilla.suse.com/1268865"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-46324"
},
{
"cve": "CVE-2026-46333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46333"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46333",
"url": "https://www.suse.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "SUSE Bug 1265308 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "external",
"summary": "SUSE Bug 1265384 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-46333"
},
{
"cve": "CVE-2026-52910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52910"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Free reuseport cBPF prog after RCU grace period.\n\nEulgyu Kim reported the splat below with a repro. [0]\n\nThe repro sets up a UDP reuseport group with a cBPF prog and\nreplaces it with a new one while another thread is sending\na UDP packet to the group.\n\nThe reuseport prog is freed by sk_reuseport_prog_free().\nbpf_prog_put() is called for \"e\"BPF prog to destruct through\nmultiple stages while cBPF prog is freed immediately by\nbpf_release_orig_filter() and bpf_prog_free().\n\nIf a reuseport prog is detached from the setsockopt() path\n(reuseport_attach_prog() or reuseport_detach_prog()),\nsk_reuseport_prog_free() is called without waiting for RCU\nreaders to complete, resulting in various bugs.\n\nLet\u0027s defer freeing the reuseport cBPF prog after one RCU\ngrace period.\n\nNote \"e\"BPF prog is safe as is unless the fast path starts\nto touch fields destroyed in bpf_prog_put_deferred() and\n__bpf_prog_put_noref().\n\n[0]:\nBUG: KASAN: vmalloc-out-of-bounds in reuseport_select_sock+0xedc/0x1220 net/core/sock_reuseport.c:596\nRead of size 4 at addr ffffc9000051e004 by task slowme/10208\nCPU: 6 UID: 1000 PID: 10208 Comm: slowme Not tainted 7.0.0-geb7ac95ff75e #32 PREEMPT(full)\nHardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nCall Trace:\n \u003cIRQ\u003e\n dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xca/0x240 mm/kasan/report.c:482\n kasan_report+0x118/0x150 mm/kasan/report.c:595\n reuseport_select_sock+0xedc/0x1220 net/core/sock_reuseport.c:596\n udp4_lib_lookup2+0x3bc/0x950 net/ipv4/udp.c:495\n __udp4_lib_lookup+0x768/0xe20 net/ipv4/udp.c:723\n __udp4_lib_lookup_skb+0x297/0x390 net/ipv4/udp.c:752\n __udp4_lib_rcv+0x1312/0x2620 net/ipv4/udp.c:2752\n ip_protocol_deliver_rcu+0x282/0x440 net/ipv4/ip_input.c:207\n ip_local_deliver_finish+0x3bb/0x6f0 net/ipv4/ip_input.c:241\n NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318\n NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318\n __netif_receive_skb_one_core net/core/dev.c:6181 [inline]\n __netif_receive_skb net/core/dev.c:6294 [inline]\n process_backlog+0xaa4/0x1960 net/core/dev.c:6645\n __napi_poll+0xae/0x340 net/core/dev.c:7709\n napi_poll net/core/dev.c:7772 [inline]\n net_rx_action+0x5d7/0xf50 net/core/dev.c:7929\n handle_softirqs+0x22b/0x870 kernel/softirq.c:622\n do_softirq+0x76/0xd0 kernel/softirq.c:523\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450\n local_bh_enable include/linux/bottom_half.h:33 [inline]\n rcu_read_unlock_bh include/linux/rcupdate.h:924 [inline]\n __dev_queue_xmit+0x1dd7/0x3710 net/core/dev.c:4890\n neigh_output include/net/neighbour.h:556 [inline]\n ip_finish_output2+0xca9/0x1070 net/ipv4/ip_output.c:237\n NF_HOOK_COND include/linux/netfilter.h:307 [inline]\n ip_output+0x29f/0x450 net/ipv4/ip_output.c:438\n ip_send_skb+0x45/0xc0 net/ipv4/ip_output.c:1508\n udp_send_skb+0xb04/0x1510 net/ipv4/udp.c:1195\n udp_sendmsg+0x1a71/0x2350 net/ipv4/udp.c:1485\n sock_sendmsg_nosec net/socket.c:727 [inline]\n __sock_sendmsg net/socket.c:742 [inline]\n __sys_sendto+0x554/0x680 net/socket.c:2206\n __do_sys_sendto net/socket.c:2213 [inline]\n __se_sys_sendto net/socket.c:2209 [inline]\n __x64_sys_sendto+0xde/0x100 net/socket.c:2209\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x160/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x415a2d\nCode: b3 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f6bc31e41e8 EFLAGS: 00000212 ORIG_RAX: 000000000000002c\nRAX: ffffffffffffffda RBX: 00007f6bc31e4cdc RCX: 0000000000415a2d\nRDX: 0000000000000001 RSI: 00007f6bc31e421f RDI: 0000000000000003\nRBP: 00007f6bc31e4240 R08: 00007f6bc31e4220 R09: 0000000000000010\nR10: 0000000000000000 R11: \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52910",
"url": "https://www.suse.com/security/cve/CVE-2026-52910"
},
{
"category": "external",
"summary": "SUSE Bug 1268659 for CVE-2026-52910",
"url": "https://bugzilla.suse.com/1268659"
},
{
"category": "external",
"summary": "SUSE Bug 1273819 for CVE-2026-52910",
"url": "https://bugzilla.suse.com/1273819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-52910"
},
{
"cve": "CVE-2026-52914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52914"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: fix fragment reassembly length accounting\n\nbatman-adv keeps a running payload length for queued fragments and uses it\nto validate a fragment chain before reassembly.\n\nThat accounting currently allows the accumulated fragment length to be\ntruncated during updates. As a result, malformed fragment chains can\nbypass the intended validation and drive reassembly with inconsistent\nlength state, leading to a local denial of service.\n\nFix the accounting by storing the accumulated length in a length-typed\nfield and rejecting update overflows before the existing validation logic\nruns.\n\nThe fix was verified against the original reproducer and against valid\nfragment reassembly paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52914",
"url": "https://www.suse.com/security/cve/CVE-2026-52914"
},
{
"category": "external",
"summary": "SUSE Bug 1268986 for CVE-2026-52914",
"url": "https://bugzilla.suse.com/1268986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52914"
},
{
"cve": "CVE-2026-52915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52915"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ip6t_hbh: reject oversized option lists\n\nstruct ip6t_opts stores at most IP6T_OPTS_OPTSNR option descriptors,\nbut hbh_mt6_check() does not reject larger optsnr values supplied from\nuserspace.\n\nValidate optsnr in the rule setup path so only match data that fits the\nfixed-size opts array can be installed. This follows the existing xtables\npattern of rejecting invalid user-provided counts in checkentry() and\nkeeps the packet matching path unchanged.\n\n`struct ip6t_opts` has a fixed `opts[IP6T_OPTS_OPTSNR]` array,\nwhere `IP6T_OPTS_OPTSNR` is 16, then off-by-one array access is possible:\n\n[ 137.924693][ T8692] UBSAN: array-index-out-of-bounds in ../net/ipv6/netfilter/ip6t_hbh.c:110:29\n[ 137.926167][ T8692] index 16 is out of range for type \u0027__u16 [16]\u0027",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52915",
"url": "https://www.suse.com/security/cve/CVE-2026-52915"
},
{
"category": "external",
"summary": "SUSE Bug 1269001 for CVE-2026-52915",
"url": "https://bugzilla.suse.com/1269001"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52915"
},
{
"cve": "CVE-2026-52916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: frag: disallow unicast fragment in fragment\n\nbatadv_frag_skb_buffer() is called by batadv_batman_skb_recv() when a\nBATADV_UNICAST_FRAG packet is received. Once all fragments are collected\nand the packet is reassembled, batadv_recv_frag_packet() calls\nbatadv_batman_skb_recv() again to process the defragmented payload.\n\nA malicious sender can craft a BATADV_UNICAST_FRAG packet whose reassembled\npayload is itself a BATADV_UNICAST_FRAG packet (matryoshka-style nesting).\nEach nesting level recurses through batadv_batman_skb_recv() without bound,\ngrowing the kernel stack until it is exhausted.\n\nSince refragmentation or fragments in fragments are not actually allowed,\ndiscard all packets which are still BATADV_UNICAST_FRAG packets after the\ndefragmentation process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52916",
"url": "https://www.suse.com/security/cve/CVE-2026-52916"
},
{
"category": "external",
"summary": "SUSE Bug 1269002 for CVE-2026-52916",
"url": "https://bugzilla.suse.com/1269002"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52916"
},
{
"cve": "CVE-2026-52919",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52919"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: fix tp_meter counter underflow during shutdown\n\nbatadv_tp_sender_shutdown() unconditionally decrements the \"sending\"\natomic counter. If multiple paths (e.g. timeout, user cancel, and\nnormal finish) call this function, the counter can underflow to -1.\n\nSince the sender logic treats any non-zero value as \"still sending\",\na negative value causes the sender kthread to loop indefinitely.\nThis leads to a use-after-free when the interface is removed while\nthe zombie thread is still active.\n\nFix this by using atomic_xchg() to ensure the counter only transitions\nfrom 1 to 0 once.\n\n[sven: added missing change in batadv_tp_send]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52919",
"url": "https://www.suse.com/security/cve/CVE-2026-52919"
},
{
"category": "external",
"summary": "SUSE Bug 1269031 for CVE-2026-52919",
"url": "https://bugzilla.suse.com/1269031"
},
{
"category": "external",
"summary": "SUSE Bug 1269032 for CVE-2026-52919",
"url": "https://bugzilla.suse.com/1269032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-52919"
},
{
"cve": "CVE-2026-52921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52921"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: stop hash:* range iteration at end\n\nThe following hash set variants:\n\nhash:ip,mark\nhash:ip,port\nhash:ip,port,ip\nhash:ip,port,net\n\niterate IPv4 ranges with a 32-bit iterator.\n\nThe iterator must stop once the last address in the requested range has\nbeen processed. Advancing it once more can move the traversal state past\nthe end of the request, so a later retry may continue from an unintended\nposition.\n\nHandle the iterator increment explicitly at the end of the loop and stop\nonce the upper bound has been processed. This keeps the existing retry\nbehaviour intact for valid ranges while preventing traversal from\ncontinuing past the original boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52921",
"url": "https://www.suse.com/security/cve/CVE-2026-52921"
},
{
"category": "external",
"summary": "SUSE Bug 1269024 for CVE-2026-52921",
"url": "https://bugzilla.suse.com/1269024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52921"
},
{
"cve": "CVE-2026-52922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: dat: handle forward allocation error\n\nbatadv_dat_forward_data() calls pskb_copy_for_clone() to duplicate an skb\nfor each DHT candidate, but does not check the return value before passing\nit to batadv_send_skb_prepare_unicast_4addr(). That function dereferences\nthe skb unconditionally, so a failed allocation triggers a NULL pointer\ndereference.\n\nSkip forwarding to the current DHT candidate on allocation failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52922",
"url": "https://www.suse.com/security/cve/CVE-2026-52922"
},
{
"category": "external",
"summary": "SUSE Bug 1269030 for CVE-2026-52922",
"url": "https://bugzilla.suse.com/1269030"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52922"
},
{
"cve": "CVE-2026-52926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52926"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: clear current gateway during teardown\n\nbatadv_gw_node_free() removes the gateway list entries during mesh teardown,\nbut it does not clear the currently selected gateway. This leaves stale\ngateway state behind across cleanup and can break a later mesh recreation.\n\nClear bat_priv-\u003egw.curr_gw before walking the gateway list so the selected\ngateway reference is dropped as part of teardown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52926",
"url": "https://www.suse.com/security/cve/CVE-2026-52926"
},
{
"category": "external",
"summary": "SUSE Bug 1269025 for CVE-2026-52926",
"url": "https://bugzilla.suse.com/1269025"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52926"
},
{
"cve": "CVE-2026-52927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52927"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix OOB read in compat_mtw_from_user\n\nLuxiao Xu says:\n\n The function compat_mtw_from_user() converts ebtables extensions from\n 32-bit user structures to kernel native structures. However, it lacks\n proper validation of the user-supplied match_size/target_size.\n\n When certain extensions are processed, the kernel-side translation\n logic may perform memory accesses based on the extension\u0027s expected\n size. If the user provides a size smaller than what the extension\n requires, it results in an out-of-bounds read as reported by KASAN.\n\n This fix introduces a check to ensure match_size is at least as large\n as the extension\u0027s required compatsize. This covers matches, watchers,\n and targets, while maintaining compatibility with standard targets.\n\nAFAIU this is relevant for matches that need to go though\nmatch-\u003ecompat_from_user() call. Those that use plain memcpy with the\nuser-provided size are ok because the caller checks that size vs the\nstart of the next rule entry offset (which itself is checked vs. total\nsize copied from userspace).\n\nThe -\u003ecompat_from_user() callbacks assume they can read compatsize bytes,\nso they need this extra check.\n\nBased on an earlier patch from Luxiao Xu.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52927",
"url": "https://www.suse.com/security/cve/CVE-2026-52927"
},
{
"category": "external",
"summary": "SUSE Bug 1269027 for CVE-2026-52927",
"url": "https://bugzilla.suse.com/1269027"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52927"
},
{
"cve": "CVE-2026-52930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52930"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipc/shm: serialize orphan cleanup with shm_nattch updates\n\nshm_destroy_orphaned() walks the shm idr under shm_ids(ns).rwsem, but that\ndoes not serialize all fields tested by shm_may_destroy(). In particular,\nshm_nattch is updated while holding shm_perm.lock, and attach paths can do\nthat without holding the rwsem.\n\nDo not decide that an orphaned segment is unused before taking the object\nlock. Move the shm_may_destroy() check under shm_perm.lock, matching the\nother destroy paths, and unlock the segment when it no longer qualifies\nfor removal.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52930",
"url": "https://www.suse.com/security/cve/CVE-2026-52930"
},
{
"category": "external",
"summary": "SUSE Bug 1269003 for CVE-2026-52930",
"url": "https://bugzilla.suse.com/1269003"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52930"
},
{
"cve": "CVE-2026-52931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: tp_meter: avoid use of uninit sender vars\n\nbatadv_tp_recv_ack() and batadv_tp_stop() are only valid for tp_vars in the\nBATADV_TP_SENDER role. When called with a BATADV_TP_RECEIVER role, it\nproceeds to read sender-only members that were never initialized, leading\nto undefined behavior.\n\nThis can be triggered when a node that is currently acting as a receiver in\nan ongoing tp_meter session receives a malicious ACK packet.\n\nGuard against this by checking tp_vars-\u003erole immediately after the\nlookup and bailing out if it is not BATADV_TP_SENDER, before any of\nthose members are accessed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52931",
"url": "https://www.suse.com/security/cve/CVE-2026-52931"
},
{
"category": "external",
"summary": "SUSE Bug 1269008 for CVE-2026-52931",
"url": "https://bugzilla.suse.com/1269008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52931"
},
{
"cve": "CVE-2026-52936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52936"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: jitterentropy - replace long-held spinlock with mutex\n\njent_kcapi_random() serializes the shared jitterentropy state, but it\ncurrently holds a spinlock across the jent_read_entropy() call. That\npath performs expensive jitter collection and SHA3 conditioning, so\nparallel readers can trigger stalls as contending waiters spin for\nthe same lock.\n\nTo prevent non-preemptible lock hold, replace rng-\u003ejent_lock with a\nmutex so contended readers sleep instead of spinning on a shared lock\nheld across expensive entropy generation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52936",
"url": "https://www.suse.com/security/cve/CVE-2026-52936"
},
{
"category": "external",
"summary": "SUSE Bug 1268981 for CVE-2026-52936",
"url": "https://bugzilla.suse.com/1268981"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52936"
},
{
"cve": "CVE-2026-52937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52937"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR\n\nIn the SIOCGIFHWADDR path, tap_ioctl() copies 16 bytes of an\nuninitialised on-stack struct sockaddr_storage to userspace via\nifr_hwaddr, but netif_get_mac_address() only writes sa_family and\ndev-\u003eaddr_len (6 for Ethernet) bytes, leaving sa_data[6..13] uninitialised.\n\nThose 8 trailing bytes leak kernel stack contents; SIOCGIFHWADDR on a\nmacvtap chardev returns kernel .text and direct-map pointers, defeating\nKASLR.\n\nInitialise ss at declaration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52937",
"url": "https://www.suse.com/security/cve/CVE-2026-52937"
},
{
"category": "external",
"summary": "SUSE Bug 1268983 for CVE-2026-52937",
"url": "https://bugzilla.suse.com/1268983"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52937"
},
{
"cve": "CVE-2026-52941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52941"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: avoid NULL deref of conn-\u003elnk in smc_msg_event tracepoint\n\nThe smc_msg_event tracepoint class, shared by smc_tx_sendmsg and\nsmc_rx_recvmsg, unconditionally dereferences smc-\u003econn.lnk:\n\n\t__string(name, smc-\u003econn.lnk-\u003eibname)\n\nconn-\u003elnk is only set for SMC-R; for SMC-D it is NULL. Other code on\nthese paths already handles this (e.g. !conn-\u003elnk in\nSMC_STAT_RMB_TX_SIZE_SMALL()). With the tracepoint enabled, the first\nsendmsg()/recvmsg() on an SMC-D socket crashes:\n\n Oops: general protection fault, probably for non-canonical address\n KASAN: null-ptr-deref in range [...]\n RIP: 0010:strlen+0x1e/0xa0\n Call Trace:\n trace_event_raw_event_smc_msg_event (net/smc/smc_tracepoint.h:44)\n smc_rx_recvmsg (net/smc/smc_rx.c:515)\n smc_recvmsg (net/smc/af_smc.c:2859)\n __sys_recvfrom (net/socket.c:2315)\n __x64_sys_recvfrom (net/socket.c:2326)\n do_syscall_64\n\nThe faulting address 0x3e0 is offsetof(struct smc_link, ibname),\nconfirming the NULL -\u003elnk deref. Enabling the tracepoint requires\nroot, but the trigger itself is unprivileged: socket(AF_SMC, ...) has\nno capability check, and SMC-D negotiation needs no admin step on\ns390 or on x86 with the loopback ISM device loaded.\n\nLog an empty device name for SMC-D instead of dereferencing NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52941",
"url": "https://www.suse.com/security/cve/CVE-2026-52941"
},
{
"category": "external",
"summary": "SUSE Bug 1268966 for CVE-2026-52941",
"url": "https://bugzilla.suse.com/1268966"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52941"
},
{
"cve": "CVE-2026-52942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52942"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_log: validate MAC header was set before dumping it\n\nThe fallback path of dump_mac_header() guards the MAC header access\nonly with \"skb-\u003emac_header != skb-\u003enetwork_header\", without checking\nskb_mac_header_was_set(). When the MAC header is unset, mac_header is\n0xffff, so the test passes and skb_mac_header(skb) returns\nskb-\u003ehead + 0xffff, ~64 KiB past the buffer; the loop then reads\ndev-\u003ehard_header_len bytes out of bounds into the kernel log.\n\nThis is reachable via the netdev logger: nf_log_unknown_packet() calls\ndump_mac_header() unconditionally, and an skb sent through AF_PACKET\nwith PACKET_QDISC_BYPASS reaches the egress hook with mac_header still\nunset (__dev_queue_xmit(), which would reset it, is bypassed).\n\nAdd the skb_mac_header_was_set() check the ARPHRD_ETHER path already\nuses, and replace the open-coded MAC header length test with\nskb_mac_header_len(). Only skbs with an unset MAC header are affected;\nvalid ones are dumped as before.\n\n BUG: KASAN: slab-out-of-bounds in dump_mac_header (net/netfilter/nf_log_syslog.c:831)\n Read of size 1 at addr ffff88800ea49d3f by task exploit/148\n Call Trace:\n kasan_report (mm/kasan/report.c:595)\n dump_mac_header (net/netfilter/nf_log_syslog.c:831)\n nf_log_netdev_packet (net/netfilter/nf_log_syslog.c:938 net/netfilter/nf_log_syslog.c:963)\n nf_log_packet (net/netfilter/nf_log.c:260)\n nft_log_eval (net/netfilter/nft_log.c:60)\n nft_do_chain (net/netfilter/nf_tables_core.c:285)\n nft_do_chain_netdev (net/netfilter/nft_chain_filter.c:307)\n nf_hook_slow (net/netfilter/core.c:619)\n nf_hook_direct_egress (net/packet/af_packet.c:257)\n packet_xmit (net/packet/af_packet.c:280)\n packet_sendmsg (net/packet/af_packet.c:3114)\n __sys_sendto (net/socket.c:2265)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52942",
"url": "https://www.suse.com/security/cve/CVE-2026-52942"
},
{
"category": "external",
"summary": "SUSE Bug 1268967 for CVE-2026-52942",
"url": "https://bugzilla.suse.com/1268967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52942"
},
{
"cve": "CVE-2026-52947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52947"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove\n\nIn qrtr_port_remove(), the socket reference count is decremented via\n__sock_put() before the port is removed from the qrtr_ports XArray and\nbefore the RCU grace period elapses.\n\nThis breaks the fundamental RCU update paradigm. It exposes a race\nwindow where a concurrent RCU reader (such as qrtr_reset_ports() or\nqrtr_port_lookup()) can obtain a pointer to the socket from the XArray,\nand attempt to call sock_hold() on a socket whose reference count has\nalready dropped to zero.\n\nThis exact race condition was hit during syzkaller fuzzing, leading to\nthe following refcount saturation warning and a potential Use-After-Free:\n\n refcount_t: saturated; leaking memory.\n WARNING: CPU: 3 PID: 1273 at lib/refcount.c:22 refcount_warn_saturate+0xae/0x1d0\n Modules linked in: qrtr(+) bochs drm_shmem_helper ...\n Call Trace:\n \u003cTASK\u003e\n qrtr_reset_ports net/qrtr/af_qrtr.c:768 [inline] [qrtr]\n __qrtr_bind.isra.0+0x48b/0x570 net/qrtr/af_qrtr.c:805 [qrtr]\n qrtr_bind+0x17d/0x210 net/qrtr/af_qrtr.c:901 [qrtr]\n kernel_bind+0xe4/0x120 net/socket.c:3592\n qrtr_ns_init+0x1a6/0x380 net/qrtr/ns.c:715 [qrtr]\n qrtr_proto_init+0x3b/0xff0 net/qrtr/af_qrtr.c:169 [qrtr]\n do_one_initcall+0xf5/0x5e0 init/main.c:1283\n ...\n \u003c/TASK\u003e\n\nFix this by deferring the reference count decrement until after the\nxa_erase() and the synchronize_rcu() complete.\n\n(Note: The v1 of this patch incorrectly replaced __sock_put() with\nsock_put(). As Simon Horman pointed out, the callers of qrtr_port_remove()\nstill hold a reference to the socket, so freeing the socket memory here\nwould lead to a subsequent UAF in the caller. Thus, the __sock_put() is\nkept, but only repositioned to close the RCU race.)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52947",
"url": "https://www.suse.com/security/cve/CVE-2026-52947"
},
{
"category": "external",
"summary": "SUSE Bug 1269115 for CVE-2026-52947",
"url": "https://bugzilla.suse.com/1269115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52947"
},
{
"cve": "CVE-2026-52948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52948"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl\n\nWhile fuzzing with Syzkaller, a persistent `schedule_timeout: wrong\ntimeout value` warning was observed, accompanied by SMBus controller\nstate machine corruption.\n\nThe I2C_TIMEOUT ioctl accepts a user-provided timeout in multiples of\n10 ms. The user argument is checked against INT_MAX, but it is\nsubsequently multiplied by 10 before being passed to msecs_to_jiffies().\n\nA malicious user can pass a large value (e.g., 429496729) that passes\nthe `arg \u003e INT_MAX` check but overflows when multiplied by 10. This\nresults in a truncated 32-bit unsigned value that bypasses the\ninternal `(int)m \u003c 0` check in `msecs_to_jiffies()`.\n\nThe truncated value is then assigned to `client-\u003eadapter-\u003etimeout`\n(a signed 32-bit int), which is reinterpreted as a negative number.\nWhen passed to wait_for_completion_timeout(), this negative value\nundergoes sign extension to a 64-bit unsigned long, triggering the\n`schedule_timeout` warning and causing premature returns. This leaves\nthe SMBus state machine in an unrecoverable state, constituting a\nlocal Denial of Service (DoS).\n\nFix this by bounding the user argument to `INT_MAX / 10`.\n\n[wsa: move the comment as well]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52948",
"url": "https://www.suse.com/security/cve/CVE-2026-52948"
},
{
"category": "external",
"summary": "SUSE Bug 1269116 for CVE-2026-52948",
"url": "https://bugzilla.suse.com/1269116"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52948"
},
{
"cve": "CVE-2026-52953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52953"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Fix oops due to out of scope access\n\nBelow oops triggers when kill QEMU process:\n\n Oops: general protection fault, probably for non-canonical address 0x7fffffff844eaaa7: 0000 [#1] SMP NOPTI\n Call Trace:\n \u003cTASK\u003e\n do_raw_spin_lock+0xaa/0xc0\n _raw_spin_lock_irqsave+0x21/0x40\n domain_remove_dev_pasid+0x52/0x160\n intel_nested_set_dev_pasid+0x1b9/0x1e0\n __iommu_set_group_pasid+0x56/0x120\n pci_dev_reset_iommu_done+0xe3/0x180\n pcie_flr+0x65/0x160\n __pci_reset_function_locked+0x5b/0x120\n vfio_pci_core_close_device+0x63/0xe0 [vfio_pci_core]\n vfio_df_close+0x4f/0xa0\n vfio_df_unbind_iommufd+0x2d/0x60\n vfio_device_fops_release+0x3e/0x40\n __fput+0xe5/0x2c0\n task_work_run+0x58/0xa0\n do_exit+0x2c8/0x600\n do_group_exit+0x2f/0xa0\n get_signal+0x863/0x8c0\n arch_do_signal_or_restart+0x24/0x100\n exit_to_user_mode_loop+0x87/0x380\n do_syscall_64+0x2ff/0x11e0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nThe global static blocked domain is a dummy domain without corresponding\ndmar_domain structure, accessing beyond iommu_domain structure triggers\noops easily. Fix it by return early in domain_remove_dev_pasid() like\nidentity domain.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52953",
"url": "https://www.suse.com/security/cve/CVE-2026-52953"
},
{
"category": "external",
"summary": "SUSE Bug 1269133 for CVE-2026-52953",
"url": "https://bugzilla.suse.com/1269133"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52953"
},
{
"cve": "CVE-2026-52963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52963"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Bound MIDI endpoint descriptor scans\n\nsnd_usbmidi_get_ms_info() validates the internal MIDIStreaming endpoint\ndescriptor size before using baAssocJackID[], but the descriptor walker can\nstill return a class-specific endpoint descriptor whose bLength exceeds the\nremaining bytes in the endpoint-extra scan.\n\nThat leaves later flexible-array reads bounded by bLength, but not by the\nremaining bytes in the endpoint-extra scan.\n\nStop walking when bLength is zero or\nextends past the remaining endpoint-extra scan.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52963",
"url": "https://www.suse.com/security/cve/CVE-2026-52963"
},
{
"category": "external",
"summary": "SUSE Bug 1269177 for CVE-2026-52963",
"url": "https://bugzilla.suse.com/1269177"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52963"
},
{
"cve": "CVE-2026-52964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52964"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans\n\nThe USB MIDI 2.0 endpoint parser has the same descriptor walking\npattern as the legacy MIDI parser. It validates bLength against\nbNumGrpTrmBlock before reading baAssoGrpTrmBlkID[], but not against the\nremaining bytes in the endpoint-extra scan.\n\nA malformed device can therefore make later baAssoGrpTrmBlkID[] reads\nconsume bytes past the walked descriptor.\n\nReject zero-length and overlong descriptors while walking endpoint\nextras.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52964",
"url": "https://www.suse.com/security/cve/CVE-2026-52964"
},
{
"category": "external",
"summary": "SUSE Bug 1269178 for CVE-2026-52964",
"url": "https://bugzilla.suse.com/1269178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52964"
},
{
"cve": "CVE-2026-52967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52967"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix possible infinite loop and oob read in symlink_data()\n\nOn 32-bit architectures, the infinite loop is as follows:\n\n len = p-\u003eErrorDataLength == 0xfffffff8\n u8 *next = p-\u003eErrorContextData + len\n next == p\n\nOn 32-bit architectures, the out-of-bounds read is as follows:\n\n len = p-\u003eErrorDataLength == 0xfffffff0\n u8 *next = p-\u003eErrorContextData + len\n next == (u8 *)p - 8",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52967",
"url": "https://www.suse.com/security/cve/CVE-2026-52967"
},
{
"category": "external",
"summary": "SUSE Bug 1269181 for CVE-2026-52967",
"url": "https://bugzilla.suse.com/1269181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52967"
},
{
"cve": "CVE-2026-52970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52970"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_ct: fix missing expect put in obj eval\n\nnft_ct_expect_obj_eval() allocates an expectation and may call\nnf_ct_expect_related(), but never drops its local reference.\n\nAdd nf_ct_expect_put(exp) before return to balance allocation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52970",
"url": "https://www.suse.com/security/cve/CVE-2026-52970"
},
{
"category": "external",
"summary": "SUSE Bug 1269229 for CVE-2026-52970",
"url": "https://bugzilla.suse.com/1269229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52970"
},
{
"cve": "CVE-2026-52974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52974"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tls: fix strparser anchor skb leak on offload RX setup failure\n\nWhen tls_set_device_offload_rx() fails at tls_dev_add(), the error path\ncalls tls_sw_free_resources_rx() to clean up the SW context that was\ninitialized by tls_set_sw_offload(). This function calls\ntls_sw_release_resources_rx() (which stops the strparser via\ntls_strp_stop()) and tls_sw_free_ctx_rx() (which kfrees the context),\nbut never frees the anchor skb that was allocated by alloc_skb(0) in\ntls_strp_init().\n\nNote that tls_sw_free_resources_rx() is exclusively used for this\n\"failed to start offload\" code path, there\u0027s no other caller.\n\nThe leak did not exist before commit 84c61fe1a75b (\"tls: rx: do not use\nthe standard strparser\"), because the standard strparser doesn\u0027t try\nto pre-allocate an skb.\n\nThe normal close path in tls_sk_proto_close() handles cleanup by calling\ntls_sw_strparser_done() (which calls tls_strp_done()) after dropping\nthe socket lock, because tls_strp_done() does cancel_work_sync() and\nthe strparser work handler takes the socket lock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52974",
"url": "https://www.suse.com/security/cve/CVE-2026-52974"
},
{
"category": "external",
"summary": "SUSE Bug 1269233 for CVE-2026-52974",
"url": "https://bugzilla.suse.com/1269233"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52974"
},
{
"cve": "CVE-2026-52981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52981"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nneigh: let neigh_xmit take skb ownership\n\nneigh_xmit always releases the skb, except when no neighbour table is\nfound. But even the first added user of neigh_xmit (mpls) relied on\nneigh_xmit to release the skb (or queue it for tx).\n\nsashiko reported:\n If neigh_xmit() is called with an uninitialized neighbor table (for\n example, NEIGH_ND_TABLE when IPv6 is disabled), it returns -EAFNOSUPPORT\n and bypasses its internal out_kfree_skb error path. Because the return\n value of neigh_xmit() is ignored here, does this leak the SKB?\n\nAssume full ownership and remove the last code path that doesn\u0027t\nxmit or free skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52981",
"url": "https://www.suse.com/security/cve/CVE-2026-52981"
},
{
"category": "external",
"summary": "SUSE Bug 1269254 for CVE-2026-52981",
"url": "https://bugzilla.suse.com/1269254"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-52981"
},
{
"cve": "CVE-2026-52982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52982"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()\n\nsyzbot reported a KASAN slab-use-after-free read in rtl8150_start_xmit()\nwhen accessing skb-\u003elen for tx statistics after usb_submit_urb() has\nbeen called:\n\n BUG: KASAN: slab-use-after-free in rtl8150_start_xmit+0x71f/0x760\n drivers/net/usb/rtl8150.c:712\n Read of size 4 at addr ffff88810eb7a930 by task kworker/0:4/5226\n\nThe URB completion handler write_bulk_callback() frees the skb via\ndev_kfree_skb_irq(dev-\u003etx_skb). The URB may complete on another CPU\nin softirq context before usb_submit_urb() returns in the submitter,\nso by the time the submitter reads skb-\u003elen the skb has already been\nqueued to the per-CPU completion_queue and freed by net_tx_action():\n\n CPU A (xmit) CPU B (USB completion softirq)\n ------------ ------------------------------\n dev-\u003etx_skb = skb;\n usb_submit_urb() --+\n |-------\u003e write_bulk_callback()\n | dev_kfree_skb_irq(dev-\u003etx_skb)\n | net_tx_action()\n | napi_skb_cache_put() \u003c-- free\n netdev-\u003estats.tx_bytes |\n += skb-\u003elen; \u003c-- UAF read\n\nFix it by caching skb-\u003elen before submitting the URB and using the\ncached value when updating the tx_bytes counter.\n\nThe pre-existing tx_bytes semantics are preserved: the counter tracks\nthe original frame length (skb-\u003elen), not the ETH_ZLEN/USB-alignment\npadded \"count\" value that is handed to the device. Changing that\nwould be a user-visible accounting change and is out of scope for\nthis UAF fix.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52982",
"url": "https://www.suse.com/security/cve/CVE-2026-52982"
},
{
"category": "external",
"summary": "SUSE Bug 1269258 for CVE-2026-52982",
"url": "https://bugzilla.suse.com/1269258"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52982"
},
{
"cve": "CVE-2026-52984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52984"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: netem: fix queue limit check to include reordered packets\n\nThe queue limit check in netem_enqueue() uses q-\u003et_len which only\ncounts packets in the internal tfifo. Packets placed in sch-\u003eq by\nthe reorder path (__qdisc_enqueue_head) are not counted, allowing\nthe total queue occupancy to exceed sch-\u003elimit under reordering.\n\nInclude sch-\u003eq.qlen in the limit check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52984",
"url": "https://www.suse.com/security/cve/CVE-2026-52984"
},
{
"category": "external",
"summary": "SUSE Bug 1269272 for CVE-2026-52984",
"url": "https://bugzilla.suse.com/1269272"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52984"
},
{
"cve": "CVE-2026-52986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52986"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_sip: don\u0027t use simple_strtoul\n\nReplace unsafe port parsing in epaddr_len(), ct_sip_parse_header_uri(),\nand ct_sip_parse_request() with a new sip_parse_port() helper that\nvalidates each digit against the buffer limit, eliminating the use of\nsimple_strtoul() which assumes NUL-terminated strings.\n\nThe previous code dereferenced pointers without bounds checks after\nsip_parse_addr() and relied on simple_strtoul() on non-NUL-terminated\nskb data. A port that reaches the buffer limit without a trailing\ncharacter is also rejected as malformed.\n\nAlso get rid of all simple_strtoul() usage in conntrack, prefer a\nstricter version instead. There are intentional changes:\n\n- Bail out if number is \u003e UINT_MAX and indicate a failure, same for\n too long sequences.\n While we do accept 05535 as port 5535, we will not accept e.g.\n \u0027sip:10.0.0.1:005060\u0027. While its syntactically valid under RFC 3261,\n we should restrict this to not waste cycles when presented with\n malformed packets with 64k \u00270\u0027 characters.\n\n- Force base 10 in ct_sip_parse_numerical_param(). This is used to fetch\n \u0027expire=\u0027 and \u0027rports=\u0027; both are expected to use base-10.\n\n- In nf_nat_sip.c, only accept the parsed value if its within the 1k-64k\n range.\n\n- epaddr_len now returns 0 if the port is invalid, as it already does\n for invalid ip addresses. This is intentional. nf_conntrack_sip\n performs lots of guesswork to find the right parts of the message\n to parse. Being stricter could break existing setups.\n Connection tracking helpers are designed to allow traffic to\n pass, not to block it.\n\nBased on an earlier patch from Jenny Guanni Qu \u003cqguanni@gmail.com\u003e.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52986",
"url": "https://www.suse.com/security/cve/CVE-2026-52986"
},
{
"category": "external",
"summary": "SUSE Bug 1269289 for CVE-2026-52986",
"url": "https://bugzilla.suse.com/1269289"
},
{
"category": "external",
"summary": "SUSE Bug 1270383 for CVE-2026-52986",
"url": "https://bugzilla.suse.com/1270383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-52986"
},
{
"cve": "CVE-2026-52988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52988"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: join hook list via splice_list_rcu() in commit phase\n\nPublish new hooks in the list into the basechain/flowtable using\nsplice_list_rcu() to ensure netlink dump list traversal via rcu is safe\nwhile concurrent ruleset update is going on.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52988",
"url": "https://www.suse.com/security/cve/CVE-2026-52988"
},
{
"category": "external",
"summary": "SUSE Bug 1269362 for CVE-2026-52988",
"url": "https://bugzilla.suse.com/1269362"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52988"
},
{
"cve": "CVE-2026-52989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52989"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers\n\nCurrently, when nvmet_tcp_build_pdu_iovec() detects an out-of-bounds\nPDU length or offset, it triggers nvmet_tcp_fatal_error(cmd-\u003equeue)\nand returns early. However, because the function returns void, the\ncallers are entirely unaware that a fatal error has occurred and\nthat the cmd-\u003erecv_msg.msg_iter was left uninitialized.\n\nCallers such as nvmet_tcp_handle_h2c_data_pdu() proceed to blindly\noverwrite the queue state with queue-\u003ercv_state = NVMET_TCP_RECV_DATA\nConsequently, the socket receiving loop may attempt to read incoming\nnetwork data into the uninitialized iterator.\n\nFix this by shifting the error handling responsibility to the callers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52989",
"url": "https://www.suse.com/security/cve/CVE-2026-52989"
},
{
"category": "external",
"summary": "SUSE Bug 1269364 for CVE-2026-52989",
"url": "https://bugzilla.suse.com/1269364"
},
{
"category": "external",
"summary": "SUSE Bug 1270382 for CVE-2026-52989",
"url": "https://bugzilla.suse.com/1270382"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-52989"
},
{
"cve": "CVE-2026-52991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52991"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/psi: fix race between file release and pressure write\n\nA potential race condition exists between pressure write and cgroup file\nrelease regarding the priv member of struct kernfs_open_file, which\ntriggers the uaf reported in [1].\n\nConsider the following scenario involving execution on two separate CPUs:\n\n CPU0\t\t\t\t\tCPU1\n ====\t\t\t\t\t====\n\t\t\t\t\tvfs_rmdir()\n\t\t\t\t\tkernfs_iop_rmdir()\n\t\t\t\t\tcgroup_rmdir()\n\t\t\t\t\tcgroup_kn_lock_live()\n\t\t\t\t\tcgroup_destroy_locked()\n\t\t\t\t\tcgroup_addrm_files()\n\t\t\t\t\tcgroup_rm_file()\n\t\t\t\t\tkernfs_remove_by_name()\n\t\t\t\t\tkernfs_remove_by_name_ns()\n vfs_write()\t\t\t\t__kernfs_remove()\n new_sync_write()\t\t\tkernfs_drain()\n kernfs_fop_write_iter()\t\tkernfs_drain_open_files()\n cgroup_file_write()\t\t\tkernfs_release_file()\n pressure_write()\t\t\tcgroup_file_release()\n ctx = of-\u003epriv;\n\t\t\t\t\tkfree(ctx);\n \t\t\t\t\tof-\u003epriv = NULL;\n\t\t\t\t\tcgroup_kn_unlock()\n cgroup_kn_lock_live()\n cgroup_get(cgrp)\n cgroup_kn_unlock()\n if (ctx-\u003epsi.trigger) // here, trigger uaf for ctx, that is of-\u003epriv\n\nThe cgroup_rmdir() is protected by the cgroup_mutex, it also safeguards\nthe memory deallocation of of-\u003epriv performed within cgroup_file_release().\nHowever, the operations involving of-\u003epriv executed within pressure_write()\nare not entirely covered by the protection of cgroup_mutex. Consequently,\nif the code in pressure_write(), specifically the section handling the\nctx variable executes after cgroup_file_release() has completed, a uaf\nvulnerability involving of-\u003epriv is triggered.\n\nTherefore, the issue can be resolved by extending the scope of the\ncgroup_mutex lock within pressure_write() to encompass all code paths\ninvolving of-\u003epriv, thereby properly synchronizing the race condition\noccurring between cgroup_file_release() and pressure_write().\n\nAnd, if an live kn lock can be successfully acquired while executing\nthe pressure write operation, it indicates that the cgroup deletion\nprocess has not yet reached its final stage; consequently, the priv\npointer within open_file cannot be NULL. Therefore, the operation to\nretrieve the ctx value must be moved to a point *after* the live kn\nlock has been successfully acquired.\n\nIn another situation, specifically after entering cgroup_kn_lock_live()\nbut before acquiring cgroup_mutex, there exists a different class of\nrace condition:\n\nCPU0: write memory.pressure CPU1: write cgroup.pressure=0\n===========================\t\t =============================\n\nkernfs_fop_write_iter()\n kernfs_get_active_of(of)\n pressure_write()\n cgroup_kn_lock_live(memory.pressure)\n cgroup_tryget(cgrp)\n kernfs_break_active_protection(kn)\n ... blocks on cgroup_mutex\n\n \t cgroup_pressure_write()\n \t cgroup_kn_lock_live(cgroup.pressure)\n \t cgroup_file_show(memory.pressure, false)\n \t kernfs_show(false)\n \t kernfs_drain_open_files()\n \t cgroup_file_release(of)\n \t kfree(ctx)\n \t of-\u003epriv = NULL\n \t cgroup_kn_unlock()\n\n ... acquires cgroup_mutex\n ctx = of-\u003epriv; // may now be NULL\n if (ctx-\u003epsi.trigger) // NULL dereference\n\nConsequently, there is a possibility that of-\u003epriv is NULL, the pressure\nwrite needs to check for this.\n\nNow that the scope of the cgroup_mutex has been expanded, the original\nexplicit cgroup_get/put operations are no longer necessary, this is\nbecause acquiring/releasing the live kn lock inherently executes a\ncgroup get/put operation.\n\n[1]\nBUG: KASAN: slab-use-after-free in pressure_write+0xa4/0x210 kernel/cgroup/cgroup.c:4011\nCall Trace:\n pressure_write+0xa4/0x210 kernel/cgroup/cgroup.c:4011\n cgroup_file_write+0x36f/0x790 kernel/cgroup/cgroup.c:43\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52991",
"url": "https://www.suse.com/security/cve/CVE-2026-52991"
},
{
"category": "external",
"summary": "SUSE Bug 1269134 for CVE-2026-52991",
"url": "https://bugzilla.suse.com/1269134"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52991"
},
{
"cve": "CVE-2026-52995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52995"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: zero per-item info buffer before handing it to visitors\n\nrds_for_each_conn_info() and rds_walk_conn_path_info() both hand a\ncaller-allocated on-stack u64 buffer to a per-connection visitor and\nthen copy the full item_len bytes back to user space via\nrds_info_copy() regardless of how much of the buffer the visitor\nactually wrote.\n\nrds_ib_conn_info_visitor() and rds6_ib_conn_info_visitor() only\nwrite a subset of their output struct when the underlying\nrds_connection is not in state RDS_CONN_UP (src/dst addr, tos, sl\nand the two GIDs via explicit memsets). Several u32 fields\n(max_send_wr, max_recv_wr, max_send_sge, rdma_mr_max, rdma_mr_size,\ncache_allocs) and the 2-byte alignment hole between sl and\ncache_allocs remain as whatever stack contents preceded the visitor\ncall and are then memcpy_to_user()\u0027d out to user space.\n\nstruct rds_info_rdma_connection and struct rds6_info_rdma_connection\nare the only rds_info_* structs in include/uapi/linux/rds.h that are\nnot marked __attribute__((packed)), so they have a real alignment\nhole. The other info visitors (rds_conn_info_visitor,\nrds6_conn_info_visitor, rds_tcp_tc_info, ...) write all fields of\ntheir packed output struct today and are not known to be vulnerable,\nbut a future visitor that adds a conditional write-path would have\nthe same bug.\n\nReproduction on a kernel built without CONFIG_INIT_STACK_ALL_ZERO=y:\na local unprivileged user opens AF_RDS, sets SO_RDS_TRANSPORT=IB,\nbinds to a local address on an RDMA-capable netdev (rxe soft-RoCE on\nany netdev is sufficient), sendto()\u0027s any peer on the same subnet\n(fails cleanly but installs an rds_connection in the global hash in\nRDS_CONN_CONNECTING), then calls getsockopt(SOL_RDS,\nRDS_INFO_IB_CONNECTIONS). The returned 68-byte item contains 26\nbytes of stack garbage including kernel text/data pointers:\n\n 0..7 0a 63 00 01 0a 63 00 02 src=10.99.0.1 dst=10.99.0.2\n 8..39 00 ... gids (memset-zeroed)\n 40..47 e0 92 a3 81 ff ff ff ff kernel pointer (max_send_wr)\n 48..55 7f 37 b5 81 ff ff ff ff kernel pointer (rdma_mr_max)\n 56..59 01 00 08 00 rdma_mr_size (garbage)\n 60..61 00 00 tos, sl\n 62..63 00 00 alignment padding\n 64..67 18 00 00 00 cache_allocs (garbage)\n\nFix by zeroing the per-item buffer in both rds_for_each_conn_info()\nand rds_walk_conn_path_info() before invoking the visitor. This\ncovers the IPv4/IPv6 IB visitors and hardens all current and future\nvisitors against the same class of bug.\n\nNo functional change for visitors that fully populate their output.\n\nChanges in v2:\n- retarget at the net tree (subject prefix \"[PATCH net v2]\",\n net/rds: prefix in the title)\n- pick up Reviewed-by tags from Sharath Srinivasan and\n Allison Henderson",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52995",
"url": "https://www.suse.com/security/cve/CVE-2026-52995"
},
{
"category": "external",
"summary": "SUSE Bug 1269124 for CVE-2026-52995",
"url": "https://bugzilla.suse.com/1269124"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52995"
},
{
"cve": "CVE-2026-52998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52998"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_osf: fix potential NULL dereference in ttl check\n\nThe nf_osf_ttl() function accessed skb-\u003edev to perform a local interface\naddress lookup without verifying that the device pointer was valid.\n\nAdditionally, the implementation utilized an in_dev_for_each_ifa_rcu\nloop to match the packet source address against local interface\naddresses. It assumed that packets from the same subnet should not see a\ndecrement on the initial TTL. A packet might appear it is from the same\nsubnet but it actually isn\u0027t especially in modern environments with\ncontainers and virtual switching.\n\nRemove the device dereference and interface loop. Replace the logic with\na switch statement that evaluates the TTL according to the ttl_check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52998",
"url": "https://www.suse.com/security/cve/CVE-2026-52998"
},
{
"category": "external",
"summary": "SUSE Bug 1269118 for CVE-2026-52998",
"url": "https://bugzilla.suse.com/1269118"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52998"
},
{
"cve": "CVE-2026-52999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52999"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_osf: fix out-of-bounds read on option matching\n\nIn nf_osf_match(), the nf_osf_hdr_ctx structure is initialized once\nand passed by reference to nf_osf_match_one() for each fingerprint\nchecked. During TCP option parsing, nf_osf_match_one() advances the\nshared ctx-\u003eoptp pointer.\n\nIf a fingerprint perfectly matches, the function returns early without\nrestoring ctx-\u003eoptp to its initial state. If the user has configured\nNF_OSF_LOGLEVEL_ALL, the loop continues to the next fingerprint.\nHowever, because ctx-\u003eoptp was not restored, the next call to\nnf_osf_match_one() starts parsing from the end of the options buffer.\nThis causes subsequent matches to read garbage data and fail\nimmediately, making it impossible to log more than one match or logging\nincorrect matches.\n\nInstead of using a shared ctx-\u003eoptp pointer, pass the context as a\nconstant pointer and use a local pointer (optp) for TCP option\ntraversal. This makes nf_osf_match_one() strictly stateless from the\ncaller\u0027s perspective, ensuring every fingerprint check starts at the\ncorrect option offset.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52999",
"url": "https://www.suse.com/security/cve/CVE-2026-52999"
},
{
"category": "external",
"summary": "SUSE Bug 1269119 for CVE-2026-52999",
"url": "https://bugzilla.suse.com/1269119"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-52999"
},
{
"cve": "CVE-2026-53000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53000"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nat: use kfree_rcu to release ops\n\nFlorian Westphal says:\n\n\"Historically this is not an issue, even for normal base hooks: the data\npath doesn\u0027t use the original nf_hook_ops that are used to register the\ncallbacks.\n\nHowever, in v5.14 I added the ability to dump the active netfilter\nhooks from userspace.\n\nThis code will peek back into the nf_hook_ops that are available\nat the tail of the pointer-array blob used by the datapath.\n\nThe nat hooks are special, because they are called indirectly from\nthe central nat dispatcher hook. They are currently invisible to\nthe nfnl hook dump subsystem though.\n\nBut once that changes the nat ops structures have to be deferred too.\"\n\nUpdate nf_nat_register_fn() to deal with partial exposition of the hooks\nfrom error path which can be also an issue for nfnetlink_hook.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53000",
"url": "https://www.suse.com/security/cve/CVE-2026-53000"
},
{
"category": "external",
"summary": "SUSE Bug 1269117 for CVE-2026-53000",
"url": "https://bugzilla.suse.com/1269117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53000"
},
{
"cve": "CVE-2026-53002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53002"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: conntrack: remove sprintf usage\n\nReplace it with scnprintf, the buffer sizes are expected to be large enough\nto hold the result, no need for snprintf+overflow check.\n\nIncrease buffer size in mangle_content_len() while at it.\n\nBUG: KASAN: stack-out-of-bounds in vsnprintf+0xea5/0x1270\nWrite of size 1 at addr [..]\n vsnprintf+0xea5/0x1270\n sprintf+0xb1/0xe0\n mangle_content_len+0x1ac/0x280\n nf_nat_sdp_session+0x1cc/0x240\n process_sdp+0x8f8/0xb80\n process_invite_request+0x108/0x2b0\n process_sip_msg+0x5da/0xf50\n sip_help_tcp+0x45e/0x780\n nf_confirm+0x34d/0x990\n [..]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53002",
"url": "https://www.suse.com/security/cve/CVE-2026-53002"
},
{
"category": "external",
"summary": "SUSE Bug 1269112 for CVE-2026-53002",
"url": "https://bugzilla.suse.com/1269112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53002"
},
{
"cve": "CVE-2026-53003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53003"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npppoe: drop PFC frames\n\nRFC 2516 Section 7 states that Protocol Field Compression (PFC) is NOT\nRECOMMENDED for PPPoE. In practice, pppd does not support negotiating\nPFC for PPPoE sessions, and the current PPPoE driver assumes an\nuncompressed (2-byte) protocol field. However, the generic PPP layer\nfunction ppp_input() is not aware of the negotiation result, and still\naccepts PFC frames.\n\nIf a peer with a broken implementation or an attacker sends a frame with\na compressed (1-byte) protocol field, the subsequent PPP payload is\nshifted by one byte. This causes the network header to be 4-byte\nmisaligned, which may trigger unaligned access exceptions on some\narchitectures.\n\nTo reduce the attack surface, drop PPPoE PFC frames. Introduce\nppp_skb_is_compressed_proto() helper function to be used in both\nppp_generic.c and pppoe.c to avoid open-coding.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53003",
"url": "https://www.suse.com/security/cve/CVE-2026-53003"
},
{
"category": "external",
"summary": "SUSE Bug 1269111 for CVE-2026-53003",
"url": "https://bugzilla.suse.com/1269111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53003"
},
{
"cve": "CVE-2026-53004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53004"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks\n\nsctp_getsockopt_peer_auth_chunks() checks that the caller\u0027s optval\nbuffer is large enough for the peer AUTH chunk list with\n\n if (len \u003c num_chunks)\n return -EINVAL;\n\nbut then writes num_chunks bytes to p-\u003egauth_chunks, which lives\nat offset offsetof(struct sctp_authchunks, gauth_chunks) == 8\ninside optval. The check is missing the sizeof(struct\nsctp_authchunks) = 8-byte header. When the caller supplies\nlen == num_chunks (for any num_chunks \u003e 0) the test passes but\ncopy_to_user() writes sizeof(struct sctp_authchunks) = 8 bytes\npast the declared buffer.\n\nThe sibling function sctp_getsockopt_local_auth_chunks() at the\nnext line already has the correct check:\n\n if (len \u003c sizeof(struct sctp_authchunks) + num_chunks)\n return -EINVAL;\n\nAlign the peer variant with its sibling.\n\nReproducer confirms on v7.0-13-generic: an unprivileged userspace\ncaller that opens a loopback SCTP association with AUTH enabled,\nqueries num_chunks with a short optval, then issues the real\ngetsockopt with len == num_chunks and sentinel bytes painted past\nthe buffer observes those sentinel bytes overwritten with the\npeer\u0027s AUTH chunk type. The bytes written are under the peer\u0027s\ncontrol but land in the caller\u0027s own userspace; this is not a\nkernel memory corruption, but it is a kernel-side contract\nviolation that can silently corrupt adjacent userspace data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53004",
"url": "https://www.suse.com/security/cve/CVE-2026-53004"
},
{
"category": "external",
"summary": "SUSE Bug 1269106 for CVE-2026-53004",
"url": "https://bugzilla.suse.com/1269106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53004"
},
{
"cve": "CVE-2026-53006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53006"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix possible UAF in icmpv6_rcv()\n\nCaching saddr and daddr before pskb_pull() is problematic\nsince skb-\u003ehead can change.\n\nRemove these temporary variables:\n\n- We only access \u0026ipv6_hdr(skb)-\u003esaddr and \u0026ipv6_hdr(skb)-\u003edaddr\n when net_dbg_ratelimited() is called in the slow path.\n\n- Avoid potential future misuse after pskb_pull() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53006",
"url": "https://www.suse.com/security/cve/CVE-2026-53006"
},
{
"category": "external",
"summary": "SUSE Bug 1269104 for CVE-2026-53006",
"url": "https://bugzilla.suse.com/1269104"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53006"
},
{
"cve": "CVE-2026-53009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53009"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix double-free of tx_buf skb\n\nIf ice_tso() or ice_tx_csum() fail, the error path in\nice_xmit_frame_ring() frees the skb, but the \u0027first\u0027 tx_buf still points\nto it and is marked as valid (ICE_TX_BUF_SKB).\n\u0027next_to_use\u0027 remains unchanged, so the potential problem will\nlikely fix itself when the next packet is transmitted and the tx_buf\ngets overwritten. But if there is no next packet and the interface is\nbrought down instead, ice_clean_tx_ring() -\u003e ice_unmap_and_free_tx_buf()\nwill find the tx_buf and free the skb for the second time.\n\nThe fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error\npath, so that ice_unmap_and_free_tx_buf().\nMove the initialization of \u0027first\u0027 up, to ensure it\u0027s already valid in\ncase we hit the linearization error path.\n\nThe bug was spotted by AI while I had it looking for something else.\nIt also proposed an initial version of the patch.\n\nI reproduced the bug and tested the fix by adding code to inject\nfailures, on a build with KASAN.\n\nI looked for similar bugs in related Intel drivers and did not find any.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53009",
"url": "https://www.suse.com/security/cve/CVE-2026-53009"
},
{
"category": "external",
"summary": "SUSE Bug 1269098 for CVE-2026-53009",
"url": "https://bugzilla.suse.com/1269098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53009"
},
{
"cve": "CVE-2026-53011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53011"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: taprio: fix use-after-free in advance_sched() on schedule switch\n\nIn advance_sched(), when should_change_schedules() returns true,\nswitch_schedules() is called to promote the admin schedule to oper.\nswitch_schedules() queues the old oper schedule for RCU freeing via\ncall_rcu(), but \u0027next\u0027 still points into an entry of the old oper\nschedule. The subsequent \u0027next-\u003eend_time = end_time\u0027 and\nrcu_assign_pointer(q-\u003ecurrent_entry, next) are use-after-free.\n\nFix this by selecting \u0027next\u0027 from the new oper schedule immediately\nafter switch_schedules(), and using its pre-calculated end_time.\nsetup_first_end_time() sets the first entry\u0027s end_time to\nbase_time + interval when the schedule is installed, so the value\nis already correct.\n\nThe deleted \u0027end_time = sched_base_time(admin)\u0027 assignment was also\nharmful independently: it would overwrite the new first entry\u0027s\npre-calculated end_time with just base_time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53011",
"url": "https://www.suse.com/security/cve/CVE-2026-53011"
},
{
"category": "external",
"summary": "SUSE Bug 1269094 for CVE-2026-53011",
"url": "https://bugzilla.suse.com/1269094"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53011"
},
{
"cve": "CVE-2026-53012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53012"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnexthop: fix IPv6 route referencing IPv4 nexthop\n\nsyzbot reported a panic [1] [2].\n\nWhen an IPv6 nexthop is replaced with an IPv4 nexthop, the has_v4 flag\nof all groups containing this nexthop is not updated. This is because\nnh_group_v4_update is only called when replacing AF_INET to AF_INET6,\nbut the reverse direction (AF_INET6 to AF_INET) is missed.\n\nThis allows a stale has_v4=false to bypass fib6_check_nexthop, causing\nIPv6 routes to be attached to groups that effectively contain only AF_INET\nmembers. Subsequent route lookups then call nexthop_fib6_nh() which\nreturns NULL for the AF_INET member, leading to a NULL pointer\ndereference.\n\nFix by calling nh_group_v4_update whenever the family changes, not just\nAF_INET to AF_INET6.\n\nReproducer:\n\t# AF_INET6 blackhole\n\tip -6 nexthop add id 1 blackhole\n\t# group with has_v4=false\n\tip nexthop add id 100 group 1\n\t# replace with AF_INET (no -6), has_v4 stays false\n\tip nexthop replace id 1 blackhole\n\t# pass stale has_v4 check\n\tip -6 route add 2001:db8::/64 nhid 100\n\t# panic\n\tping -6 2001:db8::1\n\n[1] https://syzkaller.appspot.com/bug?id=e17283eb2f8dcf3dd9b47fe6f67a95f71faadad0\n[2] https://syzkaller.appspot.com/bug?id=8699b6ae54c9f35837d925686208402949e12ef3",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53012",
"url": "https://www.suse.com/security/cve/CVE-2026-53012"
},
{
"category": "external",
"summary": "SUSE Bug 1269154 for CVE-2026-53012",
"url": "https://bugzilla.suse.com/1269154"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53012"
},
{
"cve": "CVE-2026-53013",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53013"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF\n\nmacvlan_get_size() does not account for IFLA_MACVLAN_BC_CUTOFF, but\nmacvlan_fill_info() conditionally includes it when port-\u003ebc_cutoff != 1.\nThis causes nla_put_s32() to fail with -EMSGSIZE when the netlink skb\nruns out of space, triggering a WARN_ON in rtnetlink and preventing the\ninterface from being dumped.\n\nThe bug can be reproduced with:\n\n ip link add macvlan0 link eth0 type macvlan mode bridge\n ip link set macvlan0 type macvlan bc_cutoff 0\n ip -d link show macvlan0 # fails with -EMSGSIZE\n\nThe bc_cutoff feature was added in commit 954d1fa1ac93 (\"macvlan: Add\nnetlink attribute for broadcast cutoff\"), which added the nla_put_s32()\ncall in macvlan_fill_info() but missed adding the corresponding\nnla_total_size(4) in macvlan_get_size(). A follow-up commit\n55cef78c244d (\"macvlan: add forgotten nla_policy for\nIFLA_MACVLAN_BC_CUTOFF\") fixed the missing nla_policy entry but still\ndid not fix the size calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53013",
"url": "https://www.suse.com/security/cve/CVE-2026-53013"
},
{
"category": "external",
"summary": "SUSE Bug 1269095 for CVE-2026-53013",
"url": "https://bugzilla.suse.com/1269095"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53013"
},
{
"cve": "CVE-2026-53022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53022"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: dell-wmi-sysman: bound enumeration string aggregation\n\npopulate_enum_data() aggregates firmware-provided value-modifier\nand possible-value strings into fixed 512-byte struct members.\nThe current code bounds each individual source string but then\nappends every string and separator with raw strcat() and no\nremaining-space check.\n\nSwitch the aggregation loops to a bounded append helper and\nreject enumeration packages whose combined strings do not fit\nin the destination buffers.\n\n[ij: add include]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53022",
"url": "https://www.suse.com/security/cve/CVE-2026-53022"
},
{
"category": "external",
"summary": "SUSE Bug 1269153 for CVE-2026-53022",
"url": "https://bugzilla.suse.com/1269153"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53022"
},
{
"cve": "CVE-2026-53032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53032"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix NULL deref in map_kptr_match_type for scalar regs\n\nCommit ab6c637ad027 (\"bpf: Fix a bpf_kptr_xchg() issue with local\nkptr\") refactored map_kptr_match_type() to branch on btf_is_kernel()\nbefore checking base_type(). A scalar register stored into a kptr\nslot has no btf, so the btf_is_kernel(reg-\u003ebtf) call dereferences\nNULL.\n\nMove the base_type() != PTR_TO_BTF_ID guard before any reg-\u003ebtf\naccess.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53032",
"url": "https://www.suse.com/security/cve/CVE-2026-53032"
},
{
"category": "external",
"summary": "SUSE Bug 1269138 for CVE-2026-53032",
"url": "https://bugzilla.suse.com/1269138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53032"
},
{
"cve": "CVE-2026-53037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53037"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: usbhid: fix deadlock in hid_post_reset()\n\nYou can build a USB device that includes a HID component\nand a storage or UAS component. The components can be reset\nonly together. That means that hid_pre_reset() and hid_post_reset()\nare in the block IO error handling. Hence no memory allocation\nused in them may do block IO because the IO can deadlock\non the mutex held while resetting a device and calling the\ninterface drivers.\nUse GFP_NOIO for all allocations in them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53037",
"url": "https://www.suse.com/security/cve/CVE-2026-53037"
},
{
"category": "external",
"summary": "SUSE Bug 1269081 for CVE-2026-53037",
"url": "https://bugzilla.suse.com/1269081"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53037"
},
{
"cve": "CVE-2026-53045",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53045"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemory: tegra124-emc: Fix dll_change check\n\nThe code checking whether the specified memory timing enables DLL\nin the EMRS register was reversed. DLL is enabled if bit A0 is low.\nFix the check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53045",
"url": "https://www.suse.com/security/cve/CVE-2026-53045"
},
{
"category": "external",
"summary": "SUSE Bug 1269404 for CVE-2026-53045",
"url": "https://bugzilla.suse.com/1269404"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-53045"
},
{
"cve": "CVE-2026-53047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53047"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi/capsule-loader: fix incorrect sizeof in phys array reallocation\n\nThe krealloc() call for cap_info-\u003ephys in __efi_capsule_setup_info() uses\nsizeof(phys_addr_t *) instead of sizeof(phys_addr_t), which might be\ncausing an undersized allocation.\n\nThe allocation is also inconsistent with the initial array allocation in\nefi_capsule_open() that allocates one entry with sizeof(phys_addr_t),\nand the efi_capsule_write() function that stores phys_addr_t values (not\npointers) via page_to_phys().\n\nOn 64-bit systems where sizeof(phys_addr_t) == sizeof(phys_addr_t *), this\ngoes unnoticed. On 32-bit systems with PAE where phys_addr_t is 64-bit but\npointers are 32-bit, this allocates half the required space, which might\nlead to a heap buffer overflow when storing physical addresses.\n\nThis is similar to the bug fixed in commit fccfa646ef36 (\"efi/capsule-loader:\nfix incorrect allocation size\") which fixed the same issue at the initial\nallocation site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53047",
"url": "https://www.suse.com/security/cve/CVE-2026-53047"
},
{
"category": "external",
"summary": "SUSE Bug 1269644 for CVE-2026-53047",
"url": "https://bugzilla.suse.com/1269644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53047"
},
{
"cve": "CVE-2026-53056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53056"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dpu: fix mismatch between power and frequency\n\nDuring DPU runtime suspend, calling dev_pm_opp_set_rate(dev, 0) drops\nthe MMCX rail to MIN_SVS while the core clock frequency remains at its\noriginal (highest) rate. When runtime resume re-enables the clock, this\nmay result in a mismatch between the rail voltage and the clock rate.\n\nFor example, in the DPU bind path, the sequence could be:\n cpu0: dev_sync_state -\u003e rpmhpd_sync_state\n cpu1: dpu_kms_hw_init\ntimeline 0 ------------------------------------------------\u003e t\n\nAfter rpmhpd_sync_state, the voltage performance is no longer guaranteed\nto stay at the highest level. During dpu_kms_hw_init, calling\ndev_pm_opp_set_rate(dev, 0) drops the voltage, causing the MMCX rail to\nfall to MIN_SVS while the core clock is still at its maximum frequency.\nWhen the power is re-enabled, only the clock is enabled, leading to a\nsituation where the MMCX rail is at MIN_SVS but the core clock is at its\nhighest rate. In this state, the rail cannot sustain the clock rate,\nwhich may cause instability or system crash.\n\nRemove the call to dev_pm_opp_set_rate(dev, 0) from dpu_runtime_suspend\nto ensure the correct vote is restored when DPU resumes.\n\nPatchwork: https://patchwork.freedesktop.org/patch/710077/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53056",
"url": "https://www.suse.com/security/cve/CVE-2026-53056"
},
{
"category": "external",
"summary": "SUSE Bug 1269403 for CVE-2026-53056",
"url": "https://bugzilla.suse.com/1269403"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53056"
},
{
"cve": "CVE-2026-53058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53058"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()\n\nIn case if we get errors in cdns_mhdp_link_up() or cdns_mhdp_reg_read()\nin atomic_enable, we will go to cdns_mhdp_modeset_retry_fn() and will hit\nNULL pointer while trying to access the mutex. We need the connector to\nbe set before that. Unlike in legacy cases with flag\n!DRM_BRIDGE_ATTACH_NO_CONNECTOR, we do not have connector initialised\nin bridge_attach(), so add the mhdp-\u003econnector_ptr in device structure\nto handle both cases with DRM_BRIDGE_ATTACH_NO_CONNECTOR and\n!DRM_BRIDGE_ATTACH_NO_CONNECTOR, set it in atomic_enable() earlier to\navoid possible NULL pointer dereference in recovery paths like\nmodeset_retry_fn() with the DRM_BRIDGE_ATTACH_NO_CONNECTOR flag set.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53058",
"url": "https://www.suse.com/security/cve/CVE-2026-53058"
},
{
"category": "external",
"summary": "SUSE Bug 1269684 for CVE-2026-53058",
"url": "https://bugzilla.suse.com/1269684"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53058"
},
{
"cve": "CVE-2026-53062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53062"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache policy smq: fix missing locks in invalidating cache blocks\n\nIn passthrough mode, the policy invalidate_mapping operation is called\nsimultaneously from multiple workers, thus it should be protected by a\nlock. Otherwise, we might end up with data races on the allocated blocks\ncounter, or even use-after-free issues with internal data structures\nwhen doing concurrent writes.\n\nNote that the existing FIXME in smq_invalidate_mapping() doesn\u0027t affect\npassthrough mode since migration tasks don\u0027t exist there, but would need\nattention if supporting fast device shrinking via suspend/resume without\ntarget reloading.\n\nReproduce steps:\n\n1. Create a cache device consisting of 1024 cache entries\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 131072 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 262144 linear /dev/sdc 262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\ndmsetup create cache --table \"0 262144 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. Populate the cache, and record the number of cached blocks\n\nfio --name=populate --filename=/dev/mapper/cache --rw=randwrite --bs=4k \\\n--size=64m --direct=1\nnr_cached=$(dmsetup status cache | awk \u0027{split($7, a, \"/\"); print a[1]}\u0027)\n\n3. Reload the cache into passthrough mode\n\ndmsetup suspend cache\ndmsetup reload cache --table \"0 262144 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0\"\ndmsetup resume cache\n\n4. Write to the passthrough cache. By setting multiple jobs with I/O\n size equal to the cache block size, cache blocks are invalidated\n concurrently from different workers.\n\nfio --filename=/dev/mapper/cache --name=test --rw=randwrite --bs=64k \\\n--direct=1 --numjobs=2 --randrepeat=0 --size=64m\n\n5. Check if demoted matches cached block count. These numbers should\n match but may differ due to the data race.\n\nnr_demoted=$(dmsetup status cache | awk \u0027{print $12}\u0027)\necho \"$nr_cached, $nr_demoted\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53062",
"url": "https://www.suse.com/security/cve/CVE-2026-53062"
},
{
"category": "external",
"summary": "SUSE Bug 1269658 for CVE-2026-53062",
"url": "https://bugzilla.suse.com/1269658"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53062"
},
{
"cve": "CVE-2026-53063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53063"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix write hang in passthrough mode\n\nThe invalidate_remove() function has incomplete logic for handling write\nhit bios after cache invalidation. It sets up the remapping for the\noverwrite_bio but then drops it immediately without submission, causing\nwrite operations to hang.\n\nFix by adding a new invalidate_committed() continuation that submits\nthe remapped writes to the cache origin after metadata commit completes,\nwhile using the overwrite_endio hook to ensure proper completion\nsequencing. This maintains existing coherency. Also improve error\nhandling in invalidate_complete() to preserve the original error status\ninstead of using bio_io_error() unconditionally.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53063",
"url": "https://www.suse.com/security/cve/CVE-2026-53063"
},
{
"category": "external",
"summary": "SUSE Bug 1269659 for CVE-2026-53063",
"url": "https://bugzilla.suse.com/1269659"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53063"
},
{
"cve": "CVE-2026-53064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53064"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix null-deref with concurrent writes in passthrough mode\n\nIn passthrough mode, when dm-cache starts to invalidate a cache\nentry and bio prison cell lock fails due to concurrent write to\nthe same cached block, mg-\u003ecell remains NULL. The error path in\ninvalidate_complete() attempts to unlock and free the cell\nunconditionally, causing a NULL pointer dereference:\n\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nCPU: 0 UID: 0 PID: 134 Comm: fio Not tainted 6.19.0-rc7 #3 PREEMPT\nRIP: 0010:dm_cell_unlock_v2+0x3f/0x210\n\u003csnip\u003e\nCall Trace:\n invalidate_complete+0xef/0x430\n map_bio+0x130f/0x1a10\n cache_map+0x320/0x6b0\n __map_bio+0x458/0x510\n dm_submit_bio+0x40e/0x16d0\n __submit_bio+0x419/0x870\n\u003csnip\u003e\n\nReproduce steps:\n\n1. Create a cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 131072 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 262144 linear /dev/sdc 262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\ndmsetup create cache --table \"0 262144 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. Promote the first data block into cache\n\nfio --filename=/dev/mapper/cache --name=populate --rw=write --bs=4k \\\n--direct=1 --size=64k\n\n3. Reload the cache into passthrough mode\n\ndmsetup suspend cache\ndmsetup reload cache --table \"0 262144 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0\"\ndmsetup resume cache\n\n4. Write to the first cached block concurrently\n\nfio --filename=/dev/mapper/cache --name test --rw=randwrite --bs=4k \\\n--randrepeat=0 --direct=1 --numjobs=2 --size 64k\n\nFix by checking if mg-\u003ecell is valid before attempting to unlock it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53064",
"url": "https://www.suse.com/security/cve/CVE-2026-53064"
},
{
"category": "external",
"summary": "SUSE Bug 1269132 for CVE-2026-53064",
"url": "https://bugzilla.suse.com/1269132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53064"
},
{
"cve": "CVE-2026-53065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53065"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: sti: use managed regmap_field allocations\n\nThe regmap_field objects allocated at player init are never freed and\nmay leak resources if the driver is removed.\n\nSwitch to devm_regmap_field_alloc() to automatically limit the lifetime\nof the allocations the lifetime of the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53065",
"url": "https://www.suse.com/security/cve/CVE-2026-53065"
},
{
"category": "external",
"summary": "SUSE Bug 1269661 for CVE-2026-53065",
"url": "https://bugzilla.suse.com/1269661"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 1.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-53065"
},
{
"cve": "CVE-2026-53066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53066"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sun4i: backend: fix error pointer dereference\n\nThe function drm_atomic_get_plane_state() can return an error pointer\nand is not checked for it. Add error pointer check.\n\nDetected by Smatch:\ndrivers/gpu/drm/sun4i/sun4i_backend.c:496 sun4i_backend_atomic_check() error:\n\u0027plane_state\u0027 dereferencing possible ERR_PTR()",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53066",
"url": "https://www.suse.com/security/cve/CVE-2026-53066"
},
{
"category": "external",
"summary": "SUSE Bug 1269187 for CVE-2026-53066",
"url": "https://bugzilla.suse.com/1269187"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53066"
},
{
"cve": "CVE-2026-53068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53068"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/komeda: fix integer overflow in AFBC framebuffer size check\n\nThe AFBC framebuffer size validation calculates the minimum required\nbuffer size by adding the AFBC payload size to the framebuffer offset.\nThis addition is performed without checking for integer overflow.\n\nIf the addition oveflows, the size check may incorrectly succed and\nallow userspace to provide an undersized drm_gem_object, potentially\nleading to out-of-bounds memory access.\n\nAdd usage of check_add_overflow() to safely compute the minimum\nrequired size and reject the framebuffer if an overflow is detected.\nThis makes the AFBC size validation more robust against malformed.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53068",
"url": "https://www.suse.com/security/cve/CVE-2026-53068"
},
{
"category": "external",
"summary": "SUSE Bug 1269410 for CVE-2026-53068",
"url": "https://bugzilla.suse.com/1269410"
},
{
"category": "external",
"summary": "SUSE Bug 1269411 for CVE-2026-53068",
"url": "https://bugzilla.suse.com/1269411"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53068"
},
{
"cve": "CVE-2026-53069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53069"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet, bpf: fix null-ptr-deref in xdp_master_redirect() for down master\n\nsyzkaller reported a kernel panic in bond_rr_gen_slave_id() reached via\nxdp_master_redirect(). Full decoded trace:\n\n https://syzkaller.appspot.com/bug?extid=80e046b8da2820b6ba73\n\nbond_rr_gen_slave_id() dereferences bond-\u003err_tx_counter, a per-CPU\ncounter that bonding only allocates in bond_open() when the mode is\nround-robin. If the bond device was never brought up, rr_tx_counter\nstays NULL.\n\nThe XDP redirect path can still reach that code on a bond that was\nnever opened: bpf_master_redirect_enabled_key is a global static key,\nso as soon as any bond device has native XDP attached, the\nXDP_TX -\u003e xdp_master_redirect() interception is enabled for every\nslave system-wide. The path xdp_master_redirect() -\u003e\nbond_xdp_get_xmit_slave() -\u003e bond_xdp_xmit_roundrobin_slave_get() -\u003e\nbond_rr_gen_slave_id() then runs against a bond that has no\nrr_tx_counter and crashes.\n\nFix this in the generic xdp_master_redirect() by refusing to call into\nthe master\u0027s -\u003endo_xdp_get_xmit_slave() when the master device is not\nup. IFF_UP is only set after -\u003endo_open() has successfully returned,\nso this reliably excludes masters whose XDP state has not been fully\ninitialized. Drop the frame with XDP_ABORTED so the exception is\nvisible via trace_xdp_exception() rather than silently falling through.\nThis is not specific to bonding: any current or future master that\ndefers XDP state allocation to -\u003endo_open() is protected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53069",
"url": "https://www.suse.com/security/cve/CVE-2026-53069"
},
{
"category": "external",
"summary": "SUSE Bug 1269186 for CVE-2026-53069",
"url": "https://bugzilla.suse.com/1269186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53069"
},
{
"cve": "CVE-2026-53070",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53070"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: disable BH before calling udp_tunnel_xmit_skb()\n\nudp_tunnel_xmit_skb() / udp_tunnel6_xmit_skb() are expected to run with\nBH disabled. After commit 6f1a9140ecda (\"add xmit recursion limit to\ntunnel xmit functions\"), on the path:\n\n udp(6)_tunnel_xmit_skb() -\u003e ip(6)tunnel_xmit()\n\ndev_xmit_recursion_inc()/dec() must stay balanced on the same CPU.\n\nWithout local_bh_disable(), the context may move between CPUs, which can\nbreak the inc/dec pairing. This may lead to incorrect recursion level\ndetection and cause packets to be dropped in ip(6)_tunnel_xmit() or\n__dev_queue_xmit().\n\nFix it by disabling BH around both IPv4 and IPv6 SCTP UDP xmit paths.\n\nIn my testing, after enabling the SCTP over UDP:\n\n # ip net exec ha sysctl -w net.sctp.udp_port=9899\n # ip net exec ha sysctl -w net.sctp.encap_port=9899\n # ip net exec hb sysctl -w net.sctp.udp_port=9899\n # ip net exec hb sysctl -w net.sctp.encap_port=9899\n\n # ip net exec ha iperf3 -s\n\n- without this patch:\n\n # ip net exec hb iperf3 -c 192.168.0.1 --sctp\n [ 5] 0.00-10.00 sec 37.2 MBytes 31.2 Mbits/sec sender\n [ 5] 0.00-10.00 sec 37.1 MBytes 31.1 Mbits/sec receiver\n\n- with this patch:\n\n # ip net exec hb iperf3 -c 192.168.0.1 --sctp\n [ 5] 0.00-10.00 sec 3.14 GBytes 2.69 Gbits/sec sender\n [ 5] 0.00-10.00 sec 3.14 GBytes 2.69 Gbits/sec receiver",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53070",
"url": "https://www.suse.com/security/cve/CVE-2026-53070"
},
{
"category": "external",
"summary": "SUSE Bug 1269674 for CVE-2026-53070",
"url": "https://bugzilla.suse.com/1269674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53070"
},
{
"cve": "CVE-2026-53073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53073"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error\n\nWhen hci_register_dev() fails in hci_uart_register_dev()\nHCI_UART_PROTO_INIT is not cleared before calling hu-\u003eproto-\u003eclose(hu)\nand setting hu-\u003ehdev to NULL. This means incoming UART data will reach\nthe protocol-specific recv handler in hci_uart_tty_receive() after\nresources are freed.\n\nClear HCI_UART_PROTO_INIT with a write lock before calling\nhu-\u003eproto-\u003eclose() and setting hu-\u003ehdev to NULL. The write lock ensures\nall active readers have completed and no new reader can enter the\nprotocol recv path before resources are freed.\n\nThis allows the protocol-specific recv functions to remove the\n\"HCI_UART_REGISTERED\" guard without risking a null pointer dereference\nif hci_register_dev() fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53073",
"url": "https://www.suse.com/security/cve/CVE-2026-53073"
},
{
"category": "external",
"summary": "SUSE Bug 1269682 for CVE-2026-53073",
"url": "https://bugzilla.suse.com/1269682"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53073"
},
{
"cve": "CVE-2026-53074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53074"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb\n\nbpf_prog_test_run_skb() calls eth_type_trans() first and then uses\nskb-\u003eprotocol to initialize sk family and address fields for the test\nrun.\n\nFor IPv4 and IPv6 packets, it may access ip_hdr(skb) or ipv6_hdr(skb)\neven when the provided test input only contains an Ethernet header.\n\nReject the input earlier if the Ethernet frame carries IPv4/IPv6\nEtherType but the L3 header is too short.\n\nFold the IPv4/IPv6 header length checks into the existing protocol\nswitch and return -EINVAL before accessing the network headers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53074",
"url": "https://www.suse.com/security/cve/CVE-2026-53074"
},
{
"category": "external",
"summary": "SUSE Bug 1269688 for CVE-2026-53074",
"url": "https://bugzilla.suse.com/1269688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53074"
},
{
"cve": "CVE-2026-53080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53080"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_fw: fix NULL dereference of \"old\" filters before change()\n\nLike pointed out by Sashiko [1], since commit ed76f5edccc9 (\"net: sched:\nprotect filter_chain list with filter_chain_lock mutex\") TC filters are\nadded to a shared block and published to datapath before their -\u003echange()\nfunction is called. This is a problem for cls_fw: an invalid filter\ncreated with the \"old\" method can still classify some packets before it\nis destroyed by the validation logic added by Xiang.\nTherefore, insisting with repeated runs of the following script:\n\n # ip link add dev crash0 type dummy\n # ip link set dev crash0 up\n # mausezahn crash0 -c 100000 -P 10 \\\n \u003e -A 4.3.2.1 -B 1.2.3.4 -t udp \"dp=1234\" -q \u0026\n # sleep 1\n # tc qdisc add dev crash0 egress_block 1 clsact\n # tc filter add block 1 protocol ip prio 1 matchall \\\n \u003e action skbedit mark 65536 continue\n # tc filter add block 1 protocol ip prio 2 fw\n # ip link del dev crash0\n\ncan still make fw_classify() hit the WARN_ON() in [2]:\n\n WARNING: ./include/net/pkt_cls.h:88 at fw_classify+0x244/0x250 [cls_fw], CPU#18: mausezahn/1399\n Modules linked in: cls_fw(E) act_skbedit(E)\n CPU: 18 UID: 0 PID: 1399 Comm: mausezahn Tainted: G E 7.0.0-rc6-virtme #17 PREEMPT(full)\n Tainted: [E]=UNSIGNED_MODULE\n Hardware name: Red Hat KVM, BIOS 1.16.3-2.el9 04/01/2014\n RIP: 0010:fw_classify+0x244/0x250 [cls_fw]\n Code: 5c 49 c7 45 00 00 00 00 00 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 5b b8 ff ff ff ff 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 \u003c0f\u003e 0b 90 eb a0 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90\n RSP: 0018:ffffd1b7026bf8a8 EFLAGS: 00010202\n RAX: ffff8c5ac9c60800 RBX: ffff8c5ac99322c0 RCX: 0000000000000004\n RDX: 0000000000000001 RSI: ffff8c5b74d7a000 RDI: ffff8c5ac8284f40\n RBP: ffffd1b7026bf8d0 R08: 0000000000000000 R09: ffffd1b7026bf9b0\n R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000010000\n R13: ffffd1b7026bf930 R14: ffff8c5ac8284f40 R15: 0000000000000000\n FS: 00007fca40c37740(0000) GS:ffff8c5b74d7a000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007fca40e822a0 CR3: 0000000005ca0001 CR4: 0000000000172ef0\n Call Trace:\n \u003cTASK\u003e\n tcf_classify+0x17d/0x5c0\n tc_run+0x9d/0x150\n __dev_queue_xmit+0x2ab/0x14d0\n ip_finish_output2+0x340/0x8f0\n ip_output+0xa4/0x250\n raw_sendmsg+0x147d/0x14b0\n __sys_sendto+0x1cc/0x1f0\n __x64_sys_sendto+0x24/0x30\n do_syscall_64+0x126/0xf80\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n RIP: 0033:0x7fca40e822ba\n Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89\n RSP: 002b:00007ffc248a42c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c\n RAX: ffffffffffffffda RBX: 000055ef233289d0 RCX: 00007fca40e822ba\n RDX: 000000000000001e RSI: 000055ef23328c30 RDI: 0000000000000003\n RBP: 000055ef233289d0 R08: 00007ffc248a42d0 R09: 0000000000000010\n R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e\n R13: 00000000000186a0 R14: 0000000000000000 R15: 00007fca41043000\n \u003c/TASK\u003e\n irq event stamp: 1045778\n hardirqs last enabled at (1045784): [\u003cffffffff864ec042\u003e] __up_console_sem+0x52/0x60\n hardirqs last disabled at (1045789): [\u003cffffffff864ec027\u003e] __up_console_sem+0x37/0x60\n softirqs last enabled at (1045426): [\u003cffffffff874d48c7\u003e] __alloc_skb+0x207/0x260\n softirqs last disabled at (1045434): [\u003cffffffff874fe8f8\u003e] __dev_queue_xmit+0x78/0x14d0\n\nThen, because of the value in the packet\u0027s mark, dereference on \u0027q-\u003ehandle\u0027\nwith NULL \u0027q\u0027 occurs:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000038\n [...]\n RIP: 0010:fw_classify+0x1fe/0x250 [cls_fw]\n [...]\n\nSkip \"old-style\" classification on shared blocks, so that the NULL\ndereference is fixed and WARN_ON() is not hit anymore in the short\nlifetime of invalid cls_fw \"old-style\" filters.\n\n[1] https://sashiko.dev/#/patchset/2\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53080",
"url": "https://www.suse.com/security/cve/CVE-2026-53080"
},
{
"category": "external",
"summary": "SUSE Bug 1269141 for CVE-2026-53080",
"url": "https://bugzilla.suse.com/1269141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53080"
},
{
"cve": "CVE-2026-53083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53083"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix RCU stall in bpf_fd_array_map_clear()\n\nAdd a missing cond_resched() in bpf_fd_array_map_clear() loop.\n\nFor PROG_ARRAY maps with many entries this loop calls\nprog_array_map_poke_run() per entry which can be expensive, and\nwithout yielding this can cause RCU stalls under load:\n\n rcu: Stack dump where RCU GP kthread last ran:\n CPU: 0 UID: 0 PID: 30932 Comm: kworker/0:2 Not tainted 6.14.0-13195-g967e8def1100 #2 PREEMPT(undef)\n Workqueue: events prog_array_map_clear_deferred\n RIP: 0010:write_comp_data+0x38/0x90 kernel/kcov.c:246\n Call Trace:\n \u003cTASK\u003e\n prog_array_map_poke_run+0x77/0x380 kernel/bpf/arraymap.c:1096\n __fd_array_map_delete_elem+0x197/0x310 kernel/bpf/arraymap.c:925\n bpf_fd_array_map_clear kernel/bpf/arraymap.c:1000 [inline]\n prog_array_map_clear_deferred+0x119/0x1b0 kernel/bpf/arraymap.c:1141\n process_one_work+0x898/0x19d0 kernel/workqueue.c:3238\n process_scheduled_works kernel/workqueue.c:3319 [inline]\n worker_thread+0x770/0x10b0 kernel/workqueue.c:3400\n kthread+0x465/0x880 kernel/kthread.c:464\n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:153\n ret_from_fork_asm+0x19/0x30 arch/x86/entry/entry_64.S:245\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53083",
"url": "https://www.suse.com/security/cve/CVE-2026-53083"
},
{
"category": "external",
"summary": "SUSE Bug 1269964 for CVE-2026-53083",
"url": "https://bugzilla.suse.com/1269964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53083"
},
{
"cve": "CVE-2026-53088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53088"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bcmgenet: fix off-by-one in bcmgenet_put_txcb\n\nThe write_ptr points to the next open tx_cb. We want to return the\ntx_cb that gets rewinded, so we must rewind the pointer first then\nreturn the tx_cb that it points to. That way the txcb can be correctly\ncleaned up.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53088",
"url": "https://www.suse.com/security/cve/CVE-2026-53088"
},
{
"category": "external",
"summary": "SUSE Bug 1269185 for CVE-2026-53088",
"url": "https://bugzilla.suse.com/1269185"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53088"
},
{
"cve": "CVE-2026-53093",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53093"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix error pointer dereference\n\nThe function brcmf_chip_add_core() can return an error pointer and is\nnot checked. Add checks for error pointer.\n\nDetected by Smatch:\ndrivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1010 brcmf_chip_recognition() error:\n\u0027core\u0027 dereferencing possible ERR_PTR()\n\ndrivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1013 brcmf_chip_recognition() error:\n\u0027core\u0027 dereferencing possible ERR_PTR()\n\ndrivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1016 brcmf_chip_recognition() error:\n\u0027core\u0027 dereferencing possible ERR_PTR()\n\ndrivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1019 brcmf_chip_recognition() error:\n\u0027core\u0027 dereferencing possible ERR_PTR()\n\ndrivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1022 brcmf_chip_recognition() error:\n\u0027core\u0027 dereferencing possible ERR_PTR()\n\n[add missing wifi: prefix]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53093",
"url": "https://www.suse.com/security/cve/CVE-2026-53093"
},
{
"category": "external",
"summary": "SUSE Bug 1269414 for CVE-2026-53093",
"url": "https://bugzilla.suse.com/1269414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53093"
},
{
"cve": "CVE-2026-53098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53098"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()\n\nWhen the mt7915 pci chip is detaching, the mt7915_crash_data is\nreleased in mt7915_coredump_unregister(). However, the work item\ndump_work may still be running or pending, leading to UAF bugs\nwhen the already freed crash_data is dereferenced again in\nmt7915_mac_dump_work().\n\nThe race condition can occur as follows:\n\nCPU 0 (removal path) | CPU 1 (workqueue)\nmt7915_pci_remove() | mt7915_sys_recovery_set()\n mt7915_unregister_device() | mt7915_reset()\n mt7915_coredump_unregister() | queue_work()\n vfree(dev-\u003ecoredump.crash_data) | mt7915_mac_dump_work()\n | crash_data-\u003e // UAF\n\nFix this by ensuring dump_work is properly canceled before\nthe crash_data is deallocated. Add cancel_work_sync() in\nmt7915_unregister_device() to synchronize with any pending\nor executing dump work.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53098",
"url": "https://www.suse.com/security/cve/CVE-2026-53098"
},
{
"category": "external",
"summary": "SUSE Bug 1269976 for CVE-2026-53098",
"url": "https://bugzilla.suse.com/1269976"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53098"
},
{
"cve": "CVE-2026-53106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53106"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Do not allow deleting local storage in NMI\n\nCurrently, local storage may deadlock when deferring freeing selem or\nlocal storage through kfree_rcu(), call_rcu() or call_rcu_tasks_trace()\nin NMI or reentrant. Since deleting selem in NMI is an unlikely use\ncase, partially mitigate it by returning error when calling from\nbpf_xxx_storage_delete() helpers in NMI. Note that, it is still possible\nto deadlock through reentrant. A full mitigation requires returning\nerror when irqs_disabled() is true, which, however is too heavy-handed\nfor bpf_xxx_storage_delete().\n\nThe long-term solution requires _nolock versions of call_rcu. Another\npossible solution is to defer the free through irq_work [0], but it\nwould grow the size of selem, which is non-ideal.\n\nThe check is only needed in bpf_selem_unlink(), which is used by helpers\nand syscalls. bpf_selem_unlink_nofail() is fine as it is called during\nmap and owner tear down that never run in NMI or reentrant.\n\n[0] https://lore.kernel.org/bpf/20260205190233.912-1-alexei.starovoitov@gmail.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53106",
"url": "https://www.suse.com/security/cve/CVE-2026-53106"
},
{
"category": "external",
"summary": "SUSE Bug 1269990 for CVE-2026-53106",
"url": "https://bugzilla.suse.com/1269990"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53106"
},
{
"cve": "CVE-2026-53107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53107"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: libertas: don\u0027t kill URBs in interrupt context\n\nSerialization for the TX path was enforced by calling\nusb_kill_urb()/usb_kill_anchored_urbs(), to prevent transmission before\na previous URB was completed. usb_tx_block() can be called from\ninterrupt context (e.g. in the HCD giveback path), so we can\u0027t always\nuse it to kill in-flight URBs.\n\nPrevent sleeping during interrupt context by checking the tx_submitted\nanchor for existing URBs. We now return -EBUSY, to indicate there\u0027s\na pending request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53107",
"url": "https://www.suse.com/security/cve/CVE-2026-53107"
},
{
"category": "external",
"summary": "SUSE Bug 1269991 for CVE-2026-53107",
"url": "https://bugzilla.suse.com/1269991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53107"
},
{
"cve": "CVE-2026-53112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53112"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet\n\nThe irq_prepare_bcn_tasklet is initialized in rtl_pci_init() and\nscheduled when RTL_IMR_BCNINT interrupt is triggered by hardware.\nBut it is never killed in rtl_pci_deinit(). When the rtlwifi card\nprobe fails or is being detached, the ieee80211_hw is deallocated.\nHowever, irq_prepare_bcn_tasklet may still be running or pending,\nleading to use-after-free when the freed ieee80211_hw is accessed\nin _rtl_pci_prepare_bcn_tasklet().\n\nSimilar to irq_tasklet, add tasklet_kill() in rtl_pci_deinit() to\nensure that irq_prepare_bcn_tasklet is properly terminated before\nthe ieee80211_hw is released.\n\nThe issue was identified through static analysis.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53112",
"url": "https://www.suse.com/security/cve/CVE-2026-53112"
},
{
"category": "external",
"summary": "SUSE Bug 1269998 for CVE-2026-53112",
"url": "https://bugzilla.suse.com/1269998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53112"
},
{
"cve": "CVE-2026-53123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53123"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: wake raid456 reshape waiters before suspend\n\nDuring raid456 reshape, direct IO across the reshape position can sleep\nin raid5_make_request() waiting for reshape progress while still\nholding an active_io reference. If userspace then freezes reshape and\nwrites md/suspend_lo or md/suspend_hi, mddev_suspend() kills active_io\nand waits for all in-flight IO to drain.\n\nThis can deadlock: the IO needs reshape progress to continue, but the\nreshape thread is already frozen, so the active_io reference is never\ndropped and suspend never completes.\n\nraid5_prepare_suspend() already wakes wait_for_reshape for dm-raid. Do\nthe same for normal md suspend when reshape is already interrupted, so\nwaiting raid456 IO can abort, drop its reference, and let suspend\nfinish.\n\nThe mdadm test tests/25raid456-reshape-deadlock reproduces the hang.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53123",
"url": "https://www.suse.com/security/cve/CVE-2026-53123"
},
{
"category": "external",
"summary": "SUSE Bug 1269643 for CVE-2026-53123",
"url": "https://bugzilla.suse.com/1269643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53123"
},
{
"cve": "CVE-2026-53129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53129"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/mbcache: cancel shrink work before destroying the cache\n\nmb_cache_destroy() calls shrinker_free() and then frees all cache\nentries and the cache itself, but it does not cancel the pending\nc_shrink_work work item first.\n\nIf mb_cache_entry_create() schedules c_shrink_work via schedule_work()\nand the work item is still pending or running when mb_cache_destroy()\nruns, mb_cache_shrink_worker() will access the cache after its memory\nhas been freed, causing a use-after-free.\n\nThis is only reachable by a privileged user (root or CAP_SYS_ADMIN)\nwho can trigger the last put of a mounted ext2/ext4/ocfs2 filesystem.\n\nCancel the work item with cancel_work_sync() before calling\nshrinker_free(), ensuring the worker has finished and will not be\nrescheduled before the cache is torn down.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53129",
"url": "https://www.suse.com/security/cve/CVE-2026-53129"
},
{
"category": "external",
"summary": "SUSE Bug 1269633 for CVE-2026-53129",
"url": "https://bugzilla.suse.com/1269633"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53129"
},
{
"cve": "CVE-2026-53131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53131"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: require Ethernet MAC header before using eth_hdr()\n\n`ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`, `hash:ip,mac`, and\n`hash:mac` ipset types, and `nf_log_syslog` access `eth_hdr(skb)`\nafter either assuming that the skb is associated with an Ethernet\ndevice or checking only that the `ETH_HLEN` bytes at\n`skb_mac_header(skb)` lie between `skb-\u003ehead` and `skb-\u003edata`.\n\nMake these paths first verify that the skb is associated with an\nEthernet device, that the MAC header was set, and that it spans at\nleast a full Ethernet header before accessing `eth_hdr(skb)`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53131",
"url": "https://www.suse.com/security/cve/CVE-2026-53131"
},
{
"category": "external",
"summary": "SUSE Bug 1269773 for CVE-2026-53131",
"url": "https://bugzilla.suse.com/1269773"
},
{
"category": "external",
"summary": "SUSE Bug 1269775 for CVE-2026-53131",
"url": "https://bugzilla.suse.com/1269775"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53131"
},
{
"cve": "CVE-2026-53132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53132"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: fix potential unbounded skb queue\n\nvirtio_transport_inc_rx_pkt() checks vvs-\u003erx_bytes + len \u003e vvs-\u003ebuf_alloc.\n\nvirtio_transport_recv_enqueue() skips coalescing for packets\nwith VIRTIO_VSOCK_SEQ_EOM.\n\nIf fed with packets with len == 0 and VIRTIO_VSOCK_SEQ_EOM,\na very large number of packets can be queued\nbecause vvs-\u003erx_bytes stays at 0.\n\nFix this by estimating the skb metadata size:\n\n\t(Number of skbs in the queue) * SKB_TRUESIZE(0)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53132",
"url": "https://www.suse.com/security/cve/CVE-2026-53132"
},
{
"category": "external",
"summary": "SUSE Bug 1269290 for CVE-2026-53132",
"url": "https://bugzilla.suse.com/1269290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53132"
},
{
"cve": "CVE-2026-53134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53134"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_fib: fix stale stack leak via the OIFNAME register\n\nFor NFT_FIB_RESULT_OIFNAME the destination register is declared with\nlen = IFNAMSIZ (four 32-bit registers), but on the lookup-fail,\nRTN_LOCAL and oif-mismatch paths nft_fib{4,6}_eval() only writes one\nregister via \"*dest = 0\". The remaining three registers are left as\nwhatever was on the stack in nft_do_chain()\u0027s struct nft_regs, and a\ndownstream expression that loads the register span can leak that\nuninitialised kernel stack to userspace.\n\nThe NFTA_FIB_F_PRESENT existence check has the same shape: it is only\nmeaningful for NFT_FIB_RESULT_OIF, yet it was accepted for any result type\nwhile the eval stores a single byte via nft_reg_store8(), leaving the rest\nof the declared span stale.\n\nFix both:\n\n - replace the bare \"*dest = 0\" in the eval with nft_fib_store_result(),\n which strscpy_pad()s the whole IFNAMSIZ for OIFNAME (and is already\n used on the other early-return path), and\n\n - restrict NFTA_FIB_F_PRESENT to NFT_FIB_RESULT_OIF and declare its\n destination as a single u8, so the marked span matches the one byte\n the eval writes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53134",
"url": "https://www.suse.com/security/cve/CVE-2026-53134"
},
{
"category": "external",
"summary": "SUSE Bug 1269819 for CVE-2026-53134",
"url": "https://bugzilla.suse.com/1269819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-53134"
},
{
"cve": "CVE-2026-53135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53135"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs\n\n[Why \u0026 How]\ndp_sdp_message_debugfs_write() dereferences connector-\u003ebase.state-\u003ecrtc\nwithout checking for NULL. A connector can be connected but not bound to\nany CRTC (e.g. after hot-plug before the next atomic commit), causing a\nkernel crash when writing to the sdp_message debugfs node.\n\nThe function also ignores the user-provided size argument and always\npasses 36 bytes to copy_from_user(), reading past the user buffer when\nsize \u003c 36.\n\nFix both issues by:\n- Returning -ENODEV when connector-\u003ebase.state or state-\u003ecrtc is NULL\n- Clamping write_size to min(size, sizeof(data))\n\n(cherry picked from commit 6ab4c36a522842ff70474a1c0af2e40e50fc8300)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53135",
"url": "https://www.suse.com/security/cve/CVE-2026-53135"
},
{
"category": "external",
"summary": "SUSE Bug 1269817 for CVE-2026-53135",
"url": "https://bugzilla.suse.com/1269817"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53135"
},
{
"cve": "CVE-2026-53136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53136"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Clamp VBIOS HDMI retimer register count to array size\n\n[Why \u0026 How]\nThe VBIOS integrated info tables (v1_11 and v2_1) contain HdmiRegNum and\nHdmi6GRegNum fields that are used as loop bounds when copying retimer I2C\nregister settings into fixed-size arrays (dp*_ext_hdmi_reg_settings[9]\nand dp*_ext_hdmi_6g_reg_settings[3]). These u8 fields are not validated\nbefore use, so a malformed VBIOS can specify values up to 255, causing an\nout-of-bounds heap write during driver probe.\n\nClamp each register count to the destination array size using min_t()\nbefore the copy loops, in both get_integrated_info_v11() and\nget_integrated_info_v2_1().\n\n(cherry picked from commit 5a7f0ef90195940c54b0f5bb85b87da55f038c69)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53136",
"url": "https://www.suse.com/security/cve/CVE-2026-53136"
},
{
"category": "external",
"summary": "SUSE Bug 1269811 for CVE-2026-53136",
"url": "https://bugzilla.suse.com/1269811"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53136"
},
{
"cve": "CVE-2026-53137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53137"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size\n\n[Why \u0026 How]\nDuring HDCP 2.x repeater authentication over HDMI, the driver reads the\nsink\u0027s RxStatus register and extracts a 10-bit message size field (max\nvalue 1023). This value is used as the read length for the ReceiverID\nlist without being clamped to the size of the destination buffer\nrx_id_list[177]. A malicious HDMI repeater could advertise a message\nsize larger than the buffer, causing an out-of-bounds write during the\nI2C read.\n\nClamp the read length in mod_hdcp_read_rx_id_list() to the size of the\nrx_id_list buffer, matching the approach already used in the DP branch.\n\n(cherry picked from commit 229212219e4247d9486f8ba41ef087358490be09)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53137",
"url": "https://www.suse.com/security/cve/CVE-2026-53137"
},
{
"category": "external",
"summary": "SUSE Bug 1269796 for CVE-2026-53137",
"url": "https://bugzilla.suse.com/1269796"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53137"
},
{
"cve": "CVE-2026-53143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11\n\nThe v11 MQD manager incorrectly assigned the CP-compute variants of\ncheckpoint_mqd/restore_mqd for KFD_MQD_TYPE_SDMA queues. These functions\nuse sizeof(struct v11_compute_mqd) (2048 bytes) instead of sizeof(struct\nv11_sdma_mqd) (512 bytes), causing a 1536-byte overflow.\n\nDuring CRIU checkpoint of an SDMA queue on Navi3x:\n- checkpoint_mqd() reads 2048 bytes from a 512-byte SDMA MQD buffer,\n leaking 1536 bytes of adjacent GTT memory to userspace\n\nDuring CRIU restore:\n- restore_mqd() writes 2048 bytes into a 512-byte SDMA MQD buffer,\n corrupting 1536 bytes of adjacent GTT memory (often the ring buffer\n or neighboring MQDs)\n\nThis is a copy-paste regression unique to v11. All other ASIC backends\n(cik, vi, v9, v10, v12) correctly use the SDMA-specific variants.\n\nAdd checkpoint_mqd_sdma() and restore_mqd_sdma() functions that properly\nhandle the smaller v11_sdma_mqd structure, matching the pattern used in\nother MQD managers.\n\n(cherry picked from commit 6fa41db7ffdec97d62433adf03b7b9b759af8c2c)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53143",
"url": "https://www.suse.com/security/cve/CVE-2026-53143"
},
{
"category": "external",
"summary": "SUSE Bug 1269652 for CVE-2026-53143",
"url": "https://bugzilla.suse.com/1269652"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53143"
},
{
"cve": "CVE-2026-53144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53144"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: fix NULL dereference in get_queue_ids()\n\nWhen usr_queue_id_array is NULL and num_queues is non-zero,\nget_queue_ids() returns NULL. The callers check only IS_ERR() on the\nreturn value; since IS_ERR(NULL) == false the check passes, and\nsuspend_queues() calls q_array_invalidate() which immediately\ndereferences NULL while iterating num_queues times.\n\nUserspace can trigger this via kfd_ioctl_set_debug_trap() by supplying\nnum_queues \u003e 0 with a zero queue_array_ptr, causing a kernel panic.\n\nA NULL usr_queue_id_array with num_queues == 0 is a legitimate no-op\n(q_array_invalidate never executes, and resume_queues already guards\nall queue_ids dereferences behind a NULL check). Return ERR_PTR(-EINVAL)\nonly when num_queues is non-zero and the pointer is absent; both callers\nalready propagate IS_ERR() returns correctly to userspace.\n\n(cherry picked from commit f165a82cdf503884bb1797771c61b2fcc72113d4)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53144",
"url": "https://www.suse.com/security/cve/CVE-2026-53144"
},
{
"category": "external",
"summary": "SUSE Bug 1269245 for CVE-2026-53144",
"url": "https://bugzilla.suse.com/1269245"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53144"
},
{
"cve": "CVE-2026-53146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53146"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Limit XDomain response copy to actual frame size\n\ntb_xdomain_copy() copies req-\u003eresponse_size bytes from the received\npacket buffer regardless of the actual frame size. When a short\nresponse arrives, this reads past the valid frame data in the DMA\npool buffer into stale contents from previous transactions.\n\nUse the minimum of frame size and expected response size for the\ncopy length.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53146",
"url": "https://www.suse.com/security/cve/CVE-2026-53146"
},
{
"category": "external",
"summary": "SUSE Bug 1269826 for CVE-2026-53146",
"url": "https://bugzilla.suse.com/1269826"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53146"
},
{
"cve": "CVE-2026-53147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53147"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Validate XDomain request packet size before type cast\n\ntb_xdp_handle_request() casts the received packet buffer to\nprotocol-specific structs without verifying that the allocation\nis large enough for the target type. A peer can send a minimal\nXDomain packet that passes the generic header length check but is\nshorter than the struct accessed after the cast, causing out-of-\nbounds reads from the kmemdup allocation.\n\nPlumb the packet length through xdomain_request_work and validate\nit against the expected struct size before each cast.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53147",
"url": "https://www.suse.com/security/cve/CVE-2026-53147"
},
{
"category": "external",
"summary": "SUSE Bug 1269709 for CVE-2026-53147",
"url": "https://bugzilla.suse.com/1269709"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53147"
},
{
"cve": "CVE-2026-53148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53148"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Clamp XDomain response data copy to allocation size\n\ntb_xdp_properties_request() derives the per-packet copy length from\nthe response header without checking that it fits in the previously\nallocated data buffer. A malicious peer can set its length field\nlarger than the declared data_length, causing memcpy to write past\nthe kcalloc allocation.\n\nClamp the per-packet copy length so that the cumulative offset\nnever exceeds data_len.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53148",
"url": "https://www.suse.com/security/cve/CVE-2026-53148"
},
{
"category": "external",
"summary": "SUSE Bug 1269786 for CVE-2026-53148",
"url": "https://bugzilla.suse.com/1269786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53148"
},
{
"cve": "CVE-2026-53149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53149"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Bound root directory content to block size\n\n__tb_property_parse_dir() does not check that content_offset +\ncontent_len fits within block_len for the root directory case.\nWhen rootdir-\u003elength equals or exceeds block_len - 2, the entry\nloop reads past the allocated property block.\n\nAdd a bounds check after computing content_offset and content_len\nto reject directories whose content extends past the block.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53149",
"url": "https://www.suse.com/security/cve/CVE-2026-53149"
},
{
"category": "external",
"summary": "SUSE Bug 1269733 for CVE-2026-53149",
"url": "https://bugzilla.suse.com/1269733"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53149"
},
{
"cve": "CVE-2026-53150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53150"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Reject zero-length property entries in validator\n\ntb_property_entry_valid() accepts entries with length == 0 for\nDIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes\nvalidation but causes an underflow in the null-termination logic:\n\n property-\u003evalue.text[property-\u003elength * 4 - 1] = \u0027\\0\u0027;\n\nWhen property-\u003elength is 0 this writes to offset -1 relative to\nthe allocation.\n\nReject zero-length entries early in the validator since they have no\nvalid representation in the XDomain property protocol.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53150",
"url": "https://www.suse.com/security/cve/CVE-2026-53150"
},
{
"category": "external",
"summary": "SUSE Bug 1269386 for CVE-2026-53150",
"url": "https://bugzilla.suse.com/1269386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53150"
},
{
"cve": "CVE-2026-53158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53158"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: Fix NULL pointer dereference in rpmsg callback\n\nA NULL pointer dereference was observed on Hawi at boot when the DSP\nsends a glink message before fastrpc_rpmsg_probe() has completed\ninitialization:\n\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000178\n pc : _raw_spin_lock_irqsave+0x34/0x8c\n lr : fastrpc_rpmsg_callback+0x3c/0xcc [fastrpc]\n ...\n Call trace:\n _raw_spin_lock_irqsave+0x34/0x8c (P)\n fastrpc_rpmsg_callback+0x3c/0xcc [fastrpc]\n qcom_glink_native_rx+0x538/0x6a4\n qcom_glink_smem_intr+0x14/0x24 [qcom_glink_smem]\n\nThe faulting address 0x178 corresponds to the lock variable inside\nstruct fastrpc_channel_ctx, confirming that cctx is NULL when\nfastrpc_rpmsg_callback() attempts to take the spinlock.\n\nThere are two issues here. First, dev_set_drvdata() is called before\nspin_lock_init() and idr_init(), leaving a window where the callback\ncan retrieve a valid cctx pointer but operate on an uninitialized\nspinlock. Second, the rpmsg channel becomes live as soon as the driver\nis bound, so fastrpc_rpmsg_callback() can fire before dev_set_drvdata()\nis called at all, resulting in dev_get_drvdata() returning NULL.\n\nFix both issues by moving all cctx initialization ahead of\ndev_set_drvdata() so the structure is fully initialized before it\nbecomes visible to the callback, and add a NULL check in\nfastrpc_rpmsg_callback() as a guard against any remaining window.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53158",
"url": "https://www.suse.com/security/cve/CVE-2026-53158"
},
{
"category": "external",
"summary": "SUSE Bug 1269385 for CVE-2026-53158",
"url": "https://bugzilla.suse.com/1269385"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53158"
},
{
"cve": "CVE-2026-53159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53159"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: fix DMA address corruption due to find_vma misuse\n\nfastrpc_get_args() uses find_vma() to look up the VMA for a user-provided\npointer and compute a DMA address offset. When the address falls in a gap\nbefore the returned VMA, (ptr \u0026 PAGE_MASK) - vma-\u003evm_start underflows,\ncorrupting the DMA address sent to the DSP.\n\nReplace find_vma() with vma_lookup(), which returns NULL when the address\nis not contained within any VMA.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53159",
"url": "https://www.suse.com/security/cve/CVE-2026-53159"
},
{
"category": "external",
"summary": "SUSE Bug 1269654 for CVE-2026-53159",
"url": "https://bugzilla.suse.com/1269654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53159"
},
{
"cve": "CVE-2026-53160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53160"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: fix use-after-free race in fastrpc_map_create\n\nfastrpc_map_lookup returns a raw pointer after releasing fl-\u003elock. The\ncaller fastrpc_map_create then calls fastrpc_map_get (kref_get_unless_zero)\non this unprotected pointer. A concurrent MEM_UNMAP can free the map\nbetween the lock release and the kref operation, resulting in a\nuse-after-free on the freed slab object.\n\nRestore the take_ref parameter to fastrpc_map_lookup so the reference\nis acquired atomically under fl-\u003elock before the pointer is exposed to\nthe caller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53160",
"url": "https://www.suse.com/security/cve/CVE-2026-53160"
},
{
"category": "external",
"summary": "SUSE Bug 1269670 for CVE-2026-53160",
"url": "https://bugzilla.suse.com/1269670"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53160"
},
{
"cve": "CVE-2026-53161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53161"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: fix use-after-free of fastrpc_user in workqueue context\n\nThere is a race between fastrpc_device_release() and the workqueue\nthat processes DSP responses. When the user closes the file descriptor,\nfastrpc_device_release() frees the fastrpc_user structure. Concurrently,\nan in-flight DSP invocation can complete and fastrpc_rpmsg_callback()\nschedules context cleanup via schedule_work(\u0026ctx-\u003eput_work). If the\nworkqueue runs fastrpc_context_free() in parallel with or after\nfastrpc_device_release() has freed the user structure, it dereferences\nthe freed fastrpc_user. Depending on the state of the context at the\ntime of the race, any one of the following accesses can be hit:\n\n 1. fastrpc_buf_free() calls fastrpc_ipa_to_dma_addr(buf-\u003efl-\u003ecctx, ...)\n to strip the SID bits from the stored IOVA before passing the\n physical address to dma_free_coherent().\n\n 2. fastrpc_free_map() reads map-\u003efl-\u003ecctx-\u003evmperms[0].vmid to\n reconstruct the source permission bitmask needed for the\n qcom_scm_assign_mem() call that returns memory from the DSP VM\n back to HLOS.\n\n 3. fastrpc_free_map() acquires map-\u003efl-\u003elock to safely remove the\n map node from the fl-\u003emaps list.\n\nThe resulting use-after-free manifests as:\n\n pc : fastrpc_buf_free+0x38/0x80 [fastrpc]\n lr : fastrpc_context_free+0xa8/0x1b0 [fastrpc]\n fastrpc_context_free+0xa8/0x1b0 [fastrpc]\n fastrpc_context_put_wq+0x78/0xa0 [fastrpc]\n process_one_work+0x180/0x450\n worker_thread+0x26c/0x388\n\nAdd kref-based reference counting to fastrpc_user. Have each invoke\ncontext take a reference on the user at allocation time and release it\nwhen the context is freed. Release the initial reference in\nfastrpc_device_release() at file close. Move the teardown of the user\nstructure - freeing pending contexts, maps, mmaps, and the channel\ncontext reference - into the kref release callback fastrpc_user_free(),\nso that it runs only when the last reference is dropped, regardless of\nwhether that happens at device close or after the final in-flight\ncontext completes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53161",
"url": "https://www.suse.com/security/cve/CVE-2026-53161"
},
{
"category": "external",
"summary": "SUSE Bug 1269255 for CVE-2026-53161",
"url": "https://bugzilla.suse.com/1269255"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53161"
},
{
"cve": "CVE-2026-53175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53175"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninet: frags: fix use-after-free caused by the fqdir_pre_exit() flush\n\nOn netns teardown, fqdir_pre_exit() walks the fqdir rhashtable and\nflushes every fragment queue that is not yet complete using\ninet_frag_queue_flush(). That helper frees all the skbs queued on the\nfragment queue but does not set INET_FRAG_COMPLETE, and leaves\nq-\u003efragments_tail and q-\u003elast_run_head pointing at the freed skbs.\nThe queue itself stays in the rhashtable.\n\nfqdir_pre_exit() first lowers high_thresh to 0 to stop new queue lookups,\nbut it cannot stop a fragment that already obtained the queue through\ninet_frag_find() earlier and stalled just before taking the queue lock.\nOnce that fragment resumes after the flush and takes the queue lock,\nit passes the INET_FRAG_COMPLETE check and then dereferences the freed\nfragments_tail. inet_frag_queue_insert() reads FRAG_CB() and -\u003elen of\nthat pointer and, on the append path, writes -\u003enext_frag, causing a\nslab use-after-free. IPv6, nf_conntrack_reasm6 and 6lowpan reassembly\nshare the same flush path and are affected as well.\n\nReset rb_fragments, fragments_tail and last_run_head in\ninet_frag_queue_flush() so a flushed queue no longer points at the\nfreed skbs. A fragment that resumes after the flush and takes the\nqueue lock then finds an empty queue and starts a new run instead of\ndereferencing the freed fragments_tail. ip_frag_reinit() already\nperformed this reset after its own flush, so drop the now duplicate\ncode there.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53175",
"url": "https://www.suse.com/security/cve/CVE-2026-53175"
},
{
"category": "external",
"summary": "SUSE Bug 1269714 for CVE-2026-53175",
"url": "https://bugzilla.suse.com/1269714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53175"
},
{
"cve": "CVE-2026-53177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53177"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix NULL pointer dereference\n\nPCIe errors detected by a Root Port or Downstream Port cause error\nrecovery services to run on all subordinate devices regardless of\nadministrative state.\n\nThe .error_detected() callback, bnxt_io_error_detected(), disables\nand synchronizes IRQs via bnxt_disable_int_sync(), which calls\nbnxt_cp_num_to_irq_num() to map completion rings to IRQs using\nbp-\u003ebnapi.\n\nSince bp-\u003ebnapi is allocated on NIC open and freed on NIC close, PCIe\nerror recovery on a closed NIC can dereference a NULL pointer.\n\nCheck if bp-\u003ebnapi is NULL before disabling and synchronizing IRQs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53177",
"url": "https://www.suse.com/security/cve/CVE-2026-53177"
},
{
"category": "external",
"summary": "SUSE Bug 1269383 for CVE-2026-53177",
"url": "https://bugzilla.suse.com/1269383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53177"
},
{
"cve": "CVE-2026-53183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53183"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: allow subflow rcv wnd to shrink\n\nIn MPTCP connection, the `window` field in the TCP header refers to the\nMPTCP-level rcv_nxt and it\u0027s right edge should not move backward. Such\nconstraint is enforced at DSS option generation time.\n\nAt the same time, the TCP stack ensures independently that the TCP-level\nrcv wnd right\u0027s edge does not move backward. That in turn causes artificial\ninflating of the MPTCP rcv window when the incoming data is acked at the\nTCP level and is OoO in the MPTCP sequence space (or lands in the backlog).\n\nAs a consequence, the incoming traffic can exceed the receiver rcvbuf size\neven when the sender is not misbehaving.\n\nPrevent such scenario forcibly allowing the TCP subflow to shrink the\nTCP-level rcv wnd regardless of the current netns setting.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53183",
"url": "https://www.suse.com/security/cve/CVE-2026-53183"
},
{
"category": "external",
"summary": "SUSE Bug 1269376 for CVE-2026-53183",
"url": "https://bugzilla.suse.com/1269376"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53183"
},
{
"cve": "CVE-2026-53184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53184"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudp: clear skb-\u003edev before running a sockmap verdict\n\nOn the UDP receive path skb-\u003edev is repurposed as dev_scratch (the\ntruesize/state cache set by udp_set_dev_scratch()), through the\nunion { struct net_device *dev; unsigned long dev_scratch; } in sk_buff.\n\nWhen a UDP socket is in a sockmap, sk_data_ready is\nsk_psock_verdict_data_ready(), which calls udp_read_skb() -\u003e recv_actor()\n(sk_psock_verdict_recv) to run the attached SK_SKB verdict program in softirq.\nIf that program calls a socket-lookup helper (bpf_sk_lookup_tcp/udp,\nbpf_skc_lookup_tcp), bpf_skc_lookup() does:\n\n\tif (skb-\u003edev)\n\t\tcaller_net = dev_net(skb-\u003edev);\n\nskb-\u003edev still holds the dev_scratch value (a non-NULL integer), so dev_net()\ndereferences it as a struct net_device * and the kernel takes a general\nprotection fault on a non-canonical address in softirq:\n\n Oops: general protection fault, probably for non-canonical address 0x1010000800004a0\n CPU: 1 UID: 0 PID: 1406 Comm: syz.2.19 Not tainted 7.1.0-rc6 #1 PREEMPT(full)\n RIP: 0010:bpf_skc_lookup net/core/filter.c:7033 [inline]\n RIP: 0010:bpf_sk_lookup+0x45/0x160 net/core/filter.c:7047\n Call Trace:\n \u003cIRQ\u003e\n bpf_prog_4675cb904b7071f8+0x12e/0x14e\n bpf_prog_run_pin_on_cpu+0xc6/0x1f0\n sk_psock_verdict_recv+0x1ba/0x350\n udp_read_skb+0x31a/0x370\n sk_psock_verdict_data_ready+0x2e3/0x600\n __udp_enqueue_schedule_skb+0x4c8/0x650\n udpv6_queue_rcv_one_skb+0x3ec/0x740\n udp6_unicast_rcv_skb+0x11d/0x140\n ip6_protocol_deliver_rcu+0x61e/0x950\n ip6_input_finish+0xa9/0x150\n NF_HOOK+0x286/0x2f0\n ip6_input+0x117/0x220\n NF_HOOK+0x286/0x2f0\n __netif_receive_skb+0x85/0x200\n process_backlog+0x374/0x9a0\n __napi_poll+0x4f/0x1c0\n net_rx_action+0x3b0/0x770\n handle_softirqs+0x15a/0x460\n do_softirq+0x57/0x80\n \u003c/IRQ\u003e\n\nThe rmem charge that dev_scratch accounted for is released by skb_recv_udp() on\ndequeue, just above, so the scratch is dead by the time recv_actor() runs. Clear\nskb-\u003edev so bpf_skc_lookup() falls back to sock_net(skb-\u003esk), which\nskb_set_owner_sk_safe() set just above.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53184",
"url": "https://www.suse.com/security/cve/CVE-2026-53184"
},
{
"category": "external",
"summary": "SUSE Bug 1269689 for CVE-2026-53184",
"url": "https://bugzilla.suse.com/1269689"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53184"
},
{
"cve": "CVE-2026-53185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53185"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nzram: fix use-after-free in zram_bvec_write_partial()\n\nzram_read_page() picks the sync or async backing device read path based on\nwhether the parent bio is NULL. zram_bvec_write_partial() passes its\nparent bio down, so for ZRAM_WB slots the read is dispatched\nasynchronously and zram_read_page() returns 0 while the bio is still in\nflight. The caller then runs memcpy_from_bvec(), zram_write_page() and\n__free_page() on the buffer, leaving the async read to write into a freed\npage.\n\nzram_bvec_read_partial() was switched to NULL in commit 4e3c87b9421d\n(\"zram: fix synchronous reads\") for the same reason; the write_partial\ncounterpart was missed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53185",
"url": "https://www.suse.com/security/cve/CVE-2026-53185"
},
{
"category": "external",
"summary": "SUSE Bug 1269660 for CVE-2026-53185",
"url": "https://bugzilla.suse.com/1269660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53185"
},
{
"cve": "CVE-2026-53186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53186"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/srp: bound SRP_RSP sense copy by the received length\n\nsrp_process_rsp() copies sense data from rsp-\u003edata + resp_data_len,\nwhere resp_data_len is the full 32-bit value supplied by the SRP target\nand is never checked against the number of bytes actually received\n(wc-\u003ebyte_len). The copy length is bounded to SCSI_SENSE_BUFFERSIZE, so\nat most 96 bytes are copied, but the source offset is not bounded.\n\nA malicious or compromised SRP target on the InfiniBand/RoCE fabric that\nthe initiator has logged into can return an SRP_RSP with\nSRP_RSP_FLAG_SNSVALID set and a large resp_data_len. The receive buffer\nis allocated at the target-chosen max_ti_iu_len, so the source of the\nsense copy lands past the bytes actually received; with resp_data_len\nnear 0xFFFFFFFF it is gigabytes past the buffer and the read faults.\n\nCopy the sense data only if it has not been truncated, that is, only if\nthe response header, the response data, and the sense region fit within\nthe bytes actually received; otherwise drop the sense and log. The\nin-tree iSER and NVMe-RDMA receive paths already bound their parse by\nwc-\u003ebyte_len; this brings ib_srp into line with them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53186",
"url": "https://www.suse.com/security/cve/CVE-2026-53186"
},
{
"category": "external",
"summary": "SUSE Bug 1269663 for CVE-2026-53186",
"url": "https://bugzilla.suse.com/1269663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53186"
},
{
"cve": "CVE-2026-53189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53189"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: update file PMD counter before folio_put()\n\n__split_huge_pmd_locked() updates the file/shmem RSS counter after\ndropping the PMD mapping\u0027s folio reference. If folio_put() drops the last\nreference, mm_counter_file() can later read freed folio state via\nfolio_test_swapbacked().\n\nMove the counter update before folio_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53189",
"url": "https://www.suse.com/security/cve/CVE-2026-53189"
},
{
"category": "external",
"summary": "SUSE Bug 1269797 for CVE-2026-53189",
"url": "https://bugzilla.suse.com/1269797"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53189"
},
{
"cve": "CVE-2026-53190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53190"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()\n\ndma_fence_unwrap_for_each() internally calls dma_fence_unwrap_first()\nwhich does cursor-\u003echain = dma_fence_get(head), taking an extra\nreference. On normal loop completion, dma_fence_unwrap_next()\nreleases this via dma_fence_chain_walk() -\u003e dma_fence_put().\n\nWhen virtio_gpu_do_fence_wait() fails and the function returns early\nfrom inside the loop, the cursor-\u003echain reference is never released.\nThis is the only caller in the entire kernel that does an early return\ninside dma_fence_unwrap_for_each.\n\nAdd dma_fence_put(itr.chain) before the early return.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53190",
"url": "https://www.suse.com/security/cve/CVE-2026-53190"
},
{
"category": "external",
"summary": "SUSE Bug 1269772 for CVE-2026-53190",
"url": "https://bugzilla.suse.com/1269772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53190"
},
{
"cve": "CVE-2026-53192",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53192"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: timer: Fix UAF at snd_timer_user_params()\n\nAt releasing a timer object, e.g. when a userspace timer\n(CONFIG_SND_UTIMER) gets closed and snd_timer_free() is called, it\ntries to detach the timer instances and release the resources.\nHowever, it\u0027s still possible that other in-flight tasks are holding\nthe timer instance where the to-be-deleted timer object is associated,\nand this may lead to racy accesses.\n\nFortunately, most of ioctls dealing with the timer instance list\nalready have the protection with register_mutex, and this also avoids\nsuch races. But, SNDRV_TIMER_IOCTL_PARAMS isn\u0027t protected, hence the\nconcurrent ioctl may lead to use-after-free.\n\nThis patch just adds the guard with register_mutex to protect\nsnd_timer_user_params() for covering the code path as a quick\nworkaround. It\u0027s no hot-path but rather a rarely issued ioctl, so the\nperformance penalty doesn\u0027t matter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53192",
"url": "https://www.suse.com/security/cve/CVE-2026-53192"
},
{
"category": "external",
"summary": "SUSE Bug 1269669 for CVE-2026-53192",
"url": "https://bugzilla.suse.com/1269669"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53192"
},
{
"cve": "CVE-2026-53194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53194"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: kl5kusb105: fix bulk-out buffer overflow\n\nklsi_105_prepare_write_buffer() is called by the generic write path\nwith the bulk-out buffer and its size (bulk_out_size, 64 bytes). It\nstores a two-byte length header at the start of the buffer and copies\nthe payload from the write fifo starting at buf + KLSI_HDR_LEN, but\npasses the full buffer size as the number of bytes to copy:\n\n count = kfifo_out_locked(\u0026port-\u003ewrite_fifo, buf + KLSI_HDR_LEN,\n size, \u0026port-\u003elock);\n\nWhen the fifo holds at least size bytes, size bytes are copied starting\ntwo bytes into the size-byte buffer, writing KLSI_HDR_LEN bytes past its\nend. Copy at most size - KLSI_HDR_LEN bytes instead, leaving room for\nthe header as safe_serial already does.\n\nWriting bulk_out_size or more bytes to the tty triggers a slab\nout-of-bounds write, observed with KASAN by emulating the device with\ndummy_hcd and raw-gadget:\n\n BUG: KASAN: slab-out-of-bounds in kfifo_copy_out+0x83/0xc0\n Write of size 64 at addr ffff888112c62202 by task python3\n kfifo_copy_out\n klsi_105_prepare_write_buffer [kl5kusb105]\n usb_serial_generic_write_start [usbserial]\n Allocated by task 139:\n usb_serial_probe [usbserial]\n The buggy address is located 2 bytes inside of allocated 64-byte region\n\nThe out-of-bounds write no longer occurs with this change applied.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53194",
"url": "https://www.suse.com/security/cve/CVE-2026-53194"
},
{
"category": "external",
"summary": "SUSE Bug 1269904 for CVE-2026-53194",
"url": "https://bugzilla.suse.com/1269904"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53194"
},
{
"cve": "CVE-2026-53195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53195"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()\n\nbuild_i2c_fw_hdr() allocates a fixed-size buffer of\n(16*1024 - 512) + sizeof(struct ti_i2c_firmware_rec) bytes, then\ncopies le16_to_cpu(img_header-\u003eLength) bytes into it without\nvalidating that Length fits within the available space after the\nfirmware record header.\n\nimg_header-\u003eLength is a __le16 from the firmware file and can be\nup to 65535. check_fw_sanity() validates the total firmware size\nbut not img_header-\u003eLength specifically.\n\nFix by rejecting images where img_header-\u003eLength exceeds the\navailable destination space.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53195",
"url": "https://www.suse.com/security/cve/CVE-2026-53195"
},
{
"category": "external",
"summary": "SUSE Bug 1269984 for CVE-2026-53195",
"url": "https://bugzilla.suse.com/1269984"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53195"
},
{
"cve": "CVE-2026-53208",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53208"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig\n\nnet/bluetooth/l2cap_core.c:l2cap_sig_channel() accepts BR/EDR\nsignaling packets up to the channel MTU and dispatches each command\nwithout enforcing the signaling MTU (MTUsig). A Bluetooth BR/EDR peer\nwithin radio range can send a fixed-channel CID 0x0001 packet that is\nlarger than MTUsig and contains many L2CAP_ECHO_REQ commands before\npairing. In a real-radio stock-kernel run, one 681-byte signaling\npacket containing 168 zero-length ECHO_REQ commands made the target\ntransmit 168 ECHO_RSP frames over about 220 ms.\n\nImpact: a Bluetooth BR/EDR peer within radio range, before pairing, can\nforce 168 ECHO_RSP frames from one 681-byte fixed-channel signaling\npacket containing packed ECHO_REQ commands.\n\nDefine Linux\u0027s BR/EDR signaling MTU as the spec minimum of 48 bytes and\nreject any larger signaling packet with one L2CAP_COMMAND_REJECT_RSP\ncarrying L2CAP_REJ_MTU_EXCEEDED before any command is dispatched.\n\nThe Bluetooth Core spec wording for MTUExceeded says the reject\nidentifier shall match the first request command in the packet, and\nthat packets containing only responses shall be silently discarded.\nLinux intentionally deviates from that prescription: silently\ndiscarding desynchronizes the peer because the remote stack never\nlearns its responses were dropped, and locating the first request\ncommand requires walking command headers past MTUsig, i.e. processing\nbytes from a packet we have already decided is too large to process.\nWe therefore always emit one reject and use the identifier from the\nfirst command header, a single fixed-offset byte read.\n\nThe unrestricted BR/EDR signaling parser and ECHO_REQ response path both\ntrace to the initial git import; no later introducing commit is\navailable for a Fixes tag.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53208",
"url": "https://www.suse.com/security/cve/CVE-2026-53208"
},
{
"category": "external",
"summary": "SUSE Bug 1269899 for CVE-2026-53208",
"url": "https://bugzilla.suse.com/1269899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53208"
},
{
"cve": "CVE-2026-53209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53209"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: reject oversized Broadcast Announcement prepend\n\nExisting advertising instances can already hold the maximum extended\nadvertising payload. When hci_adv_bcast_annoucement() prepends the\nBroadcast Announcement service data to that payload, the combined data\nmay no longer fit in the temporary buffer used to rebuild the\nadvertising data.\n\nReject that case before copying the existing payload and report the\nfailure through the device log. This keeps the existing advertising\ndata intact and avoids overrunning the temporary buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53209",
"url": "https://www.suse.com/security/cve/CVE-2026-53209"
},
{
"category": "external",
"summary": "SUSE Bug 1269304 for CVE-2026-53209",
"url": "https://bugzilla.suse.com/1269304"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53209"
},
{
"cve": "CVE-2026-53212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53212"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_tunnel: fix use-after-free on object destroy\n\nnft_tunnel_obj_destroy() calls metadata_dst_free() which directly\nkfree()s the metadata_dst, ignoring the dst_entry refcount. Packets\nthat took a reference via dst_hold() in nft_tunnel_obj_eval() and\nare still queued (e.g. in a netem qdisc) are left with a dangling\npointer. When these packets are eventually dequeued, dst_release()\noperates on freed memory.\n\nReplace metadata_dst_free() with dst_release() so the metadata_dst\nis freed only after all references are dropped. The dst subsystem\nalready handles metadata_dst cleanup in dst_destroy() when\nDST_METADATA is set.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53212",
"url": "https://www.suse.com/security/cve/CVE-2026-53212"
},
{
"category": "external",
"summary": "SUSE Bug 1269672 for CVE-2026-53212",
"url": "https://bugzilla.suse.com/1269672"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53212"
},
{
"cve": "CVE-2026-53213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53213"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: fix krealloc() memory leak\n\nDon\u0027t just overwrite the original pointer passed to krealloc()\nwith its return value without checking latter:\n\n MEM = krealloc(MEM, SZ, GFP);\n\nIf krealloc() returns NULL, that erases the pointer\nto the still allocated memory, hence leaks this memory.\nInstead, use a temporary variable, check it\u0027s not NULL\nand only then assign it to the original pointer:\n\n TMP = krealloc(MEM, SZ, GFP);\n if (!TMP) return;\n MEM = TMP;\n\nWhile on it, use krealloc_array().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53213",
"url": "https://www.suse.com/security/cve/CVE-2026-53213"
},
{
"category": "external",
"summary": "SUSE Bug 1269283 for CVE-2026-53213",
"url": "https://bugzilla.suse.com/1269283"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53213"
},
{
"cve": "CVE-2026-53218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53218"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_exthdr: fix register tracking for F_PRESENT flag\n\nnft_exthdr_init() passes user-controlled priv-\u003elen to\nnft_parse_register_store(), which marks that many bytes in the\nregister bitmap as initialized. However, when NFT_EXTHDR_F_PRESENT\nis set, the eval paths write only 1 byte (nft_reg_store8) or\n4 bytes (*dest = 0 on TCP/DCCP error path). When len \u003e 4,\nregisters beyond the first are never written, retaining\nuninitialized stack data from nft_regs.\n\nBail out if userspace requests too much data when F_PRESENT is set.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53218",
"url": "https://www.suse.com/security/cve/CVE-2026-53218"
},
{
"category": "external",
"summary": "SUSE Bug 1269273 for CVE-2026-53218",
"url": "https://bugzilla.suse.com/1269273"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53218"
},
{
"cve": "CVE-2026-53221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53221"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()\n\nIn vti6_tnl_lookup(), when an exact match for a tunnel fails,\nthe code falls back to searching for wildcard tunnels:\n\n- Tunnels matching the packet\u0027s local address, with any remote address\n wildcard remote).\n\n- Tunnels matching the packet\u0027s remote address, with any local address\n (wildcard local).\n\nHowever, vti6 stores all these different types of tunnels in the same\nhash table (ip6n-\u003etnls_r_l) prone to hash collisions.\n\nThe bug is that the fallback search loops in vti6_tnl_lookup() were\nmissing checks to ensure that the candidate tunnel actually has\na wildcard address.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53221",
"url": "https://www.suse.com/security/cve/CVE-2026-53221"
},
{
"category": "external",
"summary": "SUSE Bug 1269318 for CVE-2026-53221",
"url": "https://bugzilla.suse.com/1269318"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53221"
},
{
"cve": "CVE-2026-53224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53224"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate embedded INIT chunk and address list lengths in cookie\n\nsctp_unpack_cookie() only checked that the embedded INIT chunk length\ndid not exceed the remaining cookie payload, but did not ensure that the\nINIT chunk is large enough to contain a complete INIT header.\n\nA malformed COOKIE_ECHO can therefore carry a truncated INIT chunk whose\nlength field is smaller than sizeof(struct sctp_init_chunk). Later,\nsctp_process_init() accesses INIT parameters unconditionally, which may\nlead to out-of-bounds reads.\n\nIn addition, raw_addr_list_len is not fully validated against the\nremaining cookie payload. When cookie authentication is disabled, an\nattacker can supply an oversized raw_addr_list_len and cause\nsctp_raw_to_bind_addrs() to read beyond the end of the cookie. The\naddress parser also lacks sufficient bounds checks for parameter headers\nand lengths, allowing malformed address parameters to trigger\nout-of-bounds reads.\n\nFix this by:\n\n- requiring the embedded INIT chunk length to be at least sizeof(struct\n sctp_init_chunk);\n- validating that the INIT chunk and raw address list together fit\n within the cookie payload;\n- verifying sufficient data exists for each address parameter header and\n payload before parsing it.\n\nNote that sctp_verify_init() must be called after sctp_unpack_cookie()\nand before sctp_process_init() when cookie authentication is disabled.\nThis will be addressed in a separate patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53224",
"url": "https://www.suse.com/security/cve/CVE-2026-53224"
},
{
"category": "external",
"summary": "SUSE Bug 1269997 for CVE-2026-53224",
"url": "https://bugzilla.suse.com/1269997"
},
{
"category": "external",
"summary": "SUSE Bug 1270023 for CVE-2026-53224",
"url": "https://bugzilla.suse.com/1270023"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53224"
},
{
"cve": "CVE-2026-53225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53225"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix uninit-value in __sctp_rcv_asconf_lookup()\n\n__sctp_rcv_asconf_lookup() in net/sctp/input.c only checks that the ASCONF\nchunk can hold the ADDIP header and a parameter header, then calls\naf-\u003efrom_addr_param(), which reads the full address (16 bytes for IPv6)\ntrusting the parameter\u0027s declared length.\n\nAn unauthenticated peer can send a truncated trailing ASCONF chunk that\ndeclares an IPv6 address parameter but stops after the 4-byte parameter\nheader; reached from the no-association lookup path, from_addr_param() then\nreads uninitialized bytes past the parameter.\n\nImpact: an unauthenticated SCTP peer makes the receive path read up to 16\nbytes of uninitialized memory past a truncated ASCONF address parameter.\n\nThe sibling __sctp_rcv_init_lookup() bounds parameters with\nsctp_walk_params(); this path open-codes the fetch and omits the bound.\nVerify the whole address parameter lies within the chunk before\nfrom_addr_param() reads it, the same class of fix as commit 51e5ad549c43\n(\"net: sctp: fix KMSAN uninit-value in sctp_inq_pop\").",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53225",
"url": "https://www.suse.com/security/cve/CVE-2026-53225"
},
{
"category": "external",
"summary": "SUSE Bug 1269711 for CVE-2026-53225",
"url": "https://bugzilla.suse.com/1269711"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53225"
},
{
"cve": "CVE-2026-53227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53227"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: fix possible kfree_skb of ERR_PTR\n\nAfter the patch in the \"Fixes\" tag, the allocation of the \"reply\" skb\ncan happen either before or after locking the ovs_mutex.\n\nHowever, error cleanups still follow the classical reversed order,\nassuming \"reply\" is allocated before locking: it is freed after unlocking.\n\nIf \"reply\" allocation happens after locking the mutex and it fails,\n\"reply\" is left with an ERR_PTR, and execution jumps to the correspondent\ncleanup stage which will try to free an invalid pointer.\n\nFix this by setting the pointer to NULL after having saved its error\nvalue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53227",
"url": "https://www.suse.com/security/cve/CVE-2026-53227"
},
{
"category": "external",
"summary": "SUSE Bug 1269877 for CVE-2026-53227",
"url": "https://bugzilla.suse.com/1269877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53227"
},
{
"cve": "CVE-2026-53230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53230"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list\n\nmlx5_query_nic_vport_mac_list() sizes its firmware command buffer using\nthe PF\u0027s log_max_current_uc/mc_list capabilities. When querying a VF\nvport with a larger configured max (via devlink), the firmware response\ncan overflow this buffer:\n\n BUG: KASAN: slab-out-of-bounds in mlx5_query_nic_vport_mac_list+0x453/0x4c0 [mlx5_core]\n Read of size 4 at addr ff1100013ffc8a12 by task kworker/u96:2/385\n\n CPU: 12 UID: 0 PID: 385 Comm: kworker/u96:2 Not tainted 7.0.0-rc6+ #1 PREEMPT\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009)\n Workqueue: mlx5_esw_wq esw_vport_change_handler [mlx5_core]\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x69/0xa0\n print_report+0x176/0x4e4\n kasan_report+0xc8/0x100\n mlx5_query_nic_vport_mac_list+0x453/0x4c0 [mlx5_core]\n esw_update_vport_addr_list+0x2e3/0xda0 [mlx5_core]\n esw_vport_change_handle_locked+0xa1f/0x1060 [mlx5_core]\n esw_vport_change_handler+0x6a/0x90 [mlx5_core]\n process_one_work+0x87f/0x15e0\n worker_thread+0x62b/0x1020\n kthread+0x375/0x490\n ret_from_fork+0x4dc/0x810\n ret_from_fork_asm+0x11/0x20\n \u003c/TASK\u003e\n\nFix by querying the vport\u0027s own HCA caps to size the buffer correctly.\nRefactor the function to allocate and return the MAC list internally,\nremoving the caller\u0027s dependency on knowing the correct max.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53230",
"url": "https://www.suse.com/security/cve/CVE-2026-53230"
},
{
"category": "external",
"summary": "SUSE Bug 1269270 for CVE-2026-53230",
"url": "https://bugzilla.suse.com/1269270"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53230"
},
{
"cve": "CVE-2026-53236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53236"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: restrict SO_ATTACH_FILTER to priv users\n\nThis patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets\nto users with CAP_NET_ADMIN capability.\n\nThis blocks potential side-channel attack where an unprivileged application\nattaches a filter to leak TCP sequence/acknowledgment numbers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53236",
"url": "https://www.suse.com/security/cve/CVE-2026-53236"
},
{
"category": "external",
"summary": "SUSE Bug 1269994 for CVE-2026-53236",
"url": "https://bugzilla.suse.com/1269994"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53236"
},
{
"cve": "CVE-2026-53237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53237"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: mvebu: fix NULL pointer dereference in suspend/resume\n\nmvebu_pwm_suspend() and mvebu_pwm_resume() are called for all GPIO\nbanks during suspend/resume, but not all banks have PWM functionality.\nGPIO banks without PWM have mvchip-\u003emvpwm set to NULL.\n\nCalling mvebu_pwm_suspend() with mvpwm == NULL causes a NULL pointer\ndereference when it tries to access mvpwm-\u003eblink_select.\n\n Unable to handle kernel NULL pointer dereference at virtual address 00000020 when write\n [00000020] *pgd=00000000\n Internal error: Oops: 815 [#1] PREEMPT ARM\n Modules linked in:\n CPU: 0 UID: 0 PID: 406 Comm: sh Not tainted 6.12.74-rt12-yocto-standard-g4e96f98fb7db-dirty #353\n Hardware name: Marvell Armada 370/XP (Device Tree)\n PC is at regmap_mmio_read+0x38/0x54\n LR is at regmap_mmio_read+0x38/0x54\n pc : [\u003cc05fd2ac\u003e] lr : [\u003cc05fd2ac\u003e] psr: 200f0013\n sp : f0c11d10 ip : 00000000 fp : c100d2f0\n r10: c14fb854 r9 : 00000000 r8 : 00000000\n r7 : c1799c00 r6 : 00000020 r5 : 00000020 r4 : c179c7c0\n r3 : f0a231a0 r2 : 00000020 r1 : 00000020 r0 : 00000000\n Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none\n Control: 10c5387d Table: 135ec059 DAC: 00000051\n Call trace:\n regmap_mmio_read from _regmap_bus_reg_read+0x78/0xac\n _regmap_bus_reg_read from _regmap_read+0x60/0x154\n _regmap_read from regmap_read+0x3c/0x60\n regmap_read from mvebu_gpio_suspend+0xa4/0x14c\n mvebu_gpio_suspend from dpm_run_callback+0x54/0x180\n dpm_run_callback from device_suspend+0x124/0x630\n device_suspend from dpm_suspend+0x124/0x270\n dpm_suspend from dpm_suspend_start+0x64/0x6c\n dpm_suspend_start from suspend_devices_and_enter+0x140/0x8e8\n suspend_devices_and_enter from pm_suspend+0x2fc/0x308\n pm_suspend from state_store+0x6c/0xc8\n state_store from kernfs_fop_write_iter+0x10c/0x1f8\n kernfs_fop_write_iter from vfs_write+0x270/0x468\n vfs_write from ksys_write+0x70/0xf0\n ksys_write from ret_fast_syscall+0x0/0x54\n\nAdd a NULL check for mvchip-\u003emvpwm before calling the PWM\nsuspend/resume functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53237",
"url": "https://www.suse.com/security/cve/CVE-2026-53237"
},
{
"category": "external",
"summary": "SUSE Bug 1269131 for CVE-2026-53237",
"url": "https://bugzilla.suse.com/1269131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53237"
},
{
"cve": "CVE-2026-53239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53239"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()\n\nFix the race by pruning the bin while still holding xfrm_policy_lock,\nbefore dropping it. Use __xfrm_policy_inexact_prune_bin() directly since\nthe lock is already held. The wrapper xfrm_policy_inexact_prune_bin()\nbecomes unused and is removed.\n\nRace:\n\n CPU0 (XFRM_MSG_DELPOLICY) CPU1 (XFRM_MSG_NEWSPDINFO)\n ========================== ==========================\n xfrm_policy_bysel_ctx():\n spin_lock_bh(xfrm_policy_lock)\n bin = xfrm_policy_inexact_lookup()\n __xfrm_policy_unlink(pol)\n spin_unlock_bh(xfrm_policy_lock)\n xfrm_policy_kill(ret)\n // wide window, lock not held\n xfrm_hash_rebuild():\n spin_lock_bh(xfrm_policy_lock)\n __xfrm_policy_inexact_flush():\n kfree_rcu(bin) // bin freed\n spin_unlock_bh(xfrm_policy_lock)\n xfrm_policy_inexact_prune_bin(bin)\n // UAF: bin is freed",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53239",
"url": "https://www.suse.com/security/cve/CVE-2026-53239"
},
{
"category": "external",
"summary": "SUSE Bug 1269677 for CVE-2026-53239",
"url": "https://bugzilla.suse.com/1269677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53239"
},
{
"cve": "CVE-2026-53242",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53242"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams\n\nsnd_pcm_drain() uses init_waitqueue_entry which does not clear\nentry.prev/next, and add_wait_queue with a conditional\nremove_wait_queue that is skipped when to_check is no longer\nin the group after concurrent UNLINK. The orphaned wait entry\nremains on the unlinked substream sleep queue. On the next\ndrain iteration, add_wait_queue adds the entry to a new queue\nwhile still linked on the old one, corrupting both lists. A\nsubsequent wake_up dereferences NULL at the func pointer\n(mapped from the spinlock at offset 0 of the misinterpreted\nwait_queue_head_t), causing a kernel panic.\n\nReplace init_waitqueue_entry/add_wait_queue/conditional\nremove_wait_queue with init_wait_entry/prepare_to_wait/\nfinish_wait. init_wait_entry clears prev/next via\nINIT_LIST_HEAD on each iteration and sets\nautoremove_wake_function which auto-removes the entry on\nwake-up. finish_wait safely handles both the already-removed\nand still-queued cases.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53242",
"url": "https://www.suse.com/security/cve/CVE-2026-53242"
},
{
"category": "external",
"summary": "SUSE Bug 1269236 for CVE-2026-53242",
"url": "https://bugzilla.suse.com/1269236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53242"
},
{
"cve": "CVE-2026-53246",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53246"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing\n\nWhen a listening SCTP server processes a COOKIE_ECHO chunk, the cached\npeer INIT chunk embedded after the cookie is parsed and its parameters\nare later walked by sctp_process_init() using sctp_walk_params().\n\nHowever, the chunk header length of this cached INIT chunk was not\nvalidated against the remaining buffer in the COOKIE_ECHO payload. If\nthe length field is inflated, the parameter walk can run beyond the\nactual received data, leading to out-of-bounds reads and potential\nmemory corruption during later parameter handling (e.g. STATE_COOKIE\nprocessing and kmemdup() copies).\n\nAdd a bounds check in sctp_unpack_cookie() to ensure the cached INIT\nchunk length does not exceed the available data in the COOKIE_ECHO\nbuffer before it is used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53246",
"url": "https://www.suse.com/security/cve/CVE-2026-53246"
},
{
"category": "external",
"summary": "SUSE Bug 1269988 for CVE-2026-53246",
"url": "https://bugzilla.suse.com/1269988"
},
{
"category": "external",
"summary": "SUSE Bug 1270024 for CVE-2026-53246",
"url": "https://bugzilla.suse.com/1270024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53246"
},
{
"cve": "CVE-2026-53250",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53250"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()\n\nThe TX metadata area resides in the UMEM buffer which is memory-mapped\nand concurrently writable by userspace. In xsk_skb_metadata(),\ncsum_start and csum_offset are read from shared memory for bounds\nvalidation, then read again for skb assignment. A malicious userspace\napplication can race to overwrite these values between the two reads,\nbypassing the bounds check and causing out-of-bounds memory access\nduring checksum computation in the transmit path.\n\nFix this by reading csum_start and csum_offset into local variables\nonce, then using the local copies for both validation and assignment.\n\nNote that other metadata fields (flags, launch_time) and the cached\ncsum fields may be mutually inconsistent due to concurrent userspace\nwrites, but this is benign: the only security-critical invariant is\nthat each field\u0027s validated value is the same one used, which local\ncaching guarantees.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53250",
"url": "https://www.suse.com/security/cve/CVE-2026-53250"
},
{
"category": "external",
"summary": "SUSE Bug 1269808 for CVE-2026-53250",
"url": "https://bugzilla.suse.com/1269808"
},
{
"category": "external",
"summary": "SUSE Bug 1270406 for CVE-2026-53250",
"url": "https://bugzilla.suse.com/1270406"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53250"
},
{
"cve": "CVE-2026-53252",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53252"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: fix memory leak in error path of hci_alloc_dev()\n\nEarly failures in Bluetooth HCI UART configuration leak SRCU percpu\nmemory.\n\nWhen device initialization fails before hci_register_dev() completes,\nthe HCI_UNREGISTER flag is never set. As a result, when the device\nreference count reaches zero, bt_host_release() evaluates this flag as\nfalse and falls back to a direct kfree(hdev).\n\nBecause hci_release_dev() is bypassed, the SRCU struct initialized\nearly in hci_alloc_dev() is never cleaned up, resulting in a leak of\npercpu memory.\n\nFix the leak by explicitly calling cleanup_srcu_struct() in the\nfallback (unregistered) branch of bt_host_release() before freeing\nthe device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53252",
"url": "https://www.suse.com/security/cve/CVE-2026-53252"
},
{
"category": "external",
"summary": "SUSE Bug 1269307 for CVE-2026-53252",
"url": "https://bugzilla.suse.com/1269307"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53252"
},
{
"cve": "CVE-2026-53254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53254"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: validate skb length in MCC handlers\n\nThe RFCOMM MCC handlers cast skb-\u003edata to protocol-specific structs\nwithout validating skb-\u003elen first. A malicious remote device can send\ntruncated MCC frames and trigger out-of-bounds reads in these handlers.\n\nFix this by using skb_pull_data() to validate and access the required\ndata before dereferencing it.\n\nrfcomm_recv_rpn() requires special handling since ETSI TS 07.10 allows\n1-byte RPN requests. Handle this by validating only the DLCI byte first,\nand validating the full struct only when len \u003e 1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53254",
"url": "https://www.suse.com/security/cve/CVE-2026-53254"
},
{
"category": "external",
"summary": "SUSE Bug 1269996 for CVE-2026-53254",
"url": "https://bugzilla.suse.com/1269996"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53254"
},
{
"cve": "CVE-2026-53255",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53255"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: validate advertising TLV before type checks\n\ntlv_data_is_valid() reads each advertising data field length from\ndata[i], then inspects data[i + 1] for managed EIR types before\nchecking that the current field still fits inside the supplied buffer.\n\nA malformed field whose length byte is the last byte of the buffer can\ntherefore make the parser read one byte past the advertising data.\n\nKASAN reported the following when a malformed MGMT_OP_ADD_ADVERTISING\nrequest reached that path:\n\n BUG: KASAN: vmalloc-out-of-bounds in tlv_data_is_valid()\n Read of size 1\n Call trace:\n tlv_data_is_valid()\n add_advertising()\n hci_mgmt_cmd()\n hci_sock_sendmsg()\n\nMove the existing element-length check before any type-octet inspection\nso each non-empty element is proven to contain its type byte before the\nparser looks at data[i + 1].",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53255",
"url": "https://www.suse.com/security/cve/CVE-2026-53255"
},
{
"category": "external",
"summary": "SUSE Bug 1269378 for CVE-2026-53255",
"url": "https://bugzilla.suse.com/1269378"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53255"
},
{
"cve": "CVE-2026-53262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53262"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nl2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()\n\npppol2tp_ioctl() read sock-\u003esk-\u003esk_user_data directly without any\nlocks or reference counting. If a controllable sleep was induced during\ncopy_from_user() (e.g. via a userfaultfd page fault sleep), a concurrent\nsocket close could trigger pppol2tp_session_close() asynchronously. This\nfrees the l2tp_session structure via the l2tp_session_del_work workqueue.\nUpon resuming, the ioctl thread dereferences the stale session pointer,\nresulting in a Use-After-Free (UAF).\n\nFix this by securely fetching the session reference using the RCU-safe,\nrefcounted helper pppol2tp_sock_to_session(sk) on entry. This locks the\nsession\u0027s refcount across the sleep. We structured the function to exit\nvia standard err breaks, guaranteeing that l2tp_session_put() is cleanly\ncalled on all return paths to drop the reference.\n\nTo preserve existing behavior we validate the session and its magic\nsignature only for the specific L2TP commands that require it. This\nensures that generic/unknown ioctls called on an unconnected socket\nstill return -ENOIOCTLCMD and correctly fall back to generic handlers\n(e.g. in sock_do_ioctl()).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53262",
"url": "https://www.suse.com/security/cve/CVE-2026-53262"
},
{
"category": "external",
"summary": "SUSE Bug 1270000 for CVE-2026-53262",
"url": "https://bugzilla.suse.com/1270000"
},
{
"category": "external",
"summary": "SUSE Bug 1270370 for CVE-2026-53262",
"url": "https://bugzilla.suse.com/1270370"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53262"
},
{
"cve": "CVE-2026-53265",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53265"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache policy smq: check allocation under invalidate lock\n\ncommit 2d1f7b65f5de (\"dm cache policy smq: fix missing locks in\ninvalidating cache blocks\") added mq-\u003elock around the destructive part of\nsmq_invalidate_mapping(), but left the e-\u003eallocated check outside the\ncritical section.\n\nThat leaves a check-then-act race. Two concurrent invalidators can both\nobserve e-\u003eallocated as true before either of them takes mq-\u003elock. The\nfirst invalidator that acquires the lock removes the entry from the\nqueues and hash table and then calls free_entry(), which clears\ne-\u003eallocated and puts the entry back on the free list. The second\ninvalidator can then acquire mq-\u003elock and continue with the stale result\nof the unlocked check.\n\nThis can corrupt the SMQ queues or hash table by deleting an entry that\nis no longer on those structures. It can also hit the allocation check in\nfree_entry() when the same entry is freed again.\n\nMove the allocation check under mq-\u003elock so the predicate and the\ndestructive operations are serialized by the same lock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53265",
"url": "https://www.suse.com/security/cve/CVE-2026-53265"
},
{
"category": "external",
"summary": "SUSE Bug 1269734 for CVE-2026-53265",
"url": "https://bugzilla.suse.com/1269734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53265"
},
{
"cve": "CVE-2026-53267",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53267"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_ct: bail out on template ct in get eval\n\nI noticed this issue while looking at a historic syzbot report [1].\n\nA rule like the one below is enough to trigger the bug:\n\n table ip t {\n chain pre {\n type filter hook prerouting priority raw;\n ct zone set 1\n ct original saddr 1.2.3.4 accept\n }\n }\n\nThe first expression attaches a per-cpu template ct via\nnft_ct_set_zone_eval() (nf_ct_tmpl_alloc -\u003e kzalloc, tuple is all\nzero, nf_ct_l3num(ct) == 0). The next expression then calls\nnft_ct_get_eval() on the same skb, treats the template as a real ct\nand hits the 16-byte memcpy path. With dreg at NFT_REG32_15 this\noverflows past struct nft_regs on the kernel stack; with smaller\ndreg values it silently clobbers adjacent registers.\n\nReject template ct at the eval entry and in nft_ct_get_fast_eval(),\nmirroring the check nft_ct_set_eval() already has. Additionally,\nbound the address copy in NFT_CT_SRC / NFT_CT_DST by priv-\u003elen\ninstead of by nf_ct_l3num(ct): nf_ct_get_tuple() zeroes the tuple\nbefore pkt_to_tuple() fills in only the protocol-relevant leading\nbytes, so the trailing bytes of tuple-\u003e{src,dst}.u3.all are\nwell-defined zero. priv-\u003elen is validated at rule load, so the\ncopy size is now bounded by the destination register rather than\nby an untrusted field on the conntrack.\n\n[1]: https://syzkaller.appspot.com/bug?id=389cf09cb72926114fce90dc85a2c3231dcb647c",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53267",
"url": "https://www.suse.com/security/cve/CVE-2026-53267"
},
{
"category": "external",
"summary": "SUSE Bug 1269577 for CVE-2026-53267",
"url": "https://bugzilla.suse.com/1269577"
},
{
"category": "external",
"summary": "SUSE Bug 1269578 for CVE-2026-53267",
"url": "https://bugzilla.suse.com/1269578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53267"
},
{
"cve": "CVE-2026-53268",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53268"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: conntrack_irc: fix possible out-of-bounds read\n\nWhen parsing fails after we\u0027ve matched the command string we\nshould bail out instead of trying to match a different command.\n\nThis helper should be deprecated, given prevalence of TLS I doubt it has\nany relevance in 2026.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53268",
"url": "https://www.suse.com/security/cve/CVE-2026-53268"
},
{
"category": "external",
"summary": "SUSE Bug 1269257 for CVE-2026-53268",
"url": "https://bugzilla.suse.com/1269257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53268"
},
{
"cve": "CVE-2026-53270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53270"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: clear the svc scheduler ptr early on edit\n\nip_vs_edit_service() while unbinding the old scheduler clears\nthe svc-\u003escheduler ptr after the scheduler module initiates\nRCU callbacks. This can cause packets to use the old\nscheduler at the time when svc-\u003esched_data is already freed\nafter RCU grace period.\n\nFix it by clearing the ptr early in ip_vs_unbind_scheduler(),\nbefore the done_service method schedules any RCU callbacks.\n\nAlso, if the new scheduler fails to initialize when replacing\nthe old scheduler, try to restore the old scheduler while still\nreturning the error code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53270",
"url": "https://www.suse.com/security/cve/CVE-2026-53270"
},
{
"category": "external",
"summary": "SUSE Bug 1269240 for CVE-2026-53270",
"url": "https://bugzilla.suse.com/1269240"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53270"
},
{
"cve": "CVE-2026-53275",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53275"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: mcast: Fix use-after-free when processing MLD queries\n\nWhen processing an MLD query, a pointer to the multicast group address\nis retrieved when initially parsing the packet. This pointer is later\ndereferenced without being reloaded despite the fact that the skb header\nmight have been reallocated following the pskb_may_pull() calls, leading\nto a use-after-free [1].\n\nFix by copying the multicast group address when the packet is initially\nparsed.\n\n[1]\nBUG: KASAN: slab-use-after-free in __mld_query_work (net/ipv6/mcast.c:1512)\nRead of size 8 at addr ffff8881154b8e90 by task kworker/4:1/118\n\nWorkqueue: mld mld_query_work\nCall Trace:\n\u003cTASK\u003e\ndump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)\nprint_address_description.constprop.0 (mm/kasan/report.c:378)\nprint_report (mm/kasan/report.c:482)\nkasan_report (mm/kasan/report.c:595)\n__mld_query_work (net/ipv6/mcast.c:1512)\nmld_query_work (net/ipv6/mcast.c:1563)\nprocess_one_work (kernel/workqueue.c:3314)\nworker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478)\nkthread (kernel/kthread.c:436)\nret_from_fork (arch/x86/kernel/process.c:158)\nret_from_fork_asm (arch/x86/entry/entry_64.S:245)\n\u003c/TASK\u003e\n\n[...]\n\nFreed by task 118:\nkasan_save_stack (mm/kasan/common.c:57)\nkasan_save_track (mm/kasan/common.c:78)\nkasan_save_free_info (mm/kasan/generic.c:584)\n__kasan_slab_free (mm/kasan/common.c:253 mm/kasan/common.c:285)\nkfree (./include/linux/kasan.h:235 mm/slub.c:2689 mm/slub.c:6251 mm/slub.c:6566)\npskb_expand_head (net/core/skbuff.c:2335)\n__pskb_pull_tail (net/core/skbuff.c:2878 (discriminator 4))\n__mld_query_work (net/ipv6/mcast.c:1495 (discriminator 1))\nmld_query_work (net/ipv6/mcast.c:1563)\nprocess_one_work (kernel/workqueue.c:3314)\nworker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478)\nkthread (kernel/kthread.c:436)\nret_from_fork (arch/x86/kernel/process.c:158)\nret_from_fork_asm (arch/x86/entry/entry_64.S:245)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53275",
"url": "https://www.suse.com/security/cve/CVE-2026-53275"
},
{
"category": "external",
"summary": "SUSE Bug 1269810 for CVE-2026-53275",
"url": "https://bugzilla.suse.com/1269810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53275"
},
{
"cve": "CVE-2026-53279",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53279"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gma500/oaktrail_lvds: fix hang on init failure\n\nThe LVDS init code looks up an I2C adapter using i2c_get_adapter() and\ntries to read the EDID before falling back to allocating and registering\nits own adapter.\n\nThe error handling does not separate these cases so on a late init\nfailure it will try to deregister and free also an adapter that had\npreviously been registered. Since i2c_get_adapter() takes another\nreference to the adapter, deregistration hangs indefinitely while\nwaiting for the reference to be released.\n\nFix this by only destroying adapters allocated during LVDS init on\nerrors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53279",
"url": "https://www.suse.com/security/cve/CVE-2026-53279"
},
{
"category": "external",
"summary": "SUSE Bug 1269505 for CVE-2026-53279",
"url": "https://bugzilla.suse.com/1269505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53279"
},
{
"cve": "CVE-2026-53289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53289"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix NULL pointer dereference in ice_reset_all_vfs()\n\nice_reset_all_vfs() ignores the return value of ice_vf_rebuild_vsi().\nWhen the VSI rebuild fails (e.g. during NVM firmware update via\nnvmupdate64e), ice_vsi_rebuild() tears down the VSI on its error path,\nleaving txq_map and rxq_map as NULL. The subsequent unconditional call\nto ice_vf_post_vsi_rebuild() leads to a NULL pointer dereference in\nice_ena_vf_q_mappings() when it accesses vsi-\u003etxq_map[0].\n\nThe single-VF reset path in ice_reset_vf() already handles this\ncorrectly by checking the return value of ice_vf_reconfig_vsi() and\nskipping ice_vf_post_vsi_rebuild() on failure.\n\nApply the same pattern to ice_reset_all_vfs(): check the return value\nof ice_vf_rebuild_vsi() and skip ice_vf_post_vsi_rebuild() and\nice_eswitch_attach_vf() on failure. The VF is left safely disabled\n(ICE_VF_STATE_INIT not set, VFGEN_RSTAT not set to VFACTIVE) and can\nbe recovered via a VFLR triggered by a PCI reset of the VF\n(sysfs reset or driver rebind).\n\nNote that this patch does not prevent the VF VSI rebuild from failing\nduring NVM update - the underlying cause is firmware being in a\ntransitional state while the EMP reset is processed, which can cause\nAdmin Queue commands (ice_add_vsi, ice_cfg_vsi_lan) to fail. This\npatch only prevents the subsequent NULL pointer dereference that\ncrashes the kernel when the rebuild does fail.\n\n crash\u003e bt\n PID: 50795 TASK: ff34c9ee708dc680 CPU: 1 COMMAND: \"kworker/u512:5\"\n #0 [ff72159bcfe5bb50] machine_kexec at ffffffffaa8850ee\n #1 [ff72159bcfe5bba8] __crash_kexec at ffffffffaaa15fba\n #2 [ff72159bcfe5bc68] crash_kexec at ffffffffaaa16540\n #3 [ff72159bcfe5bc70] oops_end at ffffffffaa837eda\n #4 [ff72159bcfe5bc90] page_fault_oops at ffffffffaa893997\n #5 [ff72159bcfe5bce8] exc_page_fault at ffffffffab528595\n #6 [ff72159bcfe5bd10] asm_exc_page_fault at ffffffffab600bb2\n [exception RIP: ice_ena_vf_q_mappings+0x79]\n RIP: ffffffffc0a85b29 RSP: ff72159bcfe5bdc8 RFLAGS: 00010206\n RAX: 00000000000f0000 RBX: ff34c9efc9c00000 RCX: 0000000000000000\n RDX: 0000000000000000 RSI: 0000000000000010 RDI: ff34c9efc9c00000\n RBP: ff34c9efc27d4828 R8: 0000000000000093 R9: 0000000000000040\n R10: ff34c9efc27d4828 R11: 0000000000000040 R12: 0000000000100000\n R13: 0000000000000010 R14: R15:\n ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018\n #7 [ff72159bcfe5bdf8] ice_sriov_post_vsi_rebuild at ffffffffc0a85e2e [ice]\n #8 [ff72159bcfe5be08] ice_reset_all_vfs at ffffffffc0a920b4 [ice]\n #9 [ff72159bcfe5be48] ice_service_task at ffffffffc0a31519 [ice]\n #10 [ff72159bcfe5be88] process_one_work at ffffffffaa93dca4\n #11 [ff72159bcfe5bec8] worker_thread at ffffffffaa93e9de\n #12 [ff72159bcfe5bf18] kthread at ffffffffaa946663\n #13 [ff72159bcfe5bf50] ret_from_fork at ffffffffaa8086b9\n\n The panic occurs attempting to dereference the NULL pointer in RDX at\n ice_sriov.c:294, which loads vsi-\u003etxq_map (offset 0x4b8 in ice_vsi).\n\n The faulting VSI is an allocated slab object but not fully initialized\n after a failed ice_vsi_rebuild():\n\n crash\u003e struct ice_vsi 0xff34c9efc27d4828\n netdev = 0x0,\n rx_rings = 0x0,\n tx_rings = 0x0,\n q_vectors = 0x0,\n txq_map = 0x0,\n rxq_map = 0x0,\n alloc_txq = 0x10,\n num_txq = 0x10,\n alloc_rxq = 0x10,\n num_rxq = 0x10,\n\n The nvmupdate64e process was performing NVM firmware update:\n\n crash\u003e bt 0xff34c9edd1a30000\n PID: 49858 TASK: ff34c9edd1a30000 CPU: 1 COMMAND: \"nvmupdate64e\"\n #0 [ff72159bcd617618] __schedule at ffffffffab5333f8\n #4 [ff72159bcd617750] ice_sq_send_cmd at ffffffffc0a35347 [ice]\n #5 [ff72159bcd6177a8] ice_sq_send_cmd_retry at ffffffffc0a35b47 [ice]\n #6 [ff72159bcd617810] ice_aq_send_cmd at ffffffffc0a38018 [ice]\n #7 [ff72159bcd617848] ice_aq_read_nvm at ffffffffc0a40254 [ice]\n #8 \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53289",
"url": "https://www.suse.com/security/cve/CVE-2026-53289"
},
{
"category": "external",
"summary": "SUSE Bug 1269694 for CVE-2026-53289",
"url": "https://bugzilla.suse.com/1269694"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53289"
},
{
"cve": "CVE-2026-53291",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53291"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda/conexant: Fix missing error check for jack detection\n\nIn cx_probe(), the return value of snd_hda_jack_detect_enable_callback()\nis ignored. This function returns a pointer, and if it fails (e.g., due\nto memory allocation failure), it returns an error pointer which must\nbe checked using IS_ERR().\n\nIf the registration fails, the driver continues to probe, but the jack\ndetection callback will not be registered. This can lead to a kernel\ncrash later when the driver attempts to handle jack events or accesses\nthe uninitialized structure.\n\nCheck the return value using IS_ERR() and propagate the error via\nPTR_ERR() to the probe caller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53291",
"url": "https://www.suse.com/security/cve/CVE-2026-53291"
},
{
"category": "external",
"summary": "SUSE Bug 1269697 for CVE-2026-53291",
"url": "https://bugzilla.suse.com/1269697"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53291"
},
{
"cve": "CVE-2026-53293",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53293"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG\n\nThere were multiple issues in that code.\n\nFirst of all the order between the reset semaphore and the mm_lock was\nwrong (e.g. copy_to_user) was called while holding the lock.\n\nThen we allocated memory while holding the reset semaphore which is also\na pretty big bug and can deadlock.\n\nThen we used down_read_trylock() instead of waiting for the reset to\nfinish.\n\n(cherry picked from commit 361b6e6b303d4b691f6c5974d3eaab67ca6dd90e)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53293",
"url": "https://www.suse.com/security/cve/CVE-2026-53293"
},
{
"category": "external",
"summary": "SUSE Bug 1269898 for CVE-2026-53293",
"url": "https://bugzilla.suse.com/1269898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53293"
},
{
"cve": "CVE-2026-53297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53297"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: Guard mana_remove against double invocation\n\nIf PM resume fails (e.g., mana_attach() returns an error), mana_probe()\ncalls mana_remove(), which tears down the device and sets\ngd-\u003egdma_context = NULL and gd-\u003edriver_data = NULL.\n\nHowever, a failed resume callback does not automatically unbind the\ndriver. When the device is eventually unbound, mana_remove() is invoked\na second time. Without a NULL check, it dereferences gc-\u003edev with\ngc == NULL, causing a kernel panic.\n\nAdd an early return if gdma_context or driver_data is NULL so the second\ninvocation is harmless. Move the dev = gc-\u003edev assignment after the\nguard so it cannot dereference NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53297",
"url": "https://www.suse.com/security/cve/CVE-2026-53297"
},
{
"category": "external",
"summary": "SUSE Bug 1269513 for CVE-2026-53297",
"url": "https://bugzilla.suse.com/1269513"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53297"
},
{
"cve": "CVE-2026-53313",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53313"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths\n\nIn dc_dmub_srv_log_diagnostic_data() and\ndc_dmub_srv_enable_dpia_trace().\n\nBoth functions check:\n\n if (!dc_dmub_srv || !dc_dmub_srv-\u003edmub)\n\nand then call DC_LOG_ERROR() inside that block.\n\nDC_LOG_ERROR() uses dc_dmub_srv-\u003ectx internally. So if\ndc_dmub_srv is NULL, the logging itself can dereference a\nNULL pointer and cause a crash.\n\nFix this by splitting the checks.\n\nFirst check if dc_dmub_srv is NULL and return immediately.\nThen check dc_dmub_srv-\u003edmub and log the error only when\ndc_dmub_srv is valid.\n\nFixes the below:\n../display/dc/dc_dmub_srv.c:962 dc_dmub_srv_log_diagnostic_data() error: we previously assumed \u0027dc_dmub_srv\u0027 could be null (see line 961)\n../display/dc/dc_dmub_srv.c:1167 dc_dmub_srv_enable_dpia_trace() error: we previously assumed \u0027dc_dmub_srv\u0027 could be null (see line 1166)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53313",
"url": "https://www.suse.com/security/cve/CVE-2026-53313"
},
{
"category": "external",
"summary": "SUSE Bug 1269719 for CVE-2026-53313",
"url": "https://bugzilla.suse.com/1269719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53313"
},
{
"cve": "CVE-2026-53324",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53324"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: Use pci_name() for debugfs directory naming\n\nUse pci_name(pdev) for the per-device debugfs directory instead of\nhardcoded \"0\" for PFs and pci_slot_name(pdev-\u003eslot) for VFs. The\nprevious approach had two issues:\n\n1. pci_slot_name() dereferences pdev-\u003eslot, which can be NULL for VFs\n in environments like generic VFIO passthrough or nested KVM,\n causing a NULL pointer dereference.\n\n2. Multiple PFs would all use \"0\", and VFs across different PCI\n domains or buses could share the same slot name, leading to\n -EEXIST errors from debugfs_create_dir().\n\npci_name(pdev) returns the unique BDF address, is always valid, and is\nunique across the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53324",
"url": "https://www.suse.com/security/cve/CVE-2026-53324"
},
{
"category": "external",
"summary": "SUSE Bug 1269512 for CVE-2026-53324",
"url": "https://bugzilla.suse.com/1269512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53324"
},
{
"cve": "CVE-2026-53325",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53325"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nagp/amd64: Fix broken error propagation in agp_amd64_probe()\n\nA NULL pointer dereference was observed in the AMD64 AGP driver when\nrunning in a virtualized environment (e.g. qemu/kvm) without a physical\nAMD northbridge. The crash occurs in amd64_fetch_size() when attempting\nto dereference the pointer returned by node_to_amd_nb(0).\n\nThe root cause of this crash is broken error propagation in\nagp_amd64_probe(): When no AMD northbridges are found, cache_nbs()\ncorrectly returns -ENODEV. However, the probe function erroneously\nchecks the return value against exactly -1, rather than \u003c 0.\n\nAs a result, the hardware absence error is masked, allowing the driver\nto improperly proceed with initialization. It eventually calls\nagp_add_bridge(), which invokes amd64_fetch_size(). Since the hardware\ndoes not exist, node_to_amd_nb(0) returns NULL, leading to a General\nProtection Fault (GPF) when accessing its -\u003emisc member.\n\nFix the issue by correcting the error check in agp_amd64_probe() to\nabort properly when cache_nbs() returns any negative error code. This\nprevents the driver from erroneously proceeding without hardware, thereby\navoiding the subsequent NULL pointer dereference at its source.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53325",
"url": "https://www.suse.com/security/cve/CVE-2026-53325"
},
{
"category": "external",
"summary": "SUSE Bug 1269726 for CVE-2026-53325",
"url": "https://bugzilla.suse.com/1269726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53325"
},
{
"cve": "CVE-2026-53329",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53329"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Use krealloc_array() in dal_vector_reserve()\n\n[Why \u0026 How]\ndal_vector_reserve() computes the allocation size as\n\"capacity * vector-\u003estruct_size\" using uint32_t arithmetic, which can\nsilently wrap to a small value on overflow. This would cause krealloc to\nreturn a smaller buffer than expected, leading to heap overflows on\nsubsequent vector appends.\n\nReplace krealloc() with krealloc_array() which performs an internal\noverflow check and returns NULL on wrap, preventing the issue.\n\n(cherry picked from commit 37668568641ccc4cc1dbca4923d0a16609dd5707)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53329",
"url": "https://www.suse.com/security/cve/CVE-2026-53329"
},
{
"category": "external",
"summary": "SUSE Bug 1270058 for CVE-2026-53329",
"url": "https://bugzilla.suse.com/1270058"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53329"
},
{
"cve": "CVE-2026-53331",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53331"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nslimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl-\u003elock\n\nDuring the SSR/PDR down notification the tx_lock is taken with the\nintent to provide synchronization with active DMA transfers.\n\nBut during this period qcom_slim_ngd_down() is invoked, which ends up in\nslim_report_absent(), which takes the slim_controller lock. In multiple\nother codepaths these two locks are taken in the opposite order (i.e.\nslim_controller then tx_lock).\n\nThe result is a lockdep splat, and a possible deadlock:\n\n rprocctl/449 is trying to acquire lock:\n ffff00009793e620 (\u0026ctrl-\u003elock){+.+.}-{4:4}, at: slim_report_absent (drivers/slimbus/core.c:322) slimbus\n\n but task is already holding lock:\n ffff00009793fb50 (\u0026ctrl-\u003etx_lock){+.+.}-{4:4}, at: qcom_slim_ngd_ssr_pdr_notify (drivers/slimbus/qcom-ngd-ctrl.c:1475) slim_qcom_ngd_ctrl\n\n which lock already depends on the new lock.\n\n Possible unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(\u0026ctrl-\u003etx_lock);\n lock(\u0026ctrl-\u003elock);\n lock(\u0026ctrl-\u003etx_lock);\n lock(\u0026ctrl-\u003elock);\n\nThe assumption is that the comment refers to the desire to not call\nqcom_slim_ngd_exit_dma() while we have an ongoing DMA TX transaction.\nBut any such transaction is initiated and completed within a single\nqcom_slim_ngd_xfer_msg().\n\nPrior to calling qcom_slim_ngd_exit_dma() the slim_controller is torn\ndown, all child devices are notified that the slimbus is gone and the\nchild devices are removed.\n\nStop taking the tx_lock in qcom_slim_ngd_ssr_pdr_notify() to avoid the\ndeadlock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53331",
"url": "https://www.suse.com/security/cve/CVE-2026-53331"
},
{
"category": "external",
"summary": "SUSE Bug 1270113 for CVE-2026-53331",
"url": "https://bugzilla.suse.com/1270113"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53331"
},
{
"cve": "CVE-2026-53332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53332"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nslimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd\n\nWhen the remoteproc starts in parallel with the NGD driver being probed,\nor the remoteproc is already up when the PDR lookup is being registered,\nor in the theoretical event that we get an interrupt from the hardware,\nthese callbacks will operate on uninitialized data. This result in\nissues to boot the affected boards.\n\nOne such example can be seen in the following fault, where\nqcom_slim_ngd_ssr_pdr_notify() schedules work on the NULL ngd_up_work.\n\n[ 21.858578] ------------[ cut here ]------------\n[ 21.858745] WARNING: kernel/workqueue.c:2338 at __queue_work+0x5e0/0x790, CPU#2: kworker/2:2/116\n...\n[ 21.859251] Call trace:\n[ 21.859255] __queue_work+0x5e0/0x790 (P)\n[ 21.859265] queue_work_on+0x6c/0xf0\n[ 21.859273] qcom_slim_ngd_ssr_pdr_notify+0x110/0x150 [slim_qcom_ngd_ctrl]\n[ 21.859304] qcom_slim_ngd_ssr_notify+0x24/0x40 [slim_qcom_ngd_ctrl]\n[ 21.859318] notifier_call_chain+0xa4/0x230\n[ 21.859329] srcu_notifier_call_chain+0x64/0xb8\n[ 21.859338] ssr_notify_start+0x40/0x78 [qcom_common]\n[ 21.859355] rproc_start+0x130/0x230\n[ 21.859367] rproc_boot+0x3d4/0x518\n...\n\nMove the enablement of interrupts, and the registration of SSR and PDR\nuntil after the NGD device has been registered.\n\nThis could be further refined by moving initialization to the control\ndriver probe and by removing the platform driver model from the picture.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53332",
"url": "https://www.suse.com/security/cve/CVE-2026-53332"
},
{
"category": "external",
"summary": "SUSE Bug 1270102 for CVE-2026-53332",
"url": "https://bugzilla.suse.com/1270102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53332"
},
{
"cve": "CVE-2026-53339",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53339"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: qcom-cci: Fix NULL pointer dereference in cci_remove()\n\nOn all modern platforms Qualcomm CCI controller provides two I2C masters,\nand on particular boards only one I2C master may be initialized, and in\nsuch cases the device unbinding or driver removal causes a NULL pointer\ndereference, because cci_halt() is called for all two I2C masters, but\na completion is initialized only for the single enabled master:\n\n % rmmod i2c-qcom-cci\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n \u003csnip\u003e\n Call trace:\n __wait_for_common+0x194/0x1a8 (P)\n wait_for_completion_timeout+0x20/0x2c\n cci_remove+0xc4/0x138 [i2c_qcom_cci]\n platform_remove+0x20/0x30\n device_remove+0x4c/0x80\n device_release_driver_internal+0x1c8/0x224\n driver_detach+0x50/0x98\n bus_remove_driver+0x6c/0xbc\n driver_unregister+0x30/0x60\n platform_driver_unregister+0x14/0x20\n qcom_cci_driver_exit+0x18/0x1008 [i2c_qcom_cci]\n ....",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53339",
"url": "https://www.suse.com/security/cve/CVE-2026-53339"
},
{
"category": "external",
"summary": "SUSE Bug 1270248 for CVE-2026-53339",
"url": "https://bugzilla.suse.com/1270248"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53339"
},
{
"cve": "CVE-2026-53345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53345"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Don\u0027t WARN if memory is dirtied without a vCPU when the VM is dying\n\nWhen marking a page dirty, complain about not having a running/loaded vCPU\nif and only if the VM is still alive, i.e. its refcount is non-zero. This\nwill allow fixing a memory leak for x86 SEV-ES guests without hitting what\nis effectively a false positive on the WARN.\n\nFor some SEV-ES VM-Exits, KVM keeps a writable mapping of a guest page\nacross an exit to userspace, and typically unmaps the page on the next\nKVM_RUN. But if userspace never calls KVM_RUN after such an exit, then KVM\nneeds to unmap the page when the vCPU is destroyed, which in turn triggers\nthe WARN about not having a running vCPU.\n\nAlternatively, SEV-ES could temporarily load the vCPU to suppress the WARN,\nas is done in nested_vmx_free_vcpu() (but for completely unrelated reasons;\nsuppressing WARN from nested_put_vmcs12_pages() is pure happenstance). But\nloading a vCPU during destruction is gross (ideally nVMX code would be\ncleaned up), risks complicating the SEV-ES code (KVM would need to ensure\nthe temporarily load()+put() only runs when the vCPU isn\u0027t already loaded),\nand is ultimately pointless.\n\nThe motivation for the WARN is to guard against KVM dirtying guest memory\nwithout pushing the corresponding GFN to the active vCPU\u0027s dirty ring, e.g.\nto ensure userspace doesn\u0027t miss a dirty page. But for the VM\u0027s refcount\nto reach zero, there can\u0027t be _any_ userspace mappings to the dirty ring,\nas mapping the dirty ring requires doing mmap() on the vCPU FD. I.e. if\nuserspace had a valid mapping for the dirty ring, then the vCPU file and\nthus the owning VM would still be alive. And so since userspace can\u0027t\npossibly reach the dirty ring, whether or not KVM technically \"misses\" a\npush to the dirty ring is irrelevant.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53345",
"url": "https://www.suse.com/security/cve/CVE-2026-53345"
},
{
"category": "external",
"summary": "SUSE Bug 1270132 for CVE-2026-53345",
"url": "https://bugzilla.suse.com/1270132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-53345"
},
{
"cve": "CVE-2026-53347",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53347"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: Fix driver removal with disabled KMS\n\nDRM atomic and modesetting aren\u0027t initialized if virtio-gpu driver built\nwith disabled KMS, leading to access of uninitialized data on driver\nremoval/unbinding and crashing kernel. Fix it by skipping shutting down\natomic core with unavailable KMS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53347",
"url": "https://www.suse.com/security/cve/CVE-2026-53347"
},
{
"category": "external",
"summary": "SUSE Bug 1270241 for CVE-2026-53347",
"url": "https://bugzilla.suse.com/1270241"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53347"
},
{
"cve": "CVE-2026-53350",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53350"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: wm_adsp: Fix NULL dereference when removing firmware controls\n\nIn wm_adsp_control_remove() check that the priv pointer is not NULL\nbefore attempting to cleanup what it points to.\n\nWhen cs_dsp creates a control it calls wm_adsp_control_add_cb() so that\nwm_adsp can create its own private control data. There are two cases\nwhere private data is not created:\n\n1. The control is a SYSTEM control, so an ALSA control is not created.\n\n2. The codec driver has registered a control_add() callback that\n hides the control, so wm_adsp_control_add() is not called.\n\nWhen cs_dsp_remove destroys its control list it calls\nwm_adsp_control_remove() for each control. But wm_adsp_control_remove()\nwas attempting to cleanup the private data pointed to by cs_ctl-\u003epriv\nwithout checking the pointer for NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53350",
"url": "https://www.suse.com/security/cve/CVE-2026-53350"
},
{
"category": "external",
"summary": "SUSE Bug 1270244 for CVE-2026-53350",
"url": "https://bugzilla.suse.com/1270244"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53350"
},
{
"cve": "CVE-2026-53354",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53354"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: errata: Mitigate TLBI errata on various Arm CPUs\n\nA number of CPUs developed by Arm suffer from errata whereby a broadcast\nTLBI;DSB sequence may complete before the global observation of writes\nwhich are translated by an affected TLB entry.\n\nThese errata ONLY affect the completion of memory accesses which have\nbeen translated by an invalidated TLB entry, and these errata DO NOT\naffect the actual invalidation of TLB entries. TLB entries are removed\ncorrectly.\n\nThis issue has been assigned CVE ID CVE-2025-10263.\n\nTo mitigate this issue, Arm recommends that software follows any\naffected TLBI;DSB sequence with an additional TLBI;DSB, which will\nensure that all memory write effects affected by the first TLBI have\nbeen globally observed. The additional TLBI can use any operation that\nis broadcast to affected CPUs, and the additional DSB can use any option\nthat is sufficient to complete the additional TLBI.\n\nThe ARM64_WORKAROUND_REPEAT_TLBI workaround is sufficient to mitigate\nthe issue. Enable this workaround for affected CPUs, and update the\nsilicon errata documentation accordingly.\n\nNote that due to the manner in which Arm develops IP and tracks errata,\nsome CPUs share a common erratum number.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53354",
"url": "https://www.suse.com/security/cve/CVE-2026-53354"
},
{
"category": "external",
"summary": "SUSE Bug 1270230 for CVE-2026-53354",
"url": "https://bugzilla.suse.com/1270230"
},
{
"category": "external",
"summary": "SUSE Bug 1270369 for CVE-2026-53354",
"url": "https://bugzilla.suse.com/1270369"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53354"
},
{
"cve": "CVE-2026-53355",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53355"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: rds: clear i_sends on setup unwind\n\nThe RDS IB connection teardown path is written so it can run during\npartial startup and on repeated shutdown attempts. It uses NULL\npointers to distinguish resources that are still owned from resources\nthat have already been released.\n\nWhen rds_ib_setup_qp() fails after allocating i_sends but before\nallocating i_recvs, the sends_out path frees i_sends without clearing\nthe pointer. A later shutdown pass can still treat that stale pointer\nas a live send ring allocation.\n\nClear i_sends after vfree() in the error unwind path so the existing\nshutdown logic continues to use the correct ownership state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53355",
"url": "https://www.suse.com/security/cve/CVE-2026-53355"
},
{
"category": "external",
"summary": "SUSE Bug 1270249 for CVE-2026-53355",
"url": "https://bugzilla.suse.com/1270249"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53355"
},
{
"cve": "CVE-2026-53356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53356"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gem: Fix phys BO pread/pwrite with offset\n\nsg_page() returns struct page pointer not (void *) so the scaling\nof pread/pwrite is wrong for phys BO and wrong parts of BO would be\naccessed if non-zero offset is used.\n\nLast impacted platform with overlay or cursor planes using phys\nmapping was Gen3/945G/Lakeport.\n\n(cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53356",
"url": "https://www.suse.com/security/cve/CVE-2026-53356"
},
{
"category": "external",
"summary": "SUSE Bug 1270112 for CVE-2026-53356",
"url": "https://bugzilla.suse.com/1270112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53356"
},
{
"cve": "CVE-2026-53358",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53358"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: use chan timer to close channels in cleanup_listen()\n\nl2cap_chan_close() removes the channel from conn-\u003echan_l, which\nmust be done under conn-\u003elock. cleanup_listen() runs under the\nparent sk_lock, so acquiring conn-\u003elock would invert the\nestablished conn-\u003elock -\u003e chan-\u003elock -\u003e sk_lock order.\n\nInstead of calling l2cap_chan_close() directly, schedule\nl2cap_chan_timeout with delay 0 to close the channel\nasynchronously. The timeout handler already acquires conn-\u003elock\nand chan-\u003elock in the correct order.\n\nThe timer is only armed when chan-\u003econn is still set: if it is\nalready NULL, l2cap_conn_del() has already processed this channel\n(l2cap_chan_del + l2cap_sock_teardown_cb + l2cap_sock_close_cb),\nso there is nothing left to do. If l2cap_conn_del() races in\nafter the timer is armed, __clear_chan_timer() inside\nl2cap_chan_del() cancels it; if the timer has already fired, the\nhandler returns harmlessly because chan-\u003econn was cleared.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53358",
"url": "https://www.suse.com/security/cve/CVE-2026-53358"
},
{
"category": "external",
"summary": "SUSE Bug 1270260 for CVE-2026-53358",
"url": "https://bugzilla.suse.com/1270260"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53358"
},
{
"cve": "CVE-2026-53366",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53366"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: account for fraggap on the paged allocation path\n\nIn __ip_append_data(), when the paged-allocation branch is taken,\nalloclen and pagedlen are computed as\n\n\talloclen = fragheaderlen + transhdrlen;\n\tpagedlen = datalen - transhdrlen;\n\ndatalen already includes fraggap, but the fraggap bytes carried over\nfrom the previous skb are copied into the new skb\u0027s linear area at\noffset transhdrlen by the subsequent skb_copy_and_csum_bits(). The\nlinear area is therefore undersized by fraggap bytes while pagedlen is\noverstated by the same amount.\n\nThe non-paged branch sets alloclen to fraglen, which already accounts\nfor fraggap because datalen does. Bring the paged branch in line by\nadding fraggap to alloclen and subtracting it from pagedlen.\n\nAfter this adjustment, copy no longer collapses to -fraggap on the\npaged path, so remove the stale comment describing that old arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53366",
"url": "https://www.suse.com/security/cve/CVE-2026-53366"
},
{
"category": "external",
"summary": "SUSE Bug 1271366 for CVE-2026-53366",
"url": "https://bugzilla.suse.com/1271366"
},
{
"category": "external",
"summary": "SUSE Bug 1271370 for CVE-2026-53366",
"url": "https://bugzilla.suse.com/1271370"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53366"
},
{
"cve": "CVE-2026-53369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53369"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: reject descriptors with oversized CRC length\n\nudf_read_tagged() skips CRC verification when descCRCLength +\nsizeof(struct tag) exceeds the block size. A crafted UDF image can\nset descCRCLength to an oversized value to bypass CRC validation\nentirely; the descriptor is then accepted based solely on the 8-bit\ntag checksum, which is trivially recomputable.\n\nReject such descriptors instead of silently accepting them. A\nlegitimate single-block descriptor should never have a CRC length that\nexceeds the block.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53369",
"url": "https://www.suse.com/security/cve/CVE-2026-53369"
},
{
"category": "external",
"summary": "SUSE Bug 1271818 for CVE-2026-53369",
"url": "https://bugzilla.suse.com/1271818"
},
{
"category": "external",
"summary": "SUSE Bug 1271819 for CVE-2026-53369",
"url": "https://bugzilla.suse.com/1271819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53369"
},
{
"cve": "CVE-2026-53374",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53374"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: zero-initialize GART table on allocation\n\nGART TLB is flushed after unmapping but not after mapping. Since\namdgpu_bo_create_kernel() does not zero-initialize the buffer, when a\nsingle PTE is written the TLB may speculatively load other uninitialized\nentries from the same cacheline. Those garbage entries can appear valid,\nand a subsequent write to another PTE in the same cacheline may cause the\nGPU to use a stale garbage PTE from the TLB.\n\nFix this by calling memset_io() to zero-initialize the GART table with\ngart_pte_flags immediately after allocation.\n\nUsing AMDGPU_GEM_CREATE_VRAM_CLEARED, SDMA-based clear will not work\nsince SDMA needs GART to be initialized to work.\n\n(cherry picked from commit d9af8263b82b6eaa60c5718e0c6631c5037e4b24)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53374",
"url": "https://www.suse.com/security/cve/CVE-2026-53374"
},
{
"category": "external",
"summary": "SUSE Bug 1271827 for CVE-2026-53374",
"url": "https://bugzilla.suse.com/1271827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53374"
},
{
"cve": "CVE-2026-53375",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53375"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vce: Prevent partial address patches\n\nIn the case that only one of lo/hi is valid, the patching could result\nin a bad address written to in FW.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53375",
"url": "https://www.suse.com/security/cve/CVE-2026-53375"
},
{
"category": "external",
"summary": "SUSE Bug 1271899 for CVE-2026-53375",
"url": "https://bugzilla.suse.com/1271899"
},
{
"category": "external",
"summary": "SUSE Bug 1271900 for CVE-2026-53375",
"url": "https://bugzilla.suse.com/1271900"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53375"
},
{
"cve": "CVE-2026-53376",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53376"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Add upper bound check for num_of_nodes\n\ndrm/amdkfd: Add upper bound check for num_of_nodes\nin kfd_ioctl_get_process_apertures_new.\n\n(cherry picked from commit 98ff46a5ea090c14d2cdb4f5b993b05d74f3949f)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53376",
"url": "https://www.suse.com/security/cve/CVE-2026-53376"
},
{
"category": "external",
"summary": "SUSE Bug 1271831 for CVE-2026-53376",
"url": "https://bugzilla.suse.com/1271831"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53376"
},
{
"cve": "CVE-2026-53379",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53379"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: ov8856: free control handler on error in ov8856_init_controls()\n\nThe control handler wasn\u0027t freed if adding controls failed, add an error\nexit label and convert the existing error return to use it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53379",
"url": "https://www.suse.com/security/cve/CVE-2026-53379"
},
{
"category": "external",
"summary": "SUSE Bug 1271833 for CVE-2026-53379",
"url": "https://bugzilla.suse.com/1271833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53379"
},
{
"cve": "CVE-2026-53382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53382"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vidtv: fix NULL pointer dereference in vidtv_mux_push_si\n\nsyzbot reported a general protection fault in\nvidtv_psi_ts_psi_write_into [1].\n\nvidtv_mux_get_pid_ctx() can return NULL, but vidtv_mux_push_si() does\nnot check for this before dereferencing the returned pointer to access\nthe continuity counter. This leads to a general protection fault when\naccessing a near-NULL address.\n\nThe root cause is that vidtv_mux_pid_ctx_init() does not check the\nreturn value of vidtv_mux_create_pid_ctx_once() for PMT section PIDs.\nIf the allocation fails, the PID context is never created, but init\nreturns success. The subsequent vidtv_mux_push_si() call then gets\nNULL from vidtv_mux_get_pid_ctx() and crashes.\n\nFix both the root cause (add error check in vidtv_mux_pid_ctx_init\nfor PMT PIDs) and add defensive NULL checks in vidtv_mux_push_si for\nall vidtv_mux_get_pid_ctx() calls.\n\n[1]\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nWorkqueue: events vidtv_mux_tick\nRIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 drivers/media/test-drivers/vidtv/vidtv_psi.c:197\nCall Trace:\n \u003cTASK\u003e\n vidtv_psi_table_header_write_into drivers/media/test-drivers/vidtv/vidtv_psi.c:799 [inline]\n vidtv_psi_pmt_write_into+0x3b2/0xa70 drivers/media/test-drivers/vidtv/vidtv_psi.c:1231\n vidtv_mux_push_si+0x932/0xe80 drivers/media/test-drivers/vidtv/vidtv_mux.c:196\n vidtv_mux_tick+0xe9b/0x1480 drivers/media/test-drivers/vidtv/vidtv_mux.c:408",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53382",
"url": "https://www.suse.com/security/cve/CVE-2026-53382"
},
{
"category": "external",
"summary": "SUSE Bug 1271717 for CVE-2026-53382",
"url": "https://bugzilla.suse.com/1271717"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53382"
},
{
"cve": "CVE-2026-53385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53385"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write\n\nA KASAN null-ptr-deref was observed in vcs_notifier():\n\nBUG: KASAN: null-ptr-deref in vcs_notifier+0x98/0x130\nRead of size 2 at addr qmp_cmd_name: qmp_capabilities, arguments: {}\n\nThe issue is a race condition in vcs_write(). When the console_lock is\ntemporarily dropped (to copy data from userspace), the vc_data pointer\nobtained from vcs_vc() may become stale. After re-acquiring the lock,\nvcs_vc() is called again to re-validate the pointer. If the vc has been\ndeallocated in the meantime, vcs_vc() returns NULL, and the while loop\nbreaks (with written \u003e 0). However, after the loop, vcs_scr_updated(vc)\nis still called with the now-NULL vc pointer, leading to a null pointer\ndereference in the notifier chain (vcs_notifier dereferences param-\u003evc).\n\nFix this by adding a NULL check for vc before calling vcs_scr_updated().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53385",
"url": "https://www.suse.com/security/cve/CVE-2026-53385"
},
{
"category": "external",
"summary": "SUSE Bug 1271834 for CVE-2026-53385",
"url": "https://bugzilla.suse.com/1271834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53385"
},
{
"cve": "CVE-2026-53388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53388"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: re-lock request before replacing page cache folio\n\nfuse_try_move_folio() unlocks the request on entry but does not\nre-lock it on the success path. This means fuse_chan_abort() can end the\nrequest and free the fuse_io_args (eg fuse_readpages_end()) while the\nsubsequent copy chain logic after fuse_try_move_folio() accesses the\nfuse_io_args, leading to use-after-free issues.\n\nFix this by calling lock_request() before replace_page_cache_folio().\nThis ensures the request is locked on the success path which will\nprevent the fuse_io_args from being freed while the later copying logic\nruns, and also ensures that the ap-\u003efolios[i]-\u003emapping is never null\nsince ap-\u003efolios[i] will always point to the newfolio after\nreplace_page_cache_folio().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53388",
"url": "https://www.suse.com/security/cve/CVE-2026-53388"
},
{
"category": "external",
"summary": "SUSE Bug 1271825 for CVE-2026-53388",
"url": "https://bugzilla.suse.com/1271825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53388"
},
{
"cve": "CVE-2026-53391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53391"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr\n\nnfs4_decode_mp_ds_addr() decodes the r_netid and r_addr opaques of a\nnetaddr4 from a GETDEVICEINFO multipath-DS body, then immediately\ncalls strrchr(buf, \u0027.\u0027) to locate the port separator. Both decodes\nuse xdr_stream_decode_string_dup(), and the current code checks only\n\"nlen \u003c 0\" / \"rlen \u003c 0\" before dereferencing the returned string.\n\nWhen the on-wire opaque has length zero, xdr_stream_decode_opaque_inline()\nreturns 0 and xdr_stream_decode_string_dup() falls through to its\n\"*str = NULL; return ret\" tail, leaving buf NULL with a return value\nof 0. The \"\u003c 0\" check does not catch this, and the next line is\nstrrchr(NULL, \u0027.\u0027), a kernel NULL pointer dereference reachable from\nany pNFS-flexfile client mounted against a malicious or compromised\nmetadata server.\n\nReject the zero-length cases explicitly so the decoder fails with\n-EBADMSG (treated as a malformed GETDEVICEINFO body) instead of\npanicking the client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53391",
"url": "https://www.suse.com/security/cve/CVE-2026-53391"
},
{
"category": "external",
"summary": "SUSE Bug 1271904 for CVE-2026-53391",
"url": "https://bugzilla.suse.com/1271904"
},
{
"category": "external",
"summary": "SUSE Bug 1271905 for CVE-2026-53391",
"url": "https://bugzilla.suse.com/1271905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53391"
},
{
"cve": "CVE-2026-53392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53392"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4/flexfiles: reject zero filehandle version count\n\nff_layout_alloc_lseg() decodes the filehandle-version array count\nfrom the flexfiles layout body. The value is used as the count for\nkzalloc_objs(), and the current code only rejects NULL.\n\nA zero count yields ZERO_SIZE_PTR, which can be stored in\ndss_info-\u003efh_versions even though later flexfiles paths assume that at\nleast one filehandle version exists.\n\nReject fh_count == 0 before the allocation, matching the existing zero\nversion_count validation in the flexfiles GETDEVICEINFO parser.\n\nA QEMU/KASAN run with a malformed flexfiles layout hit:\n\n KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n RIP: 0010:ff_layout_encode_ff_layoutupdate.isra.0+0x15f/0x750\n ff_layout_encode_layoutreturn+0x683/0x970\n nfs4_xdr_enc_layoutreturn+0x278/0x3a0\n Kernel panic - not syncing: Fatal exception\n\nThe patched kernel rejects the malformed layout without KASAN/oops/panic,\nand a valid fh_count=1 regression still opens, reads, and unmounts cleanly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53392",
"url": "https://www.suse.com/security/cve/CVE-2026-53392"
},
{
"category": "external",
"summary": "SUSE Bug 1271826 for CVE-2026-53392",
"url": "https://bugzilla.suse.com/1271826"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53392"
},
{
"cve": "CVE-2026-53393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53393"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: reset write verifier on deferred writeback errors\n\nnfsd_vfs_write() and nfsd_commit() both call filemap_check_wb_err() to\ndetect deferred writeback errors, but neither rotates the server\u0027s write\nverifier (nn-\u003ewriteverf) when this check fails. Every other\ndurable-storage-failure path in these functions calls\ncommit_reset_write_verifier() before returning an error.\n\nThe missing rotation means clients holding UNSTABLE write data under the\ncurrent verifier will COMMIT, receive the unchanged verifier back, and\nconclude their data is durable - silently dropping data that failed\nwriteback. This violates the UNSTABLE+COMMIT durability contract\n(RFC 1813 3.3.7, RFC 8881 18.32).\n\nAdd commit_reset_write_verifier() calls at both filemap_check_wb_err()\nerror sites, matching the pattern used by adjacent error paths in the\nsame functions. The helper already filters -EAGAIN and -ESTALE\ninternally, so the calls are unconditionally safe.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53393",
"url": "https://www.suse.com/security/cve/CVE-2026-53393"
},
{
"category": "external",
"summary": "SUSE Bug 1271858 for CVE-2026-53393",
"url": "https://bugzilla.suse.com/1271858"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53393"
},
{
"cve": "CVE-2026-53397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53397"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix posix_acl leak on SETACL decode failure\n\nnfsaclsvc_decode_setaclargs() and nfs3svc_decode_setaclargs() each\ncall nfs_stream_decode_acl() twice, first for NFS_ACL and then for\nNFS_DFACL. Each successful call transfers ownership of a freshly\nallocated posix_acl into argp-\u003eacl_access or argp-\u003eacl_default. If\nthe first call succeeds but the second fails, the decoder returns\nfalse and argp-\u003eacl_access is left dangling.\n\nACLPROC2_SETACL.pc_release was wired to nfssvc_release_attrstat and\nACLPROC3_SETACL.pc_release was wired to nfs3svc_release_fhandle.\nBoth only call fh_put() and have no knowledge of the ACL fields on\nargp. The posix_acl_release() pairs sat at the out: labels inside\nnfsacld_proc_setacl() and nfsd3_proc_setacl(), but svc_process()\nskips pc_func when pc_decode returns false, so that cleanup is\nunreachable on decode failure:\n\n svc_process_common()\n pc_decode() /* decode_setaclargs: false */\n /* pc_func skipped */\n pc_release() /* fh_put only -- ACLs leaked */\n\nThe orphaned posix_acl is leaked for the lifetime of the server.\n\nFix by adding nfsaclsvc_release_setacl() and nfs3svc_release_setacl(),\nwhich release both argp-\u003eacl_access and argp-\u003eacl_default in addition\nto fh_put(), and wiring them as pc_release for their respective SETACL\nprocedures. pc_release runs on every path svc_process() takes after\ndecode, including decode failure, so the posix_acl_release() pairs are\nremoved from the proc functions\u0027 out: labels to keep ownership in one\nplace. This matches the existing release_getacl() pattern used by\nthe sibling GETACL procedures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53397",
"url": "https://www.suse.com/security/cve/CVE-2026-53397"
},
{
"category": "external",
"summary": "SUSE Bug 1271869 for CVE-2026-53397",
"url": "https://bugzilla.suse.com/1271869"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53397"
},
{
"cve": "CVE-2026-53398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53398"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Fix SECINFO_NO_NAME decode error cleanup\n\nnfsd4_decode_secinfo_no_name() currently initializes sin_exp after\ndecoding sin_style. If the XDR stream is truncated, the decoder returns\nnfserr_bad_xdr before sin_exp is initialized.\n\nSince commit 3fdc54646234 (\"NFSD: Reduce amount of struct\nnfsd4_compoundargs that needs clearing\"), the inline iops array is not\ncleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore\nleave sin_exp holding stale union contents from a previous operation.\n\nThe error response path still invokes nfsd4_secinfo_no_name_release(),\nwhich calls exp_put() on a non-NULL sin_exp.\n\nInitialize sin_exp before the first failable decode step, matching\nnfsd4_decode_secinfo().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53398",
"url": "https://www.suse.com/security/cve/CVE-2026-53398"
},
{
"category": "external",
"summary": "SUSE Bug 1271870 for CVE-2026-53398",
"url": "https://bugzilla.suse.com/1271870"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53398"
},
{
"cve": "CVE-2026-53399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53399"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: release layout stid on setlease failure\n\nnfs4_alloc_stid() publishes the new stid into cl-\u003ecl_stateids via\nidr_alloc_cyclic() under cl_lock before returning to\nnfsd4_alloc_layout_stateid(). When nfsd4_layout_setlease() then\nfails, the error path frees the layout stateid directly with\nkmem_cache_free() without ever calling idr_remove(), leaving the\nIDR slot pointing at freed slab memory. Any subsequent IDR walker\n(states_show, client teardown) dereferences the dangling pointer.\n\nThe correct teardown for an IDR-published stid is nfs4_put_stid(),\nwhich removes the IDR slot under cl_lock, dispatches sc_free\n(nfsd4_free_layout_stateid) to release ls-\u003els_file via\nnfsd4_close_layout(), and drops the nfs4_file reference in its\ntail.\n\nA second issue blocks that switch: nfsd4_free_layout_stateid()\nunconditionally inspects ls-\u003els_fence_work via\ndelayed_work_pending() under ls_lock, but\nINIT_DELAYED_WORK(\u0026ls-\u003els_fence_work, ...) currently runs only\nafter the setlease call. On the setlease-failure path the\ndestructor would touch an uninitialized delayed_work.\n\n nfsd4_alloc_layout_stateid()\n nfs4_alloc_stid() /* idr_alloc_cyclic under cl_lock */\n nfsd4_layout_setlease() /* fails */\n nfs4_put_stid()\n nfsd4_free_layout_stateid()\n delayed_work_pending(\u0026ls-\u003els_fence_work) /* needs INIT */\n nfsd4_close_layout() /* nfsd_file_put(ls-\u003els_file) */\n put_nfs4_file()\n\nFix by hoisting the ls_fenced / ls_fence_delay / INIT_DELAYED_WORK\ninitialization above the nfsd4_layout_setlease() call, and replace\nthe manual nfsd_file_put + put_nfs4_file + kmem_cache_free cleanup\nwith a single nfs4_put_stid(stp).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53399",
"url": "https://www.suse.com/security/cve/CVE-2026-53399"
},
{
"category": "external",
"summary": "SUSE Bug 1271832 for CVE-2026-53399",
"url": "https://bugzilla.suse.com/1271832"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53399"
},
{
"cve": "CVE-2026-53402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53402"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()\n\nWhen fbcon_do_set_font() fails (e.g., due to a memory allocation failure\ninside vc_resize() under heavy memory pressure), it jumps to the `err_out`\nlabel to roll back the console state. However, the current rollback logic\nforgets to restore the `hi_font` state, leading to a severe state machine\ncorruption.\n\nEarlier in the function, `set_vc_hi_font()` might be called to change\n`vc-\u003evc_hi_font_mask` and mutate the screen buffer. If `vc_resize()`\nsubsequently fails, the `err_out` path restores `vc_font.charcount`\nbut entirely skips rolling back the `vc_hi_font_mask` and the screen\nbuffer.\n\nThis mismatch leaves the terminal in a desynchronized state. Because\n`vc_hi_font_mask` remains set, the VT subsystem will still accept\ncharacter indices greater than 255 from userspace and write them to the\nscreen buffer. Subsequent rendering calls (e.g., `fbcon_putcs()`) will\nthen use these inflated indices to access the reverted, 256-character\nfont array, leading to a deterministic out-of-bounds read and potential\nkernel memory disclosure.\n\nFix this by adding the missing rollback logic for the `hi_font` mask\nand screen buffer in the error path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53402",
"url": "https://www.suse.com/security/cve/CVE-2026-53402"
},
{
"category": "external",
"summary": "SUSE Bug 1271908 for CVE-2026-53402",
"url": "https://bugzilla.suse.com/1271908"
},
{
"category": "external",
"summary": "SUSE Bug 1271909 for CVE-2026-53402",
"url": "https://bugzilla.suse.com/1271909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-53402"
},
{
"cve": "CVE-2026-53403",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53403"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var\n\ninfo-\u003evar, a framebuffer\u0027s current mode, is expected to have a matching\nentry in info-\u003emodelist. var_to_display() relies on this and treats a\nfailed fb_match_mode() as \"This should not happen\". fb_set_var() keeps it\ntrue by adding the mode to the list on every change, and\ndo_register_framebuffer() does the same at registration.\n\nstore_modes() replaces the modelist from userspace. fb_new_modelist()\nvalidates the new modes but does not check that info-\u003evar still has a\nmatch. It relies on fbcon_new_modelist() to re-point consoles, but that\nonly handles consoles mapped to the framebuffer. With fbcon unbound there\nare none, so info-\u003evar is left describing a mode that is no longer in the\nlist.\n\nA later console takeover runs var_to_display(), where fb_match_mode()\nreturns NULL and leaves fb_display[i].mode NULL. fbcon_switch() passes it\nto display_to_var(), and fb_videomode_to_var() dereferences the NULL mode.\n\nKeep the current mode in the list in fb_new_modelist(), the same way\nfb_set_var() does.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53403",
"url": "https://www.suse.com/security/cve/CVE-2026-53403"
},
{
"category": "external",
"summary": "SUSE Bug 1271731 for CVE-2026-53403",
"url": "https://bugzilla.suse.com/1271731"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-53403"
},
{
"cve": "CVE-2026-63794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63794"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path\n\nIn sev_dbg_crypt(), the per-iteration transfer length is bounded by\nthe source page offset (PAGE_SIZE - s_off) but not by the destination\npage offset (PAGE_SIZE - d_off). When d_off \u003e s_off, the encrypt\npath (__sev_dbg_encrypt_user) performs a read-modify-write using a\nsingle-page intermediate buffer (dst_tpage):\n\n 1. __sev_dbg_decrypt() expands the size to round_up(len + (d_off \u0026 15), 16)\n before issuing the PSP command. If len + (d_off \u0026 15) \u003e PAGE_SIZE,\n the PSP writes beyond the end of the 4096-byte dst_tpage allocation.\n\n 2. The subsequent memcpy()/copy_from_user() into\n page_address(dst_tpage) + (d_off \u0026 15) of \u0027len\u0027 bytes overflows\n by up to 15 bytes under the same condition.\n\nTrigger example: s_off = 0, d_off = 1, debug.len = PAGE_SIZE -\nthe PSP is instructed to write round_up(4097, 16) = 4112 bytes to\na 4096-byte buffer.\n\nFix by also bounding len by (PAGE_SIZE - d_off), the same check that\nsev_send_update_data() already performs for its single-page guest\nregion.\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in sev_dbg_crypt+0x993/0xd10 [kvm_amd]\n Write of size 4095 at addr ff110062293bb009 by task sev_dbg_test/228214\n\n CPU: 96 UID: 0 PID: 228214 Comm: sev_dbg_test Tainted: G U W 7.0.0-smp--5ce9b0c48211-dbg #156 PREEMPTLAZY\n Tainted: [U]=USER, [W]=WARN\n Hardware name: Google Astoria/astoria, BIOS 0.20250817.1-0 08/25/2025\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x54/0x70\n print_report+0xbc/0x260\n kasan_report+0xa2/0xd0\n kasan_check_range+0x25f/0x2c0\n __asan_memcpy+0x40/0x70\n sev_dbg_crypt+0x993/0xd10 [kvm_amd]\n sev_mem_enc_ioctl+0x33c/0x450 [kvm_amd]\n kvm_vm_ioctl+0x65d/0x6d0 [kvm]\n __se_sys_ioctl+0xb2/0x100\n do_syscall_64+0xe8/0x870\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n \u003c/TASK\u003e\n\n The buggy address belongs to the physical page:\n page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7fe72b6a0 pfn:0x62293bb\n memcg:ff11000112827d82\n flags: 0x1400000000000000(node=1|zone=1)\n raw: 1400000000000000 0000000000000000 dead000000000122 0000000000000000\n raw: 00000007fe72b6a0 0000000000000000 00000001ffffffff ff11000112827d82\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n ff110062293bbf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ff110062293bbf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n \u003eff110062293bc000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc\n ^\n ff110062293bc080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc\n ff110062293bc100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc\n ==================================================================\n Disabling lock debugging due to kernel taint\n\n[sean: add sample KASAN splat, Fixes, and stable@]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63794",
"url": "https://www.suse.com/security/cve/CVE-2026-63794"
},
{
"category": "external",
"summary": "SUSE Bug 1271964 for CVE-2026-63794",
"url": "https://bugzilla.suse.com/1271964"
},
{
"category": "external",
"summary": "SUSE Bug 1271965 for CVE-2026-63794",
"url": "https://bugzilla.suse.com/1271965"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63794"
},
{
"cve": "CVE-2026-63795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63795"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p: avoid putting oldfid in p9_client_walk() error path\n\nWhen p9_client_walk() is called with clone set to false, fid aliases\noldfid. If the walk subsequently fails after the request has been sent,\nthe error path jumps to clunk_fid, which currently calls p9_fid_put(fid)\nunconditionally.\n\nThis drops a reference to oldfid even though ownership of oldfid remains\nwith the caller. If this is the last reference, oldfid can be clunked and\ndestroyed while the caller still expects it to be valid. A later use or\nput of oldfid can then trigger a use-after-free or refcount underflow.\n\nFix this by only putting fid in the clunk_fid error path when it does not\nalias oldfid, matching the existing guard in the error path below.\n\nThis can be triggered when a multi-component walk is split into multiple\np9_client_walk() calls and a later non-cloning walk fails. A reproducer\nand refcount warning logs are available on request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63795",
"url": "https://www.suse.com/security/cve/CVE-2026-63795"
},
{
"category": "external",
"summary": "SUSE Bug 1271955 for CVE-2026-63795",
"url": "https://bugzilla.suse.com/1271955"
},
{
"category": "external",
"summary": "SUSE Bug 1272136 for CVE-2026-63795",
"url": "https://bugzilla.suse.com/1272136"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63795"
},
{
"cve": "CVE-2026-63802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63802"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-cgroup: fix UAF in __blkcg_rstat_flush()\n\nWhen multiple blkgs in the same blkcg are released concurrently,\na use-after-free can occur. The race happens when one blkg\u0027s\n__blkcg_rstat_flush() removes another blkg\u0027s iostat entries via\nllist_del_all(). The second blkg sees an empty list and proceeds\nto free itself while the first is still iterating over its entries.\n\nMove the flush from __blkg_release() (RCU callback) to blkg_release()\n(before call_rcu). This ensures the RCU grace period waits for any\nconcurrent flush\u0027s rcu_read_lock() section to complete before freeing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63802",
"url": "https://www.suse.com/security/cve/CVE-2026-63802"
},
{
"category": "external",
"summary": "SUSE Bug 1272282 for CVE-2026-63802",
"url": "https://bugzilla.suse.com/1272282"
},
{
"category": "external",
"summary": "SUSE Bug 1272283 for CVE-2026-63802",
"url": "https://bugzilla.suse.com/1272283"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63802"
},
{
"cve": "CVE-2026-63806",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63806"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()\n\nDrop a BUG_ON() that has been reachable since it was first added, way back\nin 2009, and instead use get_unaligned() to perform potentially-unaligned\naccesses.\n\nFor a given store, KVM x86\u0027s emulator tracks the entire value in the\ndestination operand, x86_emulate_ctxt.dst. If the destination is memory,\nand the target splits multiple pages and/or is emulated MMIO, then KVM\nhandles each fragment independently. E.g. on a page split starting at page\noffset 0xffc, KVM writes 4 bytes to the first page, then the remaining\nbytes to the second page, using ctxt-\u003edst as the source for both (with\nappropriate offsets).\n\nIf the destination splits a page *and* hits emulated MMIO on the second\npage, then KVM will complete the write to the first page, then emulate the\nMMIO access to the second page. If there is a datamatch-enabled ioeventfd\nat offset 0 of the second page, then KVM will process the remainder of the\nstore as a potential ioeventfd signal.\n\nPutting it all together, if the guest emits a store that splits a page\nstarting at page offset N, and the second page has a datamatch-enabled\nioeventfd at offset 0, then KVM will check for datamatch using\n\u0026dst.valptr[N] as the source. Due to dst (and thus dst.valptr) being\n32-byte aligned, if N is not aligned to @len, the BUG_ON() fires.\n\nE.g. with a 16-byte store at page offset 0xffc, to an ioeventfd of len 8,\nall initial checks in ioeventfd_in_range() will succeed, and the BUG_ON()\nfires due to @val being 4-byte aligned, but not 8-byte aligned.\n\n ------------[ cut here ]------------\n kernel BUG at arch/x86/kvm/../../../virt/kvm/eventfd.c:783!\n Oops: invalid opcode: 0000 [#1] SMP\n CPU: 0 UID: 1000 PID: 615 Comm: repro Not tainted 7.1.0-rc2-ff238429d1ea #365 PREEMPT\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n RIP: 0010:ioeventfd_write+0x6c/0x70 [kvm]\n Call Trace:\n \u003cTASK\u003e\n __kvm_io_bus_write+0x85/0xb0 [kvm]\n kvm_io_bus_write+0x53/0x80 [kvm]\n vcpu_mmio_write+0x66/0xf0 [kvm]\n emulator_read_write_onepage+0x12a/0x540 [kvm]\n emulator_read_write+0x109/0x2b0 [kvm]\n x86_emulate_insn+0x4f8/0xfb0 [kvm]\n x86_emulate_instruction+0x181/0x790 [kvm]\n kvm_mmu_page_fault+0x313/0x630 [kvm]\n vmx_handle_exit+0x18a/0x590 [kvm_intel]\n kvm_arch_vcpu_ioctl_run+0xc81/0x1c90 [kvm]\n kvm_vcpu_ioctl+0x2d5/0x970 [kvm]\n __x64_sys_ioctl+0x8a/0xd0\n do_syscall_64+0xb7/0x890\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n RIP: 0033:0x7f19c931a9bf\n \u003c/TASK\u003e\n Modules linked in: kvm_intel kvm irqbypass\n ---[ end trace 0000000000000000 ]---\n\nIn a perfect world, the fix would be to simply delete the BUG_ON(), as KVM\nx86 doesn\u0027t perform alignment checks on \"normal\" memory accesses at CPL0.\nSadly, C99 ruins all the fun; while the x86 architecture plays nice,\ndereferencing an unaligned pointer directly is undefined behavior in C,\ne.g. triggers splats when running with CONFIG_UBSAN_ALIGNMENT=y.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63806",
"url": "https://www.suse.com/security/cve/CVE-2026-63806"
},
{
"category": "external",
"summary": "SUSE Bug 1272268 for CVE-2026-63806",
"url": "https://bugzilla.suse.com/1272268"
},
{
"category": "external",
"summary": "SUSE Bug 1272269 for CVE-2026-63806",
"url": "https://bugzilla.suse.com/1272269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63806"
},
{
"cve": "CVE-2026-63807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63807"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level\n\nWhen recovering hugepages in the shadow MMU, verify that the base gfn of\nthe shadow page is actually contained within the target memslot, *before*\nquerying the max mapping level given the shadow page\u0027s gfn. Failure to\npre-check the validity of the gfn can lead to an out-of-bounds access to\nthe slot\u0027s lpage_info (which typically manifests as a host #PF because the\nlpage_info is vmalloc\u0027d) if the guest creates a hugepage mapping (in its\nPTEs) that extends \"below\" the bounds of a memslot.\n\nWhen faulting in memory for a guest, and the size of the guest mapping is\ngreater than KVM\u0027s (current) max mapping, then KVM will create a \"direct\"\nshadow page (direct in that there are no gPTEs to shadow, and so the target\ngfn is a direct calculation given the base gfn of the shadow page). The\nhugepage recovery flow looks for such direct shadow pages, as forcing 4KiB\nmappings when dirty logging generates the guest \u003e host mapping size case.\nWhen the 4KiB restriction is lifted, then KVM can replace the shadow page\nwith a hugepage.\n\nBut if KVM originally used a smaller mapping than the guest because the\nrange of memory covered by the guest hugepage exceeds the bounds of a\nmemslot, then KVM will link a direct shadow page with a gfn that is outside\nthe bounds of the memslot being used to fault in memory. The rmap entry\nadded for the leaf mapping is correct and within bounds, but the gfn of the\nleaf SPTE\u0027s parent shadow page will be out of bounds.\n\n BUG: unable to handle page fault for address: ffffc90000806ffc\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 100000067 P4D 100000067 PUD 1002a7067 PMD 10612f067 PTE 0\n Oops: Oops: 0000 [#1] SMP\n CPU: 13 UID: 1000 PID: 757 Comm: mmu_stress_test Not tainted 7.1.0-rc1-48ce1e26eace-x86_pir_to_irr_comments-vm #341 PREEMPT\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n RIP: 0010:kvm_mmu_max_mapping_level+0x79/0x2b0 [kvm]\n Call Trace:\n \u003cTASK\u003e\n kvm_mmu_recover_huge_pages+0x21b/0x320 [kvm]\n kvm_set_memslot+0x1ee/0x590 [kvm]\n kvm_set_memory_region.part.0+0x3a1/0x4d0 [kvm]\n kvm_vm_ioctl+0x9bf/0x15d0 [kvm]\n __x64_sys_ioctl+0x8a/0xd0\n do_syscall_64+0xb7/0xbb0\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n RIP: 0033:0x7f21c0f1a9bf\n \u003c/TASK\u003e\n\nDon\u0027t bother pre-checking the bounds of the potential hugepage, i.e. don\u0027t\ncheck that e.g. sp-\u003egfn + KVM_PAGES_PER_HPAGE(sp-\u003erole.level + 1) is also\nwithin the memslot, as the checks performed by kvm_mmu_max_mapping_level()\nare a superset of the basic bounds checks. I.e. pre-checking the full\nrange would be a dubious micro-optimization.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63807",
"url": "https://www.suse.com/security/cve/CVE-2026-63807"
},
{
"category": "external",
"summary": "SUSE Bug 1272263 for CVE-2026-63807",
"url": "https://bugzilla.suse.com/1272263"
},
{
"category": "external",
"summary": "SUSE Bug 1272264 for CVE-2026-63807",
"url": "https://bugzilla.suse.com/1272264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63807"
},
{
"cve": "CVE-2026-63809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: use kvfree() for replaced sysctl write buffer\n\nproc_sys_call_handler() allocates its temporary sysctl buffer with\nkvzalloc() and passes it to __cgroup_bpf_run_filter_sysctl(). Since\nkvzalloc() may fall back to vmalloc() for large allocations, freeing\nthat buffer with kfree() is wrong and can corrupt memory.\n\nUse kvfree() to safely handle both kmalloc and kvzalloc()/vmalloc\nallocations.\n\nThe bug was first flagged by an experimental analysis tool we are\ndeveloping for kernel memory-management bugs while analyzing\nv6.13-rc1. The tool is still under development and is not yet publicly\navailable. Manual inspection confirms that the bug is still\npresent in v7.1-rc5.\n\nReproduced the bug based on v7.1-rc4 in a QEMU x86_64 guest booted with\nKASAN and CONFIG_FAILSLAB enabled. To exercise the replacement path, the\ntest tree also included the accompanying fix for the stale ret == 1\ncheck in __cgroup_bpf_run_filter_sysctl(). The reproducer confines\nfailslab injections to the proc_sys_call_handler() range, uses\nstacktrace-depth=32, and injects fail-nth=1 while writing 8191 bytes to\n/proc/sys/kernel/domainname from a task in the target cgroup. Under\nthat setup, fail-nth=1 triggered the fault:\n\n BUG: unable to handle page fault for address: ffffeb0200024d48\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 0 P4D 0\n Oops: Oops: 0000 SMP KASAN NOPTI\n CPU: 2 UID: 0 PID: 209 Comm: repro_proc_sys_ Not tainted 7.1.0-rc4-00686-g97625979a5d4 PREEMPT(lazy)\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014\n RIP: 0010:kfree+0x6e/0x510\n ...\n Call Trace:\n \u003cTASK\u003e\n ? __cgroup_bpf_run_filter_sysctl+0x626/0xc30\n __cgroup_bpf_run_filter_sysctl+0x74d/0xc30\n ? __pfx___cgroup_bpf_run_filter_sysctl+0x10/0x10\n ? srso_return_thunk+0x5/0x5f\n ? __kvmalloc_node_noprof+0x345/0x870\n ? proc_sys_call_handler+0x250/0x480\n ? srso_return_thunk+0x5/0x5f\n proc_sys_call_handler+0x3a2/0x480\n ? __pfx_proc_sys_call_handler+0x10/0x10\n ? srso_return_thunk+0x5/0x5f\n ? selinux_file_permission+0x39f/0x500\n ? srso_return_thunk+0x5/0x5f\n ? lock_is_held_type+0x9e/0x120\n vfs_write+0x98e/0x1000\n ...\n \u003c/TASK\u003e\n\nWith this fix applied on top of the same test setup, rerunning the\nreproducer with fail-nth=1 yields no corresponding Oops reports.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63809",
"url": "https://www.suse.com/security/cve/CVE-2026-63809"
},
{
"category": "external",
"summary": "SUSE Bug 1272296 for CVE-2026-63809",
"url": "https://bugzilla.suse.com/1272296"
},
{
"category": "external",
"summary": "SUSE Bug 1272624 for CVE-2026-63809",
"url": "https://bugzilla.suse.com/1272624"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63809"
},
{
"cve": "CVE-2026-63821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63821"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: usb: fix memory leaks on USB write failures\n\nWhen rtw_usb_write_port() fails to submit a USB Request Block (URB)\n(e.g., due to device disconnect or ENOMEM), the completion callback is\nnever executed.\n\nCurrently, the driver ignores the return value of rtw_usb_write_port()\nin rtw_usb_write_data() and rtw_usb_tx_agg_skb(). Because these\nfunctions rely on the completion callback to free the socket buffers\n(skbs) and the transaction control block (txcb), a submission failure\nresults in:\n1. A memory leak of the allocated skb in rtw_usb_write_data().\n2. A memory leak of the txcb structure and all aggregated skbs in\n rtw_usb_tx_agg_skb().\n\nFix this by checking the return value of rtw_usb_write_port(). If it\nfails, explicitly free the skb in rtw_usb_write_data(), and properly\npurge the tx_ack_queue and free the txcb in rtw_usb_tx_agg_skb().\n\nThe issue was discovered in practice during device disconnect/reconnect\nscenarios and memory pressure conditions. Tested by verifying normal TX\noperation continues after the fix without regressions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63821",
"url": "https://www.suse.com/security/cve/CVE-2026-63821"
},
{
"category": "external",
"summary": "SUSE Bug 1271967 for CVE-2026-63821",
"url": "https://bugzilla.suse.com/1271967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63821"
},
{
"cve": "CVE-2026-63822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63822"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: fix warning when unbinding\n\nIf there is an error during some initialization related to firmware,\nthe buffers dp-\u003etx_ring[i].tx_status are released.\nHowever this is released again when the device is unbinded (ath11k_pci),\nand we get:\nWARNING: CPU: 0 PID: 6231 at mm/slub.c:4368 free_large_kmalloc+0x57/0x90\nCall Trace:\nfree_large_kmalloc\nath11k_dp_free\nath11k_core_deinit\nath11k_pci_remove\n...\n\nThe issue is always reproducible from a VM because the MSI addressing\ninitialization is failing.\n\nIn order to fix the issue, just set the buffers to NULL after releasing in\norder to avoid the double free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63822",
"url": "https://www.suse.com/security/cve/CVE-2026-63822"
},
{
"category": "external",
"summary": "SUSE Bug 1272187 for CVE-2026-63822",
"url": "https://bugzilla.suse.com/1272187"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63822"
},
{
"cve": "CVE-2026-63824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63824"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: fix overflow in keyctl_pkey_params_get_2()\n\nThe length for the internal output buffer is calculated incorrectly, which\ncan result overflow when a too small buffer is provided.\n\nFix the bug by allocating internal output with the size of the maximum\nlength of the cryptographic primitive instead of caller provided size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63824",
"url": "https://www.suse.com/security/cve/CVE-2026-63824"
},
{
"category": "external",
"summary": "SUSE Bug 1272180 for CVE-2026-63824",
"url": "https://bugzilla.suse.com/1272180"
},
{
"category": "external",
"summary": "SUSE Bug 1272191 for CVE-2026-63824",
"url": "https://bugzilla.suse.com/1272191"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63824"
},
{
"cve": "CVE-2026-63826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63826"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: fix use-after-free in store_modes()\n\nstore_modes() replaces a framebuffer\u0027s modelist with modes from userspace.\nOn success it frees the old modelist with fb_destroy_modelist(). Two\nfields still point into that freed list.\n\nOne pointer is fb_display[i].mode, the mode a console is using.\nfbcon_new_modelist() moves these pointers to the new list. It only does so\nfor consoles still mapped to the framebuffer. An unmapped console is\nskipped and keeps its stale pointer. Unbinding fbcon, for example, sets\ncon2fb_map[i] to -1 but leaves fb_display[i].mode set. An\nFBIOPUT_VSCREENINFO ioctl with FB_ACTIVATE_INV_MODE later reaches\nfbcon_mode_deleted(). That function reads the stale fb_display[i].mode\nthrough fb_mode_is_equal(). The read is a use-after-free.\n\nThe other pointer is fb_info-\u003emode, the current mode. It is set through\nthe mode sysfs attribute. store_modes() does not update fb_info-\u003emode, so\nit is left pointing into the freed list. show_mode(), the attribute\u0027s read\nhandler, dereferences the stale fb_info-\u003emode through mode_string(). The\nread is a use-after-free.\n\nClear both pointers before freeing the list. Commit a1f305893074 (\"fbcon:\nSet fb_display[i]-\u003emode to NULL when the mode is released\") added the\nhelper fbcon_delete_modelist(). It clears every fb_display[i].mode that\npoints into a given list. So far it is called only from the unregister\npath. Call it from store_modes() too, and set fb_info-\u003emode to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63826",
"url": "https://www.suse.com/security/cve/CVE-2026-63826"
},
{
"category": "external",
"summary": "SUSE Bug 1272183 for CVE-2026-63826",
"url": "https://bugzilla.suse.com/1272183"
},
{
"category": "external",
"summary": "SUSE Bug 1272201 for CVE-2026-63826",
"url": "https://bugzilla.suse.com/1272201"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63826"
},
{
"cve": "CVE-2026-63829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63829"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink\n\nA tunnel changelink() operates on at most two netns, dev_net(dev) and\nthe tunnel link netns t-\u003enet. They differ once the device is created in\nor moved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nAdd rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in\nnet/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is\nskipped when the link netns is dev_net(dev), where the rtnl path already\nchecked it. The other patches in this series use the same helper.\n\nGate ipgre_changelink() and erspan_changelink() with it, at the top of\nthe op before any attribute is parsed, because the parsers update live\ntunnel fields first. ipgre_netlink_parms() sets t-\u003ecollect_md before\nip_tunnel_changelink() runs.\n\nCommit 8b484efd5cb4 (\"ip6: vti: Use ip6_tnl.net in\nvti6_siocdevprivate().\") added the same check on the ioctl path. This\nadds it on RTM_NEWLINK.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63829",
"url": "https://www.suse.com/security/cve/CVE-2026-63829"
},
{
"category": "external",
"summary": "SUSE Bug 1272176 for CVE-2026-63829",
"url": "https://bugzilla.suse.com/1272176"
},
{
"category": "external",
"summary": "SUSE Bug 1272205 for CVE-2026-63829",
"url": "https://bugzilla.suse.com/1272205"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63829"
},
{
"cve": "CVE-2026-63836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63836"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: tp_meter: avoid divide-by-zero for dec_cwnd\n\nThe cwnd is always MSS \u003c= cwnd \u003c= 0x20000000. But the calculation in\nbatadv_tp_update_cwnd() assumes unsigned 32 bit arithmetics.\n\n ((mss * 8) ** 2) / (cwnd * 8)\n\nIn case cwnd is actually 0x20000000, it will be shifted by 3 bit to the\nleft end up at 0x100000000 or U32_MAX + 1. It will therefore wrap around\nand be 0 - resulting in:\n\n ((mss * 8) ** 2) / 0\n\nThis is of course invalid and cannot be calculated. The calculation should\nmust be simplified to avoid this overflow:\n\n (mss ** 2) * 8 / cwnd\n\nIt will keep the precision enhancement from the scaling (by 8) but avoid\nthe overflow in the divisor.\n\nIn theory, there could still be an overflow in the dividend. It is at the\nmoment fixed to BATADV_TP_PLEN in batadv_tp_recv_ack() - so it is not an\nimminent problem. But allowing it to use the whole u32 bit range, would\nmean that it can still use up to 67 bits. To keep this calculation safe for\n32 bit arithmetic, mss must never use more than floor((32 - 3) / 2) bits -\nor in other words: must never be larger than 16383.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63836",
"url": "https://www.suse.com/security/cve/CVE-2026-63836"
},
{
"category": "external",
"summary": "SUSE Bug 1272246 for CVE-2026-63836",
"url": "https://bugzilla.suse.com/1272246"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63836"
},
{
"cve": "CVE-2026-63843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63843"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit f05d0a4f21fc720116d6e238f23308b199891058)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63843",
"url": "https://www.suse.com/security/cve/CVE-2026-63843"
},
{
"category": "external",
"summary": "SUSE Bug 1272361 for CVE-2026-63843",
"url": "https://bugzilla.suse.com/1272361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63843"
},
{
"cve": "CVE-2026-63844",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63844"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 2f6afc97d259d530f4f86c7743efbc573a8da927)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63844",
"url": "https://www.suse.com/security/cve/CVE-2026-63844"
},
{
"category": "external",
"summary": "SUSE Bug 1272362 for CVE-2026-63844",
"url": "https://bugzilla.suse.com/1272362"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63844"
},
{
"cve": "CVE-2026-63845",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63845"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 8d0cac9478a3f046279c657d6a2545de49ae675a)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63845",
"url": "https://www.suse.com/security/cve/CVE-2026-63845"
},
{
"category": "external",
"summary": "SUSE Bug 1272360 for CVE-2026-63845",
"url": "https://bugzilla.suse.com/1272360"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63845"
},
{
"cve": "CVE-2026-63846",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63846"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 4d7d774f100efb5089c86a1fb8c5bf47c63fc9ef)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63846",
"url": "https://www.suse.com/security/cve/CVE-2026-63846"
},
{
"category": "external",
"summary": "SUSE Bug 1272373 for CVE-2026-63846",
"url": "https://bugzilla.suse.com/1272373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63846"
},
{
"cve": "CVE-2026-63847",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63847"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63847",
"url": "https://www.suse.com/security/cve/CVE-2026-63847"
},
{
"category": "external",
"summary": "SUSE Bug 1272374 for CVE-2026-63847",
"url": "https://bugzilla.suse.com/1272374"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63847"
},
{
"cve": "CVE-2026-63848",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63848"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 96179da0c6b059eb31706a0abe8dd6381c533143)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63848",
"url": "https://www.suse.com/security/cve/CVE-2026-63848"
},
{
"category": "external",
"summary": "SUSE Bug 1272380 for CVE-2026-63848",
"url": "https://bugzilla.suse.com/1272380"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63848"
},
{
"cve": "CVE-2026-63851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63851"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring\n\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n\n(cherry picked from commit 084d94ac93707bdda07efb5cee786f632de4219b)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63851",
"url": "https://www.suse.com/security/cve/CVE-2026-63851"
},
{
"category": "external",
"summary": "SUSE Bug 1272384 for CVE-2026-63851",
"url": "https://bugzilla.suse.com/1272384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63851"
},
{
"cve": "CVE-2026-63852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63852"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring\n\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n\n(cherry picked from commit ff1a5a125c5a70c328806b9bc01d7d942cf3f9aa)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63852",
"url": "https://www.suse.com/security/cve/CVE-2026-63852"
},
{
"category": "external",
"summary": "SUSE Bug 1272387 for CVE-2026-63852",
"url": "https://bugzilla.suse.com/1272387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63852"
},
{
"cve": "CVE-2026-63853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63853"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring\n\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n\n(cherry picked from commit fd852c048b46f9825e904a4f3f4538fe9d8827d9)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63853",
"url": "https://www.suse.com/security/cve/CVE-2026-63853"
},
{
"category": "external",
"summary": "SUSE Bug 1272389 for CVE-2026-63853",
"url": "https://bugzilla.suse.com/1272389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63853"
},
{
"cve": "CVE-2026-63854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63854"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings\n\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n\n(cherry picked from commit 663bed3c7b8b9a7624b0d95d300ddae034ad0614)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63854",
"url": "https://www.suse.com/security/cve/CVE-2026-63854"
},
{
"category": "external",
"summary": "SUSE Bug 1272406 for CVE-2026-63854",
"url": "https://bugzilla.suse.com/1272406"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63854"
},
{
"cve": "CVE-2026-63855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63855"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings\n\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n\n(cherry picked from commit efc9dd5590894109bce9a0bfe1fa5592dd6b20b1)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63855",
"url": "https://www.suse.com/security/cve/CVE-2026-63855"
},
{
"category": "external",
"summary": "SUSE Bug 1272489 for CVE-2026-63855",
"url": "https://bugzilla.suse.com/1272489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63855"
},
{
"cve": "CVE-2026-63856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63856"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings\n\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n\n(cherry picked from commit e2b5499fca55f1a32960a311bbb62e35891eaf73)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63856",
"url": "https://www.suse.com/security/cve/CVE-2026-63856"
},
{
"category": "external",
"summary": "SUSE Bug 1272492 for CVE-2026-63856",
"url": "https://bugzilla.suse.com/1272492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63856"
},
{
"cve": "CVE-2026-63861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63861"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mtk-snfi: unregister ECC engine on probe failure and remove() callback\n\nmtk_snand_probe() registers the on-host NAND ECC engine, but teardown was\nmissing from both probe unwind and remove-time cleanup. Add a devm cleanup\naction after successful registration so\nnand_ecc_unregister_on_host_hw_engine() runs automatically on probe\nfailures and during device removal.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63861",
"url": "https://www.suse.com/security/cve/CVE-2026-63861"
},
{
"category": "external",
"summary": "SUSE Bug 1272434 for CVE-2026-63861",
"url": "https://bugzilla.suse.com/1272434"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63861"
},
{
"cve": "CVE-2026-63862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63862"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found\n\nIn mtk_pcie_setup_irq(), the IRQ domains are allocated before the\ncontroller\u0027s IRQ is fetched. If the latter fails, the function\ndirectly returns an error, without cleaning up the allocated domains.\n\nHence, reverse the order so that the IRQ domains are allocated after the\ncontroller\u0027s IRQ is found.\n\nThis was flagged by Sashiko during a review of \"[PATCH v6 0/7] PCI:\nmediatek-gen3: add power control support\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63862",
"url": "https://www.suse.com/security/cve/CVE-2026-63862"
},
{
"category": "external",
"summary": "SUSE Bug 1271813 for CVE-2026-63862",
"url": "https://bugzilla.suse.com/1271813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-63862"
},
{
"cve": "CVE-2026-63869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63869"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap\n\nWhen parsing the radiotap header of an injected frame,\nieee80211_parse_tx_radiotap() uses the IEEE80211_RADIOTAP_ANTENNA value\ndirectly as a shift count:\n\n\tinfo-\u003econtrol.antennas |= BIT(*iterator.this_arg);\n\n*iterator.this_arg is an 8-bit value taken straight from the frame\nsupplied by userspace, so BIT() can be asked to shift by up to 255. That\nis undefined behaviour on the unsigned long and is reported by UBSAN:\n\n UBSAN: shift-out-of-bounds in net/mac80211/tx.c:2174:30\n shift exponent 235 is too large for 64-bit type \u0027unsigned long\u0027\n Call Trace:\n ieee80211_parse_tx_radiotap+0xadb/0x1950 net/mac80211/tx.c:2174\n ieee80211_monitor_start_xmit+0xb1f/0x1250 net/mac80211/tx.c:2451\n ...\n packet_sendmsg+0x3eb6/0x50f0 net/packet/af_packet.c:3109\n\ninfo-\u003econtrol.antennas is a 2-bit bitmap (u8 antennas:2), so only antenna\nindices 0 and 1 can ever be represented. Ignore any larger value instead\nof shifting out of bounds.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63869",
"url": "https://www.suse.com/security/cve/CVE-2026-63869"
},
{
"category": "external",
"summary": "SUSE Bug 1272500 for CVE-2026-63869",
"url": "https://bugzilla.suse.com/1272500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63869"
},
{
"cve": "CVE-2026-63882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63882"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: fix NULL pointer bug in svm_range_set_attr\n\nThe process_info could be NULL if user doesn\u0027t call kfd_ioctl_acquire_vm\nbefore calling kfd_ioctl_svm.\n\n(cherry picked from commit 83a26c812e0529eb040d31a76f73e33e637243d4)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63882",
"url": "https://www.suse.com/security/cve/CVE-2026-63882"
},
{
"category": "external",
"summary": "SUSE Bug 1271937 for CVE-2026-63882",
"url": "https://bugzilla.suse.com/1271937"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63882"
},
{
"cve": "CVE-2026-63884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Fix potential UAF in TTM object purge\n\nTLDR: The bo-\u003ettm object might be changed by calling ttm_bo_validate(),\n move casting it to an i915_tt object later to actually get the right\n pointer.\n\nA user reported hitting the following bug under heavy use on DG2:\n\n[26620.095550] Oops: general protection fault, probably for non-canonical address 0xa56b6b6b6b6b6b8b: 0000 1 SMP NOPTI\n[26620.095556] CPU: 2 UID: 0 PID: 631 Comm: Xorg Not tainted 6.18.8 #1 PREEMPT(lazy)\n[26620.095558] Hardware name: ASRock B850M Steel Legend WiFi/B850M Steel Legend WiFi, BIOS 3.50 09/18/2025\n[26620.095559] RIP: 0010:i915_ttm_purge+0x84/0x100 [i915]\n[26620.095604] Code: 00 00 00 48 8d 54 24 10 48 89 e6 48 89 fb e8 83 aa ae ff 85 c0 75 6f 48 83 bb a8 01 00 00 00 74 2c 48 8b 45 78 48 85 c0 74 23 \u003c48\u003e 8b 78 20 48 c7 c2 ff ff ff ff 31 f6 e8 7a 73 e3 e0 48 8b 7d 78\n[26620.095605] RSP: 0018:ffffc90005fd7430 EFLAGS: 00010282\n[26620.095607] RAX: a56b6b6b6b6b6b6b RBX: ffff8881f46c3dc0 RCX: 0000000000000000\n[26620.095608] RDX: 0000000000000000 RSI: 0000000000000246 RDI: 00000000ffffffff\n[26620.095609] RBP: ffff888289610f00 R08: 0000000000000001 R09: ffff88823b022000\n[26620.095609] R10: ffff888103029b28 R11: ffff8881fc7f3800 R12: ffff88810b6150d0\n[26620.095609] R13: ffff888289610f00 R14: 0000000000000000 R15: ffff8881f46c3dc0\n[26620.095610] FS: 00007f1004d86900(0000) GS:ffff88901c858000(0000) knlGS:0000000000000000\n[26620.095611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[26620.095611] CR2: 00007f0fdf489000 CR3: 000000035b0c1000 CR4: 0000000000750ef0\n[26620.095612] PKRU: 55555554\n[26620.095612] Call Trace:\n[26620.095615] \u003cTASK\u003e\n[26620.095615] i915_ttm_move+0x2b9/0x420 [i915]\n[26620.095642] ? ttm_tt_init+0x65/0x80 [ttm]\n[26620.095644] ? i915_ttm_tt_create+0xc6/0x150 [i915]\n[26620.095667] ttm_bo_handle_move_mem+0xb6/0x160 [ttm]\n[26620.095669] ttm_bo_evict+0x100/0x150 [ttm]\n[26620.095671] ? preempt_count_add+0x64/0xa0\n[26620.095673] ? _raw_spin_lock+0xe/0x30\n[26620.095675] ? _raw_spin_unlock+0xd/0x30\n[26620.095675] ? i915_gem_object_evictable+0xb7/0xd0 [i915]\n[26620.095704] ttm_bo_evict_cb+0x6e/0xd0 [ttm]\n[26620.095705] ttm_lru_walk_for_evict+0xa6/0x200 [ttm]\n[26620.095708] ttm_bo_alloc_resource+0x185/0x4f0 [ttm]\n[26620.095709] ? init_object+0x62/0xd0\n[26620.095712] ttm_bo_validate+0x7a/0x180 [ttm]\n[26620.095713] ? _raw_spin_unlock_irqrestore+0x16/0x30\n[26620.095714] __i915_ttm_get_pages+0xb0/0x170 [i915]\n[26620.095737] i915_ttm_get_pages+0x9f/0x150 [i915]\n[26620.095759] ? i915_gem_do_execbuffer+0xedc/0x2b40 [i915]\n[26620.095786] ? alloc_debug_processing+0xd0/0x100\n[26620.095787] ? _raw_spin_unlock_irqrestore+0x16/0x30\n[26620.095788] ? i915_vma_instance+0xa0/0x4e0 [i915]\n[26620.095822] __i915_gem_object_get_pages+0x2f/0x40 [i915]\n[26620.095848] i915_vma_pin_ww+0x706/0x980 [i915]\n[26620.095875] ? i915_gem_do_execbuffer+0xedc/0x2b40 [i915]\n[26620.095904] eb_validate_vmas+0x170/0xa00 [i915]\n[26620.095930] i915_gem_do_execbuffer+0x1201/0x2b40 [i915]\n[26620.095953] ? alloc_debug_processing+0xd0/0x100\n[26620.095954] ? _raw_spin_unlock_irqrestore+0x16/0x30\n[26620.095955] ? i915_gem_execbuffer2_ioctl+0xc9/0x240 [i915]\n[26620.095977] ? __wake_up_sync_key+0x32/0x50\n[26620.095979] ? i915_gem_execbuffer2_ioctl+0xc9/0x240 [i915]\n[26620.096001] ? __slab_alloc.isra.0+0x67/0xc0\n[26620.096003] i915_gem_execbuffer2_ioctl+0x11a/0x240 [i915]\n\nResults from decode_stacktrace.sh pointed to dereference of a file pointer\nfield of a i915 TTM page vector container associated with an object being\npurged on eviction. That path is taken when the object is marked as no\nlonger needed.\n\nCode analysis revealed a possibility of the i915 TTM page vector container\nbeing replaced with a new instance inside a function that purges content\nof the object, should it be still busy. That function is called,\nindirectly via a more general function that changes the object\u0027s placement\nand caching policy,\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63884",
"url": "https://www.suse.com/security/cve/CVE-2026-63884"
},
{
"category": "external",
"summary": "SUSE Bug 1272573 for CVE-2026-63884",
"url": "https://bugzilla.suse.com/1272573"
},
{
"category": "external",
"summary": "SUSE Bug 1272587 for CVE-2026-63884",
"url": "https://bugzilla.suse.com/1272587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63884"
},
{
"cve": "CVE-2026-63892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63892"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: property: Reject dir_len \u003c 4 to prevent size_t underflow\n\nOn the non-root path, __tb_property_parse_dir() takes dir_len from\nentry-\u003elength (u16 widened to size_t). Two distinct OOB conditions\nfollow when entry-\u003elength \u003c 4:\n\n1. The non-root path begins with kmemdup(\u0026block[dir_offset],\n sizeof(*dir-\u003euuid), ...) which always reads 4 dwords from\n dir_offset. tb_property_entry_valid() only enforces\n dir_offset + entry-\u003elength \u003c= block_len, so a crafted entry\n with dir_offset close to the end of the property block and\n entry-\u003elength in 0..3 passes that gate but lets the UUID copy\n run off the block (e.g. dir_offset = 497, dir_len = 3 in a\n 500-dword block reads block[497..501]).\n\n2. After the kmemdup, content_len = dir_len - 4 underflows size_t\n to ~SIZE_MAX, nentries becomes SIZE_MAX / 4, and the entry\n walk runs OOB on each iteration until an entry fails\n validation or the kernel oopses on an unmapped page.\n\nReject dir_len \u003c 4 on the non-root path *before* the UUID kmemdup,\nwhich closes both holes.\n\nAlso move INIT_LIST_HEAD(\u0026dir-\u003eproperties) up to immediately after\nthe dir allocation so the new error-return path (and the existing\nuuid-alloc failure path) calling tb_property_free_dir() sees a\nwalkable list rather than the zero-initialized NULL next/prev that\nlist_for_each_entry_safe() would oops on.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63892",
"url": "https://www.suse.com/security/cve/CVE-2026-63892"
},
{
"category": "external",
"summary": "SUSE Bug 1272591 for CVE-2026-63892",
"url": "https://bugzilla.suse.com/1272591"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63892"
},
{
"cve": "CVE-2026-63893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63893"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: property: Reject u32 wrap in tb_property_entry_valid()\n\nentry-\u003evalue is u32 and entry-\u003elength is u16; the sum is performed in\nu32 and wraps. A malicious XDomain peer can pick\nvalue = 0xffffff00, length = 0x100 so the sum 0x100000000 wraps to 0\nand passes the \u003e block_len check. tb_property_parse() then passes\nentry-\u003evalue to parse_dwdata() as a dword offset into the property\nblock, reading attacker-directed memory far past the allocation.\n\nFor TEXT-typed entries with the \"deviceid\" or \"vendorid\" keys this\nlands in xd-\u003edevice_name / xd-\u003evendor_name and is readable back via\nthe per-XDomain device_name / vendor_name sysfs attributes; the leak\nis NUL-bounded (kstrdup() stops at the first zero byte) and\nuntargeted (the attacker picks a delta, not an absolute address).\nDATA-typed entries are parsed into property-\u003evalue.data but not\ngenerically surfaced to userspace.\n\nUse check_add_overflow() so a wrapped sum is rejected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63893",
"url": "https://www.suse.com/security/cve/CVE-2026-63893"
},
{
"category": "external",
"summary": "SUSE Bug 1272607 for CVE-2026-63893",
"url": "https://bugzilla.suse.com/1272607"
},
{
"category": "external",
"summary": "SUSE Bug 1272615 for CVE-2026-63893",
"url": "https://bugzilla.suse.com/1272615"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63893"
},
{
"cve": "CVE-2026-63895",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63895"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_fs: copy only received bytes on short ep0 read\n\nffs_ep0_read() allocates its control-OUT data buffer with\nkmalloc() (not kzalloc) at the Length value from the Setup\npacket, then copies that full len to userspace regardless of\nhow many bytes were actually received:\n\n data = kmalloc(len, GFP_KERNEL);\n ...\n ret = __ffs_ep0_queue_wait(ffs, data, len);\n if ((ret \u003e 0) \u0026\u0026 (copy_to_user(buf, data, len)))\n ret = -EFAULT;\n\n__ffs_ep0_queue_wait() returns req-\u003eactual, which on a short\ncontrol OUT transfer is strictly less than len. The\ncopy_to_user() call still copies len bytes, so on a short OUT\nthe last (len - ret) bytes of the kmalloc() buffer --\nuninitialised slab residue -- are delivered to the FunctionFS\ndaemon.\n\nShort ep0 OUT completions are specified USB control-transfer\nbehavior and are produced by in-tree UDCs:\n\n * dwc2 continues on req-\u003eactual \u003c req-\u003elength for ep0 DATA OUT\n (short-not-ok is the only ep0-OUT stall path).\n * aspeed_udc ends ep0 OUT on rx_len \u003c ep-\u003eep.maxpacket.\n * renesas_usbf logs \"ep0 short packet\" and completes the\n request.\n * dwc3 stalls on short IN but not on short OUT.\n\nA short ep0 OUT is therefore not evidence of a broken UDC; it is\na normal condition f_fs has to cope with. The sibling gadgetfs\nimplementation in drivers/usb/gadget/legacy/inode.c already does\nthis correctly via min(len, dev-\u003ereq-\u003eactual) before\ncopy_to_user(). This patch brings f_fs.c to the same safe\npattern rather than trimming at a defensive layer.\n\nThe bug is reached from the FunctionFS device node, which in\nreal deployments is owned by the privileged gadget daemon\n(adbd, UMS, composite gadget services, etc.); it is not\nreachable from unprivileged userspace. Linux host stacks\nnormally reject short-wLength control OUTs before they reach\nthe gadget, so reproducing this required a build that\nbypasses that host-side check. With the bypass in place, a\n1-byte payload on a 64-byte Setup produces 63 bytes of\nnon-canary slab residue in the daemon\u0027s read buffer.\n\nFix by copying only ret (actually received) bytes to\nuserspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63895",
"url": "https://www.suse.com/security/cve/CVE-2026-63895"
},
{
"category": "external",
"summary": "SUSE Bug 1272614 for CVE-2026-63895",
"url": "https://bugzilla.suse.com/1272614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-63895"
},
{
"cve": "CVE-2026-63896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: composite: fix integer underflow in WebUSB GET_URL handling\n\nThe WebUSB GET_URL handler in composite_setup() narrows\nlanding_page_length to fit the host-supplied wLength using\n\n\tlanding_page_length = w_length\n\t\t- WEBUSB_URL_DESCRIPTOR_HEADER_LENGTH + landing_page_offset;\n\nIf wLength is smaller than WEBUSB_URL_DESCRIPTOR_HEADER_LENGTH the\nunsigned subtraction wraps, and the subsequent\n\n\tmemcpy(url_descriptor-\u003eURL,\n\t cdev-\u003elanding_page + landing_page_offset,\n\t landing_page_length - landing_page_offset);\n\nends up copying close to UINT_MAX bytes from cdev-\u003elanding_page into\ncdev-\u003ereq-\u003ebuf. KASAN reports a slab-out-of-bounds in composite_setup\non the kmalloc-2k gadget_info allocation, and FORTIFY_SOURCE traps the\nmemcpy as a 4294967293-byte field-spanning write into\nurl_descriptor-\u003eURL (size 252).\n\nA USB host can reach this from a single SETUP packet against any\ngadget that has webusb/use=1 and a landingPage configured.\n\nHandle the small-wLength case before the math: when the host requested\nfewer bytes than the URL descriptor header, only the header is\nmeaningful and no URL bytes need to be copied. Setting\nlanding_page_length to landing_page_offset makes the existing memcpy a\nno-op and leaves the descriptor returned to the host unchanged for all\nlarger wLength values.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63896",
"url": "https://www.suse.com/security/cve/CVE-2026-63896"
},
{
"category": "external",
"summary": "SUSE Bug 1272617 for CVE-2026-63896",
"url": "https://bugzilla.suse.com/1272617"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63896"
},
{
"cve": "CVE-2026-63897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63897"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: mct_u232: fix missing interrupt-in transfer sanity check\n\nAdd the missing sanity check on the size of interrupt-in transfers to\navoid parsing stale or uninitialised slab data (and leaking it to user\nspace).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63897",
"url": "https://www.suse.com/security/cve/CVE-2026-63897"
},
{
"category": "external",
"summary": "SUSE Bug 1272642 for CVE-2026-63897",
"url": "https://bugzilla.suse.com/1272642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-63897"
},
{
"cve": "CVE-2026-63899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63899"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: mxuport: fix memory corruption with small endpoint\n\nMake sure that the bulk-out endpoint max packet size is at least eight\nbytes to avoid user-controlled slab corruption should a malicious device\nreport a smaller size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63899",
"url": "https://www.suse.com/security/cve/CVE-2026-63899"
},
{
"category": "external",
"summary": "SUSE Bug 1272494 for CVE-2026-63899",
"url": "https://bugzilla.suse.com/1272494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63899"
},
{
"cve": "CVE-2026-63900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63900"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: keyspan: fix missing indat transfer sanity check\n\nAdd the missing sanity check on the size of usa49wg indat transfers to\navoid parsing stale or uninitialised slab data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63900",
"url": "https://www.suse.com/security/cve/CVE-2026-63900"
},
{
"category": "external",
"summary": "SUSE Bug 1272499 for CVE-2026-63900",
"url": "https://bugzilla.suse.com/1272499"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63900"
},
{
"cve": "CVE-2026-63901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63901"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: digi_acceleport: fix memory corruption with small endpoints\n\nAdd the missing bulk-out buffer size sanity checks to avoid\nout-of-bounds memory accesses or slab corruption should a malicious\ndevice report smaller buffers than expected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63901",
"url": "https://www.suse.com/security/cve/CVE-2026-63901"
},
{
"category": "external",
"summary": "SUSE Bug 1272501 for CVE-2026-63901",
"url": "https://bugzilla.suse.com/1272501"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63901"
},
{
"cve": "CVE-2026-63902",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63902"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: cypress_m8: validate interrupt packet headers\n\ncypress_read_int_callback() parses the interrupt-in buffer according to\nthe selected Cypress packet format. Format 1 has a two-byte status/count\nheader and format 2 has a one-byte combined status/count header. The\nusb-serial core sizes the interrupt-in buffer from the endpoint\ndescriptor\u0027s wMaxPacketSize, and successful interrupt transfers can\ncomplete short when URB_SHORT_NOT_OK is not set.\n\nCheck that the completed packet contains the selected header before\nreading it. Malformed short reports are ignored and the interrupt URB is\nresubmitted through the existing retry path, preventing out-of-bounds\nheader-byte reads.\n\nKASAN report as below:\nKASAN slab-out-of-bounds in cypress_read_int_callback+0x240/0x7f0\nRead of size 1\nCall trace:\n cypress_read_int_callback() (drivers/usb/serial/cypress_m8.c:1009)\n __usb_hcd_giveback_urb()\n dummy_timer()\n\n[ johan: use constants in header length sanity checks ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63902",
"url": "https://www.suse.com/security/cve/CVE-2026-63902"
},
{
"category": "external",
"summary": "SUSE Bug 1272517 for CVE-2026-63902",
"url": "https://bugzilla.suse.com/1272517"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63902"
},
{
"cve": "CVE-2026-63903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63903"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: belkin_sa: validate interrupt status length\n\nThe Belkin interrupt callback treats interrupt data as a four-byte\nstatus report and reads LSR/MSR fields at offsets 2 and 3. The\ninterrupt-in buffer length is derived from endpoint wMaxPacketSize, and\nshort interrupt transfers may complete successfully with a smaller\nactual_length.\n\nCheck the completed interrupt packet length before parsing status\nfields so short interrupt endpoints and short successful packets are\nignored instead of causing out-of-bounds or stale status-byte reads.\n\nKASAN report as below:\n\nBUG: KASAN: slab-out-of-bounds in belkin_sa_read_int_callback()\nRead of size 1\nCall trace:\n belkin_sa_read_int_callback() (drivers/usb/serial/belkin_sa.c:202)\n __usb_hcd_giveback_urb() (drivers/usb/core/hcd.c:1630)\n dummy_timer() (?:?)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63903",
"url": "https://www.suse.com/security/cve/CVE-2026-63903"
},
{
"category": "external",
"summary": "SUSE Bug 1272522 for CVE-2026-63903",
"url": "https://bugzilla.suse.com/1272522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63903"
},
{
"cve": "CVE-2026-63904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: usbtmc: check URB actual_length for interrupt-IN notifications\n\nUSBTMC devices can use an optional interrupt endpoint for notification\nmessages. These typically contain two-byte headers indicating the\npayload format, but the driver does not check if these headers are\npresent before accessing the data buffers. In cases where the URB\nactual_length is not enough to fit these headers, the driver will either\ncause an out-of-bounds read, or consume stale leftover data from a\nprevious notification.\n\nFix by checking if actual_data contains enough bytes for the headers,\notherwise resubmit URB to the interrupt endpoint.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63904",
"url": "https://www.suse.com/security/cve/CVE-2026-63904"
},
{
"category": "external",
"summary": "SUSE Bug 1272523 for CVE-2026-63904",
"url": "https://bugzilla.suse.com/1272523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63904"
},
{
"cve": "CVE-2026-63905",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63905"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusbip: vudc: Fix use after free bug in vudc_remove due to race condition\n\nThis patch follows up Zheng Wang\u0027s 2023 report of a use-after-free in\nvudc_remove(). The original thread stalled on Shuah Khan\u0027s request for\nruntime testing of the unplug/unbind path. This patch supplies that\ntesting and keeps Zheng\u0027s original fix shape.\n\nIn vudc_probe(), v_init_timer() binds udc-\u003etr_timer.timer to v_timer().\nusbip_sockfd_store() starts the timer via v_start_timer()/v_kick_timer().\nvudc_remove() can then free the containing struct vudc while the timer is\nstill pending or executing.\n\nKASAN confirms the race on an unpatched x86_64 QEMU guest with\nCONFIG_KASAN=y, CONFIG_USBIP_VUDC=y, CONFIG_USB_ZERO=y, and a tight loop\nthat repeatedly writes a socket fd to usbip_sockfd, closes the socket\npair, and unbinds/rebinds usbip-vudc.0:\n\n BUG: KASAN: slab-use-after-free in __run_timer_base.part.0+0x8ba/0x8e0\n Write of size 8 at addr ffff888001b80740 by task trigger_and_unb/239\n Allocated by task 239:\n vudc_probe+0x4d/0xaa0\n Freed by task 239:\n kfree+0x18f/0x520\n device_release_driver_internal+0x388/0x540\n unbind_store+0xd9/0x100\n\nThis lands in the timer core rather than v_timer() itself because the\nembedded timer_list is being walked after its containing struct vudc has\nalready been freed. The underlying lifetime bug is the same one Zheng\nreported.\n\nWith v_stop_timer() called from vudc_remove() and the timer deleted\nsynchronously, the same harness completed 5000 bind/unbind iterations\nwith no KASAN report.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63905",
"url": "https://www.suse.com/security/cve/CVE-2026-63905"
},
{
"category": "external",
"summary": "SUSE Bug 1272578 for CVE-2026-63905",
"url": "https://bugzilla.suse.com/1272578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63905"
},
{
"cve": "CVE-2026-63908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem\n\nWhen a configuration file provides an object size that is larger than the\ndriver\u0027s known mxt_obj_size(object), the driver intends to discard the\nextra bytes.\n\nThe loop iterates using for (i = 0; i \u003c size; i++). Inside the loop, the\ncondition to skip processing extra bytes is:\n\n if (i \u003e mxt_obj_size(object))\n continue;\n\nSince i is a 0-based index, the valid indices for the object are 0 through\nmxt_obj_size(object) - 1.\n\nWhen i == mxt_obj_size(object), the condition evaluates to false, and the\ncode processes the byte instead of discarding it.\n\nThis causes the code to calculate byte_offset = reg + i - cfg-\u003estart_ofs\nand writes the byte there, overwriting exactly one byte of the adjacent\ninstance or object.\n\nUpdate the boundary check to skip extra bytes correctly by using \u003e=.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63908",
"url": "https://www.suse.com/security/cve/CVE-2026-63908"
},
{
"category": "external",
"summary": "SUSE Bug 1272690 for CVE-2026-63908",
"url": "https://bugzilla.suse.com/1272690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-63908"
},
{
"cve": "CVE-2026-63912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63912"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: esp: restore combined single-frag length gate\n\nThe ESP out-of-place fast path appends the trailer in esp_output_head()\nbefore esp_output_tail() allocates the destination page frag. The\nhead-side gate currently checks skb-\u003edata_len and tailen separately, but\nthe tail code allocates a single destination frag from the combined\npost-trailer skb-\u003edata_len.\n\nReject the page-frag fast path when the combined aligned length exceeds a\npage. Otherwise skb_page_frag_refill() may fall back to a single page while\nthe destination sg still spans the combined skb-\u003edata_len.\n\nRestore this combined-length page gate for both IPv4 and IPv6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63912",
"url": "https://www.suse.com/security/cve/CVE-2026-63912"
},
{
"category": "external",
"summary": "SUSE Bug 1272836 for CVE-2026-63912",
"url": "https://bugzilla.suse.com/1272836"
},
{
"category": "external",
"summary": "SUSE Bug 1272837 for CVE-2026-63912",
"url": "https://bugzilla.suse.com/1272837"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63912"
},
{
"cve": "CVE-2026-63915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63915"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: hci: fix out-of-bounds read in HCP header parsing\n\nBoth nfc_hci_recv_from_llc() and nci_hci_data_received_cb() read\npacket-\u003eheader from skb-\u003edata at function entry without first checking\nthat the buffer holds at least one byte. A malicious NFC peer can send\na 0-byte HCP frame that passes through the SHDLC layer and reaches\nthese functions, causing an out-of-bounds heap read of packet-\u003eheader.\nThe same 0-byte frame, if queued as a non-final fragment, also causes\nthe reassembly loop to underflow msg_len to UINT_MAX, triggering\nskb_over_panic() when the reassembled skb is written.\n\nFix this by adding a pskb_may_pull() check at the entry of each\nfunction before packet-\u003eheader is first accessed. The existing\npskb_may_pull() checks before the reassembled hcp_skb is cast to\nstruct hcp_packet remain in place to guard the 2-byte HCP message\nheader.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63915",
"url": "https://www.suse.com/security/cve/CVE-2026-63915"
},
{
"category": "external",
"summary": "SUSE Bug 1272897 for CVE-2026-63915",
"url": "https://bugzilla.suse.com/1272897"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63915"
},
{
"cve": "CVE-2026-63916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: Fix OOB write in wacom_hid_set_device_mode()\n\nwacom_hid_set_device_mode() currently assumes that the HID_DG_INPUTMODE\nusage is always located in the first field (field[0]) of the feature report.\nHowever, a device can specify HID_DG_INPUTMODE in a different field.\n\nIf HID_DG_INPUTMODE is in a field other than the first one and the first\nfield has a report_count smaller than the usage_index of HID_DG_INPUTMODE,\nthis leads to an out-of-bounds write to r-\u003efield[0]-\u003evalue.\n\nFix this by storing the field index of HID_DG_INPUTMODE in \u0027struct\nhid_data\u0027 during feature mapping. In wacom_hid_set_device_mode(), use\nthis stored field index to access the correct field and add bounds\nchecks to ensure both the field index and the value index are within\nvalid ranges before writing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63916",
"url": "https://www.suse.com/security/cve/CVE-2026-63916"
},
{
"category": "external",
"summary": "SUSE Bug 1272903 for CVE-2026-63916",
"url": "https://bugzilla.suse.com/1272903"
},
{
"category": "external",
"summary": "SUSE Bug 1273016 for CVE-2026-63916",
"url": "https://bugzilla.suse.com/1273016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63916"
},
{
"cve": "CVE-2026-63917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63917"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6: vti: Use ip6_tnl.net in vti6_changelink().\n\nip netns add ns1\nip netns add ns2\nip -n ns1 link add vti6_test type vti6 remote ::1 local ::2 key 7\nip -n ns1 link set vti6_test netns ns2\nip -n ns2 link set vti6_test type vti6 remote ::3 local ::4 key 9\nip netns del ns2\nip netns del ns1\n[ 132.495484] ------------[ cut here ]------------\n[ 132.497609] kernel BUG at net/core/dev.c:12376!\n\nCommit 61220ab34948 (\"vti6: Enable namespace changing\") dropped\nNETIF_F_NETNS_LOCAL from vti6 devices. A vti6 tunnel can then\nmove through IFLA_NET_NS_FD. After the move dev_net(dev) points\nat the new netns while t-\u003enet stays at the creation netns.\n\nvti6_changelink() and vti6_update() still use dev_net(dev) and\ndev_net(t-\u003edev). They unlink from one per netns hash and relink\ninto another. The creation netns is left with a stale entry.\ncleanup_net() of that netns later walks freed memory.\n\nReachable from an unprivileged user namespace (unshare --user\n--map-root-user --net). Cross tenant scope on container hosts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63917",
"url": "https://www.suse.com/security/cve/CVE-2026-63917"
},
{
"category": "external",
"summary": "SUSE Bug 1272904 for CVE-2026-63917",
"url": "https://bugzilla.suse.com/1272904"
},
{
"category": "external",
"summary": "SUSE Bug 1273015 for CVE-2026-63917",
"url": "https://bugzilla.suse.com/1273015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63917"
},
{
"cve": "CVE-2026-63919",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63919"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: input: hold netns during deferred transport reinjection\n\nTransport-mode reinjection stores a struct net pointer in skb-\u003ecb and\nuses it later from xfrm_trans_reinject(). That pointer must stay valid\nuntil the deferred callback runs.\n\nTake a netns reference when queueing deferred reinjection work and drop\nit after the callback completes. Use maybe_get_net() so the queueing\npath does not revive a namespace that is already being torn down.\n\nThis keeps the existing workqueue design and fixes the netns lifetime\nhandling in one place for all users of xfrm_trans_queue_net().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63919",
"url": "https://www.suse.com/security/cve/CVE-2026-63919"
},
{
"category": "external",
"summary": "SUSE Bug 1272907 for CVE-2026-63919",
"url": "https://bugzilla.suse.com/1272907"
},
{
"category": "external",
"summary": "SUSE Bug 1273013 for CVE-2026-63919",
"url": "https://bugzilla.suse.com/1273013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63919"
},
{
"cve": "CVE-2026-63921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63921"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().\n\nAfter patch 1/2 in this series, vti6_update() unlinks and relinks\nthe tunnel through t-\u003enet. vti6_siocdevprivate() still uses\ndev_net(dev) for the collision lookup. For a tunnel moved through\nIFLA_NET_NS_FD, dev_net(dev) is the new netns, not t-\u003enet.\n\nSIOCCHGTUNNEL on a migrated tunnel then runs:\n\n net = dev_net(dev) /* migrated netns */\n t = vti6_locate(net, \u0026p1, false) /* misses target in t-\u003enet */\n ...\n t = netdev_priv(dev)\n vti6_update(t, \u0026p1, false) /* mutates t-\u003enet\u0027s hash */\n\nA caller in the migrated netns picks params that match a tunnel\nin the creation netns. The lookup in dev_net(dev) finds nothing.\nvti6_update() prepends the migrated tunnel at the head of the\ncreation netns hash bucket for those params. Later lookups in\nthe creation netns resolve to the migrated device. xfrm receive\ndelivers the matched packets through a device the caller controls.\n\nReachable from an unprivileged user namespace (unshare --user\n--map-root-user --net). Cross tenant scope on container hosts.\n\nSwitch the SIOCCHGTUNNEL path on a non fallback device to use\nt-\u003enet for the lookup. The lookup now matches the netns\nvti6_update() operates on.\n\nAlso add ns_capable(self-\u003enet-\u003euser_ns, CAP_NET_ADMIN) before\nthe lookup. The check at the top of the case is against\ndev_net(dev)-\u003euser_ns, which after migration is the attacker\u0027s\nnetns. A caller there can pick params absent from self-\u003enet,\nthe lookup returns NULL, t becomes self, and vti6_update()\ninserts the device into the creation netns hash. The new check\nrequires CAP_NET_ADMIN in the creation netns user_ns too.\n\nSIOCADDTUNNEL and SIOCCHGTUNNEL on the fallback device keep\ndev_net(dev), which equals init_net there.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63921",
"url": "https://www.suse.com/security/cve/CVE-2026-63921"
},
{
"category": "external",
"summary": "SUSE Bug 1272918 for CVE-2026-63921",
"url": "https://bugzilla.suse.com/1272918"
},
{
"category": "external",
"summary": "SUSE Bug 1273011 for CVE-2026-63921",
"url": "https://bugzilla.suse.com/1273011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63921"
},
{
"cve": "CVE-2026-63922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: exthdrs: refresh nh after handling HAO option\n\nip6_parse_tlv() caches skb_network_header(skb) in nh while walking\nIPv6 TLVs.\n\nipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can\nmove the skb head and invalidate the cached network header pointer.\nRefresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs\nare parsed from the current skb head.\n\nThis matches the existing pattern used in ip6_parse_tlv() after helpers\nthat can modify skb header storage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63922",
"url": "https://www.suse.com/security/cve/CVE-2026-63922"
},
{
"category": "external",
"summary": "SUSE Bug 1272855 for CVE-2026-63922",
"url": "https://bugzilla.suse.com/1272855"
},
{
"category": "external",
"summary": "SUSE Bug 1272857 for CVE-2026-63922",
"url": "https://bugzilla.suse.com/1272857"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63922"
},
{
"cve": "CVE-2026-63924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63924"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()\n\nipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.\nLet\u0027s recompute nh pointer to make sure any change won\u0027t mess things up.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63924",
"url": "https://www.suse.com/security/cve/CVE-2026-63924"
},
{
"category": "external",
"summary": "SUSE Bug 1272855 for CVE-2026-63924",
"url": "https://bugzilla.suse.com/1272855"
},
{
"category": "external",
"summary": "SUSE Bug 1272857 for CVE-2026-63924",
"url": "https://bugzilla.suse.com/1272857"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63924"
},
{
"cve": "CVE-2026-63927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63927"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: Fix use after free in debug code\n\nWe\u0027re not allowed to dereference \"urb\" after calling\nusb_hcd_giveback_urb() so save the urb-\u003estatus ahead of time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63927",
"url": "https://www.suse.com/security/cve/CVE-2026-63927"
},
{
"category": "external",
"summary": "SUSE Bug 1272892 for CVE-2026-63927",
"url": "https://bugzilla.suse.com/1272892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63927"
},
{
"cve": "CVE-2026-63928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63928"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: omninet: fix memory corruption with small endpoint\n\nMake sure that the bulk-out buffers are at least as large as the\nhardcoded transfer size to avoid user-controlled slab corruption should\na malicious device report a smaller endpoint max packet size than\nexpected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63928",
"url": "https://www.suse.com/security/cve/CVE-2026-63928"
},
{
"category": "external",
"summary": "SUSE Bug 1272891 for CVE-2026-63928",
"url": "https://bugzilla.suse.com/1272891"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63928"
},
{
"cve": "CVE-2026-63930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63930"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: buffer: hw-consumer: fix use-after-free in error path\n\nIn the err_put_buffers cleanup path of iio_hw_consumer_alloc(), the code\nwas using list_for_each_entry() to iterate through buffers while calling\niio_buffer_put() which can free the current buffer if refcount drops to 0.\nThe list_for_each_entry() loop macro then evaluates buf-\u003ehead.next to\ncontinue iteration, accessing the freed buffer.\n\nFix this by using list_for_each_entry_safe().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63930",
"url": "https://www.suse.com/security/cve/CVE-2026-63930"
},
{
"category": "external",
"summary": "SUSE Bug 1272850 for CVE-2026-63930",
"url": "https://bugzilla.suse.com/1272850"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63930"
},
{
"cve": "CVE-2026-63931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: chemical: scd30: fix division by zero in write_raw\n\nAdd a zero check for val2 before using it as a divisor when setting the\nsampling frequency. A user writing a zero fractional part to the\nsampling_frequency sysfs attribute triggers a division by zero in the\nkernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63931",
"url": "https://www.suse.com/security/cve/CVE-2026-63931"
},
{
"category": "external",
"summary": "SUSE Bug 1272853 for CVE-2026-63931",
"url": "https://bugzilla.suse.com/1272853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63931"
},
{
"cve": "CVE-2026-63934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63934"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: gyro: itg3200: fix i2c read into the wrong stack location\n\nitg3200_read_all_channels() takes `__be16 *buf\u0027 as a parameter and\nfills the i2c_msg destination as `(char *)\u0026buf\u0027. Since `buf\u0027 is the\nparameter (a pointer), `\u0026buf\u0027 is the address of the local pointer\nslot on the stack of itg3200_read_all_channels(), not the address\nof the caller\u0027s scan buffer. The (char *) cast hides the type\nmismatch.\n\ni2c_transfer() therefore writes ITG3200_SCAN_ELEMENTS * sizeof(s16)\n= 8 bytes into the parameter\u0027s stack slot, which is discarded when\nthe function returns. The caller\u0027s scan buffer in\nitg3200_trigger_handler() is never written to, so\niio_push_to_buffers_with_timestamp() pushes uninitialised stack\ncontents to userspace via /dev/iio:deviceX every scan -- both a\nfunctional bug (no actual gyroscope or temperature data is\ndelivered through the triggered buffer) and an information leak.\n\nThe non-buffered read_raw() path is unaffected: it goes through\nitg3200_read_reg_s16() which uses `\u0026out\u0027 on a local s16 value,\nwhere that is correct.\n\nDrop the spurious `\u0026\u0027 so the i2c read writes into the caller\u0027s\nbuffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63934",
"url": "https://www.suse.com/security/cve/CVE-2026-63934"
},
{
"category": "external",
"summary": "SUSE Bug 1272863 for CVE-2026-63934",
"url": "https://bugzilla.suse.com/1272863"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-63934"
},
{
"cve": "CVE-2026-63940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63940"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Ignore Port I/O requests of length \u00270\u0027\n\nExplicitly ignore Port I/O requests of length \u00270\u0027 (or count \u00270\u0027), so that\nsetting up the software scratch area (and other code) doesn\u0027t have to\nworry about underflowing the length, and to allow for WARNing on trying\nto configure the scratch area with len==0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63940",
"url": "https://www.suse.com/security/cve/CVE-2026-63940"
},
{
"category": "external",
"summary": "SUSE Bug 1272781 for CVE-2026-63940",
"url": "https://bugzilla.suse.com/1272781"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63940"
},
{
"cve": "CVE-2026-63942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63942"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nparport: Fix race between port and client registration\n\nThe parport subsystem registers port devices before they are fully\ninitialised, resulting in a race condition where client drivers such\nas lp can attach to ports that are not completely initialised or even\nbeing torn down.\n\nWhen the port and client drivers are built as modules and loaded\naround the same time during boot, this occasionally results in a\ncrash. I was able to make this happen reliably in a VM with a\nPC-style parallel port by patching parport_pc to fail probing:\n\n\u003e --- a/drivers/parport/parport_pc.c\n\u003e +++ b/drivers/parport/parport_pc.c\n\u003e @@ -2069,7 +2069,7 @@ static struct parport *__parport_pc_probe_port(unsigned long int base,\n\u003e \tif (!p)\n\u003e \t\tgoto out3;\n\u003e\n\u003e -\tbase_res = request_region(base, 3, p-\u003ename);\n\u003e +\tbase_res = NULL;\n\u003e \tif (!base_res)\n\u003e \t\tgoto out4;\n\u003e\n\nand then running:\n\n while true; do\n modprobe lp \u0026 modprobe parport_pc\n\twait\n\trmmod lp parport_pc\n done\n\nfor a few seconds.\n\nIn the long term I think port registration should be changed to put\nthe call to device_add() inside parport_announce_port(), but since the\nlatter currently cannot fail this will require changing all port\ndrivers.\n\nFor now, add a flag to indicate whether a port has been \"announced\"\nand only try to attach client drivers to ports when the flag is set.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63942",
"url": "https://www.suse.com/security/cve/CVE-2026-63942"
},
{
"category": "external",
"summary": "SUSE Bug 1273023 for CVE-2026-63942",
"url": "https://bugzilla.suse.com/1273023"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63942"
},
{
"cve": "CVE-2026-63943",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63943"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: xpad - fix out-of-bounds access for Share button\n\nxpadone_process_packet() receives len directly from urb-\u003eactual_length\nand uses it to index the share-button byte at data[len - 18] or\ndata[len - 26]. Since both len and data[0] are under the device\u0027s\ncontrol, a broken controller can send a GIP_CMD_INPUT packet with\nactual_length \u003c 18 (e.g. 5 bytes) and reach this code path, causing\naccesses beyond the actual array.\n\nFix this by calculating the offset and checking bounds against the\npacket length.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63943",
"url": "https://www.suse.com/security/cve/CVE-2026-63943"
},
{
"category": "external",
"summary": "SUSE Bug 1273044 for CVE-2026-63943",
"url": "https://bugzilla.suse.com/1273044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63943"
},
{
"cve": "CVE-2026-63945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63945"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: serialize iso_sock_clear_timer with socket lock\n\niso_sock_close() calls iso_sock_clear_timer() before acquiring\nlock_sock(sk).\n\niso_sock_clear_timer() reads iso_pi(sk)-\u003econn twice without the\nsocket lock held:\n\n if (!iso_pi(sk)-\u003econn)\n return;\n cancel_delayed_work(\u0026iso_pi(sk)-\u003econn-\u003etimeout_work);\n\nConcurrently, iso_conn_del() executes under lock_sock(sk) and calls\niso_chan_del(), which sets iso_pi(sk)-\u003econn to NULL and may result in\nthe final reference to the connection being dropped:\n\n CPU0 CPU1\n ---- ----\n iso_sock_clear_timer()\n if (conn != NULL) ... lock_sock(sk)\n iso_chan_del()\n iso_pi(sk)-\u003econn = NULL\n cancel_delayed_work(conn) /* NULL deref or UAF */\n\niso_pi(sk)-\u003econn is not stable across the unlock window, causing a\nNULL pointer dereference or use-after-free.\n\nSerialize iso_sock_clear_timer() with the socket lock by moving it\ninside lock_sock()/release_sock(), matching the pattern used in\niso_conn_del() and all other call sites.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63945",
"url": "https://www.suse.com/security/cve/CVE-2026-63945"
},
{
"category": "external",
"summary": "SUSE Bug 1272664 for CVE-2026-63945",
"url": "https://bugzilla.suse.com/1272664"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63945"
},
{
"cve": "CVE-2026-63946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63946"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: fix UAF in iso_recv_frame\n\niso_recv_frame reads conn-\u003esk under iso_conn_lock but releases the lock\nbefore using sk, with no reference held. A concurrent iso_sock_kill()\ncan free sk in that window, causing use-after-free on sk-\u003esk_state and\nsock_queue_rcv_skb().\n\nFix by replacing the bare pointer read with iso_sock_hold(conn), which\ncalls sock_hold() while the spinlock is held, atomically elevating the\nrefcount before the lock drops. Add a drop_put label so sock_put() is\ncalled on all exit paths where the hold succeeded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63946",
"url": "https://www.suse.com/security/cve/CVE-2026-63946"
},
{
"category": "external",
"summary": "SUSE Bug 1272665 for CVE-2026-63946",
"url": "https://bugzilla.suse.com/1272665"
},
{
"category": "external",
"summary": "SUSE Bug 1273002 for CVE-2026-63946",
"url": "https://bugzilla.suse.com/1273002"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63946"
},
{
"cve": "CVE-2026-63947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63947"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HIDP: fix missing length checks in hidp_input_report()\n\nhidp_input_report() reads keyboard and mouse payload data from an skb\nwithout first verifying that skb-\u003elen contains enough data.\n\nhidp_recv_intr_frame() pulls the 1-byte HIDP header before dispatching\nto hidp_input_report(). If a paired device sends a truncated packet,\nthe handler reads beyond the valid skb data, resulting in an\nout-of-bounds read of skb data. The OOB bytes may be interpreted as\nphantom key presses or spurious mouse movement.\n\nReplace the open-coded length tracking and pointer arithmetic with\nskb_pull_data() calls. skb_pull_data() returns NULL if the requested\nbytes are not present, eliminating the need for a manual size variable\nand the separate skb-\u003elen guard.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63947",
"url": "https://www.suse.com/security/cve/CVE-2026-63947"
},
{
"category": "external",
"summary": "SUSE Bug 1272668 for CVE-2026-63947",
"url": "https://bugzilla.suse.com/1272668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63947"
},
{
"cve": "CVE-2026-63948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63948"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn\n\n__set_chan_timer() takes a l2cap_chan reference via l2cap_chan_hold()\nbefore scheduling the delayed work. The normal path in\nl2cap_chan_timeout() drops this reference with l2cap_chan_put() at the\nend, but the early return when chan-\u003econn is NULL skips the put,\nleaking the reference.\n\nAdd the missing l2cap_chan_put() before the early return.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63948",
"url": "https://www.suse.com/security/cve/CVE-2026-63948"
},
{
"category": "external",
"summary": "SUSE Bug 1272670 for CVE-2026-63948",
"url": "https://bugzilla.suse.com/1272670"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63948"
},
{
"cve": "CVE-2026-63949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63949"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nauxdisplay: line-display: fix OOB read on zero-length message_store()\n\nlinedisp_display() unconditionally reads msg[count - 1] before\nchecking whether count is zero, so a write of zero bytes to the\nmessage sysfs attribute hits msg[-1]:\n\n\twrite(fd, \"\", 0);\n\n\t-\u003e message_store(..., buf, count=0)\n\t -\u003e linedisp_display(linedisp, buf, count=0)\n\t -\u003e msg[count - 1] == \u0027\\n\u0027 ; OOB read\n\nThe kernfs write buffer for that store is a 1-byte allocation\n(kernfs_fop_write_iter() does kmalloc(len + 1) with len == 0),\nso msg[-1] is a 1-byte read before the slab object. On a\nKASAN-enabled kernel this trips an out-of-bounds report and\npanics; on stock kernels it silently reads adjacent slab data\nand, if that byte happens to be \u0027\\n\u0027, the following count--\nwraps ssize_t 0 to -1 and is then passed to kmemdup_nul().\n\nlinedisp_display() is reached from the message_store() sysfs\ncallback (drivers/auxdisplay/line-display.c message attribute,\nmode 0644) and from the in-tree initial-message setup with\ncount == -1, so the OOB path is only userspace-triggerable via\nzero-byte writes; vfs_write() does not short-circuit on\ncount == 0 and kernfs_fop_write_iter() dispatches the store\ncallback regardless.\n\nGuard the trailing-newline trim with a count check. The\nexisting if (!count) block then takes the clear-display path\nunchanged.\n\nAffects every auxdisplay driver that registers via\nlinedisp_register() / linedisp_attach(): ht16k33, max6959,\nimg-ascii-lcd, seg-led-gpio.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63949",
"url": "https://www.suse.com/security/cve/CVE-2026-63949"
},
{
"category": "external",
"summary": "SUSE Bug 1272671 for CVE-2026-63949",
"url": "https://bugzilla.suse.com/1272671"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-63949"
},
{
"cve": "CVE-2026-63952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63952"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemfd: deny writeable mappings when implying SEAL_WRITE\n\nWhen SEAL_EXEC is added, SEAL_WRITE is implied to make W^X. But the\nimplied seal is set after the check that makes sure the memfd can not have\nany writable mappings. This means one can use SEAL_EXEC to apply\nSEAL_WRITE while having writeable mappings.\n\nThis breaks the contract that SEAL_WRITE provides and can be used by an\nattacker to pass a memfd that appears to be write sealed but can still be\nmodified arbitrarily.\n\nFix this by adding the implied seals before the call for\nmapping_deny_writable() is done.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63952",
"url": "https://www.suse.com/security/cve/CVE-2026-63952"
},
{
"category": "external",
"summary": "SUSE Bug 1272468 for CVE-2026-63952",
"url": "https://bugzilla.suse.com/1272468"
},
{
"category": "external",
"summary": "SUSE Bug 1272491 for CVE-2026-63952",
"url": "https://bugzilla.suse.com/1272491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63952"
},
{
"cve": "CVE-2026-63957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63957"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: safe_serial: fix memory corruption with small endpoint\n\nMake sure that the bulk-out buffer size is at least eight bytes to avoid\nuser-controlled slab corruption in \"safe\" mode should a malicious device\nreport a smaller size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63957",
"url": "https://www.suse.com/security/cve/CVE-2026-63957"
},
{
"category": "external",
"summary": "SUSE Bug 1272472 for CVE-2026-63957",
"url": "https://bugzilla.suse.com/1272472"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63957"
},
{
"cve": "CVE-2026-63958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63958"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: ucsi: validate connector number in ucsi_connector_change()\n\nThe connector number in a UCSI CCI notification is a 7-bit field\nsupplied by the PPM. ucsi_connector_change() uses it to index the\nucsi-\u003econnector[] array without checking it against the number of\nconnectors the PPM reported at init time, so a buggy or malicious PPM\n(EC firmware, or an I2C-attached UCSI controller on the ccg / stm32g0 /\nglink transports) can drive schedule_work() on memory past the end of\nthe array.\n\nReject connector numbers that are zero or exceed cap.num_connectors\nbefore dereferencing the array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63958",
"url": "https://www.suse.com/security/cve/CVE-2026-63958"
},
{
"category": "external",
"summary": "SUSE Bug 1272467 for CVE-2026-63958",
"url": "https://bugzilla.suse.com/1272467"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63958"
},
{
"cve": "CVE-2026-63959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63959"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT\n\nA broken/malicious port can transmit a CRC-valid frame whose header\nadvertises up to seven data objects but whose body carries fewer than\nthat. Check for this, and rightfully reject the message, instead of\nreading from uninitialized stack memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63959",
"url": "https://www.suse.com/security/cve/CVE-2026-63959"
},
{
"category": "external",
"summary": "SUSE Bug 1272474 for CVE-2026-63959",
"url": "https://bugzilla.suse.com/1272474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63959"
},
{
"cve": "CVE-2026-63960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63960"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: wcove: don\u0027t write past struct pd_message in wcove_read_rx_buffer()\n\nwcove_read_rx_buffer() copies the PD RX FIFO into the caller\u0027s\nstruct pd_message with\n\n\tfor (i = 0; i \u003c USBC_RXINFO_RXBYTES(info); i++)\n\t\tregmap_read(wcove-\u003eregmap, USBC_RX_DATA + i, msg + i);\n\nwhich has two problems:\n\nUSBC_RXINFO_RXBYTES() is a 5-bit field (max 31) while struct pd_message\nis 30 bytes (__le16 header + __le32 payload[PD_MAX_PAYLOAD], packed).\nThe byte count latched in RXINFO is the number of bytes the port partner\nput on the wire, so a malicious partner that transmits a 31-byte frame\ncan drive the loop one byte past the destination if the WCOVE BMC\nreceiver does not enforce the PD object-count limit in hardware. The\nexisting FIXME flagged this as unverified.\n\nIndependently, regmap_read() takes an unsigned int * and stores a full\nunsigned int at the destination. Passing the byte pointer msg + i means\neach iteration writes four bytes; the high three are zero (val_bits is\n8) and are normally overwritten by the next iteration, but the final\niteration\u0027s high bytes are not. With RXBYTES == 30 the i == 29 iteration\nalready writes three zero bytes past msg, which sits on the IRQ thread\u0027s\nstack in wcove_typec_irq().\n\nClamp the loop to sizeof(struct pd_message) and read each register into\na local before storing only its low byte, so the copy can never exceed\nthe destination regardless of what RXINFO reports.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63960",
"url": "https://www.suse.com/security/cve/CVE-2026-63960"
},
{
"category": "external",
"summary": "SUSE Bug 1272478 for CVE-2026-63960",
"url": "https://bugzilla.suse.com/1272478"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63960"
},
{
"cve": "CVE-2026-63961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63961"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: altmodes/displayport: validate count before reading Status Update VDO\n\nA broken/malicious device can send the incorrect count for a status\nupdate VDO, which will cause the kernel to read uninitialized stack data\nand send it off elsewhere.\n\nFix this up by correctly verifying the count for the update object.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63961",
"url": "https://www.suse.com/security/cve/CVE-2026-63961"
},
{
"category": "external",
"summary": "SUSE Bug 1272480 for CVE-2026-63961",
"url": "https://bugzilla.suse.com/1272480"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63961"
},
{
"cve": "CVE-2026-63962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63962"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()\n\nsvdm_consume_modes() checks pmdata-\u003ealtmodes against the array size once\nbefore the loop over the count, but forgot to check the bound at every\npoint in the loop.\n\nIn the well-behaved SVDM discovery flow this is harmless because each of\nat most SVID_DISCOVERY_MAX SVIDs contributes at most MODE_DISCOVERY_MAX\nmodes, exactly filling altmode_desc[ALTMODE_DISCOVERY_MAX]. But the\nCMDT_RSP_ACK handler in tcpm_pd_svdm() does not correlate an incoming\nACK with any request the port actually sent. Once port-\u003epartner is set,\nan unsolicited Discover Modes ACK is consumed unconditionally. A broken\nor malicious port partner can therefore drive altmodes to\nALTMODE_DISCOVERY_MAX - 1 via the normal flow, and then send one extra\nDiscover Modes ACK with seven VDOs. Because the pre-loop check passes,\nthe loop could then writes up to five entries past altmode_desc[]. For\nmode_data_prime the next field in struct tcpm_port is the\npartner_altmode[] pointer array, which then receives partner-chosen\nSVID/VDO bytes.\n\nMove the bound check inside the loop so the array can never be indexed\npast ALTMODE_DISCOVERY_MAX regardless of how many VDOs the partner\nsupplies or how the function was reached.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63962",
"url": "https://www.suse.com/security/cve/CVE-2026-63962"
},
{
"category": "external",
"summary": "SUSE Bug 1272482 for CVE-2026-63962",
"url": "https://bugzilla.suse.com/1272482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63962"
},
{
"cve": "CVE-2026-63964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63964"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: ucsi: ccg: reject firmware images without a \u0027:\u0027 record header\n\ndo_flash() locates the first .cyacd record with\n\n\tp = strnchr(fw-\u003edata, fw-\u003esize, \u0027:\u0027);\n\twhile (p \u003c eof) {\n\t\ts = strnchr(p + 1, eof - p - 1, \u0027:\u0027);\n\t\t...\n\t}\n\nIf the firmware image contains no \u0027:\u0027 byte, strnchr() returns NULL.\nNULL compares less than the valid kernel pointer eof, so the loop body\nruns and strnchr() is called with p + 1 == (void *)1 and a length of\nroughly (unsigned long)eof, causing a wonderful crash.\n\nThe not_signed_fw fallthrough earlier in do_flash() and the chip-state\nbranches in ccg_fw_update_needed() allow an unsigned blob to reach this\nloop, so a root user who can place a crafted file under /lib/firmware\nand write the do_flash sysfs attribute can trigger the oops.\n\nBail out with -EINVAL when the initial strnchr() returns NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63964",
"url": "https://www.suse.com/security/cve/CVE-2026-63964"
},
{
"category": "external",
"summary": "SUSE Bug 1272483 for CVE-2026-63964",
"url": "https://bugzilla.suse.com/1272483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63964"
},
{
"cve": "CVE-2026-63967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63967"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer\n\nThe tagged FIFO path declares iio_buff on the stack with __aligned(8)\nbut no initializer, but there is a hole in the structure, which will\nthen leak to userspace as ST_LSM6DSX_SAMPLE_SIZE bytes (6) will be\ncopied, but the space between that and the timestamp are not\ninitialized.\n\nCommit c14edb4d0bdc (\"iio:imu:st_lsm6dsx Fix alignment and data leak\nissues\") moved the untagged FIFO path to a kzalloc\u0027d buffer in hw-\u003escan,\nbut for the tagged path it only added the alignment qualifier and not\nthe initializer :(\n\nFix this by just zero-initializing the structure on the stack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63967",
"url": "https://www.suse.com/security/cve/CVE-2026-63967"
},
{
"category": "external",
"summary": "SUSE Bug 1272470 for CVE-2026-63967",
"url": "https://bugzilla.suse.com/1272470"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63967"
},
{
"cve": "CVE-2026-63968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63968"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix possible infinite loop in fib6_select_path()\n\nFound while auditing the same pattern Sashiko reported in\nrt6_fill_node() [1]. Apply the same fix as\ncommit f8d8ce1b515a (\"ipv6: fix possible infinite loop in fib6_info_uses_dev()\").\n\nWriters holding tb6_lock can list_del_rcu(\u0026first-\u003efib6_siblings)\nwithout waiting for RCU readers; first-\u003efib6_siblings.next then\nstill points into the old ring and this softirq-side walker never\nreaches \u0026first-\u003efib6_siblings as its terminator. fib6_purge_rt()\nalways WRITE_ONCE()s first-\u003efib6_nsiblings to 0 before\nlist_del_rcu(), so an inside-loop check is a reliable detach signal.\n\n[1] https://sashiko.dev/#/patchset/20260526020227.4857-1-jiayuan.chen%40linux.dev",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63968",
"url": "https://www.suse.com/security/cve/CVE-2026-63968"
},
{
"category": "external",
"summary": "SUSE Bug 1272466 for CVE-2026-63968",
"url": "https://bugzilla.suse.com/1272466"
},
{
"category": "external",
"summary": "SUSE Bug 1272521 for CVE-2026-63968",
"url": "https://bugzilla.suse.com/1272521"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63968"
},
{
"cve": "CVE-2026-63971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63971"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix race between sctp_wait_for_connect and peeloff\n\nsctp_wait_for_connect() drops and re-acquires the socket lock while\nwaiting for the association to reach ESTABLISHED state. During this\nwindow, another thread can peeloff the association to a new socket via\ngetsockopt(SCTP_SOCKOPT_PEELOFF), changing asoc-\u003ebase.sk. After\nre-acquiring the old socket lock, sctp_wait_for_connect() returns\nsuccess without noticing the migration - the caller then accesses\nthe association under the wrong lock in sctp_datamsg_from_user().\n\nAdd the same sk != asoc-\u003ebase.sk check that sctp_wait_for_sndbuf()\nalready has, returning an error if the association was migrated while\nwe slept.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63971",
"url": "https://www.suse.com/security/cve/CVE-2026-63971"
},
{
"category": "external",
"summary": "SUSE Bug 1272678 for CVE-2026-63971",
"url": "https://bugzilla.suse.com/1272678"
},
{
"category": "external",
"summary": "SUSE Bug 1272679 for CVE-2026-63971",
"url": "https://bugzilla.suse.com/1272679"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63971"
},
{
"cve": "CVE-2026-63974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63974"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close\n\nSince hci_dev_close_sync() can now be called during the reset path, we\nshould also set HCI_CMD_DRAIN_WORKQUEUE. This avoids queuing timeouts\nwhile the hdev workqueue is being drained.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63974",
"url": "https://www.suse.com/security/cve/CVE-2026-63974"
},
{
"category": "external",
"summary": "SUSE Bug 1272686 for CVE-2026-63974",
"url": "https://bugzilla.suse.com/1272686"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63974"
},
{
"cve": "CVE-2026-63975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63975"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp\n\nIf dcid is received for an already-assigned destination CID the spec\nrequires that both channels to be discarded, but calling l2cap_chan_del\nmay invalidate the tmp cursor created by list_for_each_entry_safe and\nin fact it is the wrong procedure as the chan-\u003edcid may be assigned\npreviously it really needs to be disconnected.\n\nCalling l2cap_chan_clone directly may still lead to l2cap_chan_del so\ninstead schedule l2cap_chan_timeout with delay 0 to close the channel\nasynchronously.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63975",
"url": "https://www.suse.com/security/cve/CVE-2026-63975"
},
{
"category": "external",
"summary": "SUSE Bug 1272694 for CVE-2026-63975",
"url": "https://bugzilla.suse.com/1272694"
},
{
"category": "external",
"summary": "SUSE Bug 1272695 for CVE-2026-63975",
"url": "https://bugzilla.suse.com/1272695"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63975"
},
{
"cve": "CVE-2026-63976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63976"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: l2cap: clear chan-\u003eident on ECRED reconfiguration success\n\nl2cap_ecred_reconf_rsp() returns early on success without clearing\nchan-\u003eident. Every other L2CAP response handler (l2cap_ecred_conn_rsp,\nl2cap_le_connect_rsp, l2cap_config_rsp) clears chan-\u003eident after a\nsuccessful transaction to prevent the channel from matching subsequent\nresponses with the recycled ident value.\n\nA remote attacker that completed a reconfiguration as the peer can\nreplay a failure response with the stale ident, causing the kernel to\nmatch and destroy the already-established channel via\nl2cap_chan_del(chan, ECONNRESET).\n\nClear chan-\u003eident for all matching channels on success, and harden the\nfailure path by using l2cap_chan_hold_unless_zero() consistent with\nother L2CAP handlers (l2cap_le_command_rej, __l2cap_get_chan_by_ident).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63976",
"url": "https://www.suse.com/security/cve/CVE-2026-63976"
},
{
"category": "external",
"summary": "SUSE Bug 1272706 for CVE-2026-63976",
"url": "https://bugzilla.suse.com/1272706"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63976"
},
{
"cve": "CVE-2026-63984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63984"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()\n\nipv6_rpl_srh_decompress() computes:\n\n outhdr-\u003ehdrlen = (((n + 1) * sizeof(struct in6_addr)) \u003e\u003e 3);\n\nhdrlen is __u8. For n \u003e= 127 the result exceeds 255 and silently\ntruncates. With n=127 (cmpri=15, cmpre=15, pad=0, hdrlen=16):\n\n (128 * 16) \u003e\u003e 3 = 256, truncated to 0 as __u8\n\nThe caller in ipv6_rpl_srh_rcv() then places the compressed header\nat buf + ((ohdr-\u003ehdrlen + 1) \u003c\u003c 3). With hdrlen=0 this is buf + 8,\nbut the decompressed region occupies buf[0..2055] (8-byte header\nplus 128 full addresses). The compressed header overlaps the\ndecompressed data, and ipv6_rpl_srh_compress() writes into this\noverlap, corrupting the routing header of the forwarded packet.\n\nThe existing guard at exthdrs.c:546 checks (n + 1) \u003e 255, which\nprevents n+1 from overflowing unsigned char (the segments_left\nfield), but does not prevent the computed hdrlen from overflowing\n__u8. n=127 passes because 128 \u003c= 255, yet hdrlen=256 does not\nfit.\n\nTighten the bound to (n + 1) \u003e 127. This caps n at 126, giving\nhdrlen = (127 * 16) \u003e\u003e 3 = 254, which fits in __u8. The compressed\nheader then lands at buf + ((254 + 1) \u003c\u003c 3) = buf + 2040, exactly\npast the decompressed region (buf[0..2039]). No overlap. 127\nsegments is well beyond any realistic RPL deployment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63984",
"url": "https://www.suse.com/security/cve/CVE-2026-63984"
},
{
"category": "external",
"summary": "SUSE Bug 1272865 for CVE-2026-63984",
"url": "https://bugzilla.suse.com/1272865"
},
{
"category": "external",
"summary": "SUSE Bug 1272866 for CVE-2026-63984",
"url": "https://bugzilla.suse.com/1272866"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63984"
},
{
"cve": "CVE-2026-63991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63991"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()\n\nThe skb_clone() function can return NULL if memory allocation fails.\nsend_mcast_pkt() calls skb_clone() without checking the return value, which\ncan lead to a NULL pointer dereference in send_pkt() when it dereferences\nskb-\u003edata.\nAdd a NULL check after skb_clone() and skip the peer if the clone fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63991",
"url": "https://www.suse.com/security/cve/CVE-2026-63991"
},
{
"category": "external",
"summary": "SUSE Bug 1272973 for CVE-2026-63991",
"url": "https://bugzilla.suse.com/1272973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-63991"
},
{
"cve": "CVE-2026-63994",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63994"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()\n\nSashiko found that iptunnel_pmtud_build_icmp() and\niptunnel_pmtud_build_icmpv6() were caching ip_hdr() and ipv6_hdr()\nbefore an skb_cow() call which can reallocate skb-\u003ehead.\n\nFix this possible UAF by initializing the local variables\nafter the skb_cow() call.\n\nRemove skb_reset_network_header() calls which were not needed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63994",
"url": "https://www.suse.com/security/cve/CVE-2026-63994"
},
{
"category": "external",
"summary": "SUSE Bug 1273035 for CVE-2026-63994",
"url": "https://bugzilla.suse.com/1273035"
},
{
"category": "external",
"summary": "SUSE Bug 1273051 for CVE-2026-63994",
"url": "https://bugzilla.suse.com/1273051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-63994"
},
{
"cve": "CVE-2026-64025",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64025"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, skmsg: fix verdict sk_data_ready racing with ktls rx\n\nsk_psock_strp_data_ready() already checks tls_sw_has_ctx_rx() and\ndefers to psock-\u003esaved_data_ready when a TLS RX context is present,\navoiding a conflict with the TLS strparser\u0027s ownership of the receive\nqueue (commit e91de6afa81c, \"bpf: Fix running sk_skb program types\nwith ktls\").\n\nsk_psock_verdict_data_ready() has no equivalent guard. When a socket\nis inserted into a sockmap (BPF_SK_SKB_VERDICT) before TLS RX is\nconfigured, tls_sw_strparser_arm() saves sk_psock_verdict_data_ready\nas rx_ctx-\u003esaved_data_ready. On data arrival:\n\n tls_data_ready -\u003e tls_strp_data_ready -\u003e tls_rx_msg_ready\n -\u003e saved_data_ready() = sk_psock_verdict_data_ready()\n -\u003e tcp_read_skb() drains sk_receive_queue via __skb_unlink()\n without calling tcp_eat_skb(), so copied_seq is not advanced.\n\ntls_strp_msg_load() then finds tcp_inq() \u003e= full_len (stale), calls\ntcp_recv_skb() on the now-empty queue, hits WARN_ON_ONCE(!first), and\nreturns with rx_ctx-\u003estrp.anchor.frag_list pointing at a psock-owned\n(potentially freed) skb. tls_decrypt_sg() subsequently walks that\nfrag_list: use-after-free.\n\nApply the same fix as sk_psock_strp_data_ready(): if a TLS RX context\nis present, call psock-\u003esaved_data_ready (sock_def_readable) to wake\nrecv() waiters and return immediately, leaving the receive queue\nuntouched. TLS retains sole ownership of the queue and decrypts the\nrecord normally through tls_sw_recvmsg().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64025",
"url": "https://www.suse.com/security/cve/CVE-2026-64025"
},
{
"category": "external",
"summary": "SUSE Bug 1273117 for CVE-2026-64025",
"url": "https://bugzilla.suse.com/1273117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64025"
},
{
"cve": "CVE-2026-64089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64089"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: tt: fix negative last_changeset_len\n\nbatadv_piv_tt::last_changeset_len len was declared as s16, but the field is\nnever intended to hold a negative value. When a value greater than 32767 is\nassigned, it wraps to a negative signed integer.\n\nIn batadv_send_my_tt_response(), last_changeset_len is temporarily widened\nto s32. The incorrectly negative s16 value propagates into the s32, causing\nbatadv_tt_prepare_tvlv_local_data() to allocate a full sized buffer but\npopulates only a small portion of it with the collected changeset. All\nremaining bits are kept uninitialized.\n\nUsing an u16 avoids this type confusion and ensures that no (negative) sign\nextension is performed in batadv_send_my_tt_response().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64089",
"url": "https://www.suse.com/security/cve/CVE-2026-64089"
},
{
"category": "external",
"summary": "SUSE Bug 1272513 for CVE-2026-64089",
"url": "https://bugzilla.suse.com/1272513"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64089"
},
{
"cve": "CVE-2026-64106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64106"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits\n\nUserspace can restore an ITS Device Table Entry whose Size field encodes\nmore EventID bits than the virtual ITS supports. The live MAPD path\nrejects that state, but vgic_its_restore_dte() accepts it and stores the\nout-of-range value in dev-\u003enum_eventid_bits.\n\nReject restored DTEs with num_eventid_bits \u003e VITS_TYPER_IDBITS before\nallocating the device. This mirrors the MAPD check and prevents the\nrestored state from reaching vgic_its_restore_itt(), where the unchecked\nvalue can be converted into an oversized scan_its_table() range.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64106",
"url": "https://www.suse.com/security/cve/CVE-2026-64106"
},
{
"category": "external",
"summary": "SUSE Bug 1272242 for CVE-2026-64106",
"url": "https://bugzilla.suse.com/1272242"
},
{
"category": "external",
"summary": "SUSE Bug 1272243 for CVE-2026-64106",
"url": "https://bugzilla.suse.com/1272243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-64106"
},
{
"cve": "CVE-2026-64174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64174"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: advance loop vars in cfg80211_merge_profile()\n\ncfg80211_merge_profile() reassembles a Multi-BSSID non-transmitted BSS\nprofile that has been split across multiple consecutive MBSSID elements.\nIts while-loop calls\n\n\tcfg80211_get_profile_continuation(ie, ielen, mbssid_elem, sub_elem)\n\nbut never advances mbssid_elem or sub_elem inside the body. Each\niteration therefore searches for a continuation that follows the same\nfixed pair; the helper returns the same next_mbssid; and the same\nnext_sub bytes are memcpy()\u0027d into merged_ie at a growing offset until\nthe buffer fills.\n\nAdvance both mbssid_elem and sub_elem to the just-consumed continuation\nso the next call to cfg80211_get_profile_continuation() searches for a\nfurther continuation beyond it (or returns NULL when none exists).\n\nA specially-crafted malicious beacon can take advantage of this bug\nto cause the kernel to spend an excessive amount of time in\ncfg80211_merge_profile (up to as much as 2ms per beacon received),\nwhich could theoretically be abused in some way.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64174",
"url": "https://www.suse.com/security/cve/CVE-2026-64174"
},
{
"category": "external",
"summary": "SUSE Bug 1272146 for CVE-2026-64174",
"url": "https://bugzilla.suse.com/1272146"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64174"
},
{
"cve": "CVE-2026-64179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64179"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: iosm: fix potential memory leaks in ipc_imem_init()\n\nThe memory allocated in ipc_protocol_init() is not freed on the error\npaths that follow in ipc_imem_init(). Fix that by calling the\ncorresponding release function ipc_protocol_deinit() in the error path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64179",
"url": "https://www.suse.com/security/cve/CVE-2026-64179"
},
{
"category": "external",
"summary": "SUSE Bug 1272149 for CVE-2026-64179",
"url": "https://bugzilla.suse.com/1272149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-64179"
},
{
"cve": "CVE-2026-64182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64182"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/base/memory: fix memory block reference leak in poison accounting\n\nmemblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block\nvia find_memory_block_by_id(), which acquires a reference to the memory\nblock device.\n\nBoth helpers use the returned memory block without dropping that\nreference, leaking the device reference on each successful lookup. Drop\nthe reference after updating nr_hwpoison.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64182",
"url": "https://www.suse.com/security/cve/CVE-2026-64182"
},
{
"category": "external",
"summary": "SUSE Bug 1272194 for CVE-2026-64182",
"url": "https://bugzilla.suse.com/1272194"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-64182"
},
{
"cve": "CVE-2026-64183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64183"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: Allocate runtime workqueue before ACPI init\n\nSince commit\n\n 5894cf571e14 (\"acpi/prmt: Use EFI runtime sandbox to invoke PRM handlers\")\n\nACPI PRM calls are delegated to a workqueue which runs in a kernel\nthread, making it easier to detect and mitigate faulting memory accesses\nperformed by the firmware.\n\nRafael reports that such PRM accesses may occur before efisubsys_init()\nexecutes, which is where the workqueue is allocated, leading to NULL\npointer dereferences. Since acpi_init() [which triggers the early PRM\naccesses] executes as a subsys_initcall() as well, and has its own\ndependencies that may be sensitive to initcall ordering, deferring\nacpi_init() is not an option.\n\nSo instead, split off the workqueue allocation into its own postcore\ninitcall, as this is the only missing piece to allow EFI runtime calls\nto be made. This ensures that EFI runtime call (including PRM calls) are\naccessible to all code running at subsys_initcall() level.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64183",
"url": "https://www.suse.com/security/cve/CVE-2026-64183"
},
{
"category": "external",
"summary": "SUSE Bug 1272197 for CVE-2026-64183",
"url": "https://bugzilla.suse.com/1272197"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64183"
},
{
"cve": "CVE-2026-64187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64187"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fail recovery on a committed log item with no regions\n\nIf the first op of a transaction is a bare transaction header\n(len == sizeof(struct xfs_trans_header)), xlog_recover_add_to_trans()\nadds an item but no region, leaving it on r_itemq with ri_cnt == 0 and\nri_buf == NULL.\n\nThe header can be split across op records, so later ops may still add\nregions; the item is only invalid if the transaction commits with none.\nThe runtime commit path never emits such a transaction, so this only\nhappens on a crafted log. It came from an AI-assisted code audit of the\nrecovery parser.\n\nxlog_recover_reorder_trans() calls ITEM_TYPE() on the item, which reads\n*(unsigned short *)item-\u003eri_buf[0].iov_base and faults on the NULL\nri_buf. Reject it there, before the commit handlers that also read\nri_buf[0].\n\n KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n RIP: 0010:xlog_recover_reorder_trans (fs/xfs/xfs_log_recover.c:1836)\n xlog_recover_commit_trans (fs/xfs/xfs_log_recover.c:2043)\n xlog_recover_process_data (fs/xfs/xfs_log_recover.c:2501)\n xlog_do_recovery_pass (fs/xfs/xfs_log_recover.c:3244)\n xlog_recover (fs/xfs/xfs_log_recover.c:3493)\n xfs_log_mount (fs/xfs/xfs_log.c:618)\n xfs_mountfs (fs/xfs/xfs_mount.c:1034)\n xfs_fs_fill_super (fs/xfs/xfs_super.c:1938)\n vfs_get_tree (fs/super.c:1695)\n path_mount (fs/namespace.c:4161)\n __x64_sys_mount (fs/namespace.c:4367)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64187",
"url": "https://www.suse.com/security/cve/CVE-2026-64187"
},
{
"category": "external",
"summary": "SUSE Bug 1272204 for CVE-2026-64187",
"url": "https://bugzilla.suse.com/1272204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64187"
},
{
"cve": "CVE-2026-64189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64189"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: fix race between dump and ip_set_list resize\n\nThe release path of ip_set_dump_do() and ip_set_dump_done() read\ninst-\u003eip_set_list via ip_set_ref_netlink(), a plain rcu_dereference_raw()\nof the array pointer. These run from netlink_recvmsg() without the nfnl\nmutex and without an RCU read-side critical section.\n\nA concurrent ip_set_create() can grow the array: it publishes the new\narray, calls synchronize_net() and then kvfree()s the old one. Since the\ndump paths read the array outside any RCU reader, synchronize_net() does\nnot wait for them and the old array can be freed while they still index\ninto it, causing a use-after-free.\n\nThe dumped set itself stays pinned via set-\u003eref_netlink, so only the\narray load needs protecting. Take rcu_read_lock() around it, matching\nip_set_get_byname() and __ip_set_put_byindex().\n\n BUG: KASAN: slab-use-after-free in ip_set_dump_do (net/netfilter/ipset/ip_set_core.c:1697)\n Read of size 8 at addr ffff88800b5c4018 by task exploit/150\n Call Trace:\n ...\n kasan_report (mm/kasan/report.c:595)\n ip_set_dump_do (net/netfilter/ipset/ip_set_core.c:1697)\n netlink_dump (net/netlink/af_netlink.c:2325)\n netlink_recvmsg (net/netlink/af_netlink.c:1976)\n sock_recvmsg (net/socket.c:1159)\n __sys_recvfrom (net/socket.c:2315)\n ...\n Oops: general protection fault, probably for non-canonical address ... KASAN NOPTI\n KASAN: maybe wild-memory-access in range [0x02d6...d0-0x02d6...d7]\n RIP: 0010:ip_set_dump_do (net/netfilter/ipset/ip_set_core.c:1698)\n Kernel panic - not syncing: Fatal exception",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64189",
"url": "https://www.suse.com/security/cve/CVE-2026-64189"
},
{
"category": "external",
"summary": "SUSE Bug 1272207 for CVE-2026-64189",
"url": "https://bugzilla.suse.com/1272207"
},
{
"category": "external",
"summary": "SUSE Bug 1272208 for CVE-2026-64189",
"url": "https://bugzilla.suse.com/1272208"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-64189"
},
{
"cve": "CVE-2026-64191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64191"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: stub: Reject I2C block transfers with invalid length\n\nThe I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() uses data-\u003eblock[0]\nas the transfer length. The existing check only clamps it to avoid\noverrunning the chip-\u003ewords[256] register array, but does not validate\nit against I2C_SMBUS_BLOCK_MAX (32), which is the limit of the union\ni2c_smbus_data.block buffer (34 bytes total). The driver is a\ndevelopment/test tool (CONFIG_I2C_STUB=m, not built by default)\nthat must be loaded with a chip_addr= parameter.\n\nA local user with access to /dev/i2c-* can issue an I2C_SMBUS ioctl\nwith I2C_SMBUS_I2C_BLOCK_DATA and data-\u003eblock[0] \u003e 32, causing\nstub_xfer() to read or write past the end of the union\ni2c_smbus_data.block buffer:\n\n BUG: KASAN: stack-out-of-bounds in stub_xfer (drivers/i2c/i2c-stub.c:223)\n Read of size 1 at addr ffff88800abcfd92 by task exploit/81\n Call Trace:\n \u003cTASK\u003e\n stub_xfer (drivers/i2c/i2c-stub.c:223)\n __i2c_smbus_xfer (drivers/i2c/i2c-core-smbus.c:593)\n i2c_smbus_xfer (drivers/i2c/i2c-core-smbus.c:536)\n i2cdev_ioctl_smbus (drivers/i2c/i2c-dev.c:391)\n i2cdev_ioctl (drivers/i2c/i2c-dev.c:478)\n __x64_sys_ioctl (fs/ioctl.c:583)\n do_syscall_64 (arch/x86/entry/syscall_64.c:94)\n entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)\n \u003c/TASK\u003e\n\nThe bug exists because i2c-stub implements .smbus_xfer directly,\nbypassing the I2C_SMBUS_BLOCK_MAX validation in\ni2c_smbus_xfer_emulated(). The I2C_SMBUS_BLOCK_DATA case in the same\nfunction correctly validates against I2C_SMBUS_BLOCK_MAX, but the\nI2C_SMBUS_I2C_BLOCK_DATA case does not.\n\nFix by rejecting transfers with data-\u003eblock[0] == 0 or\ndata-\u003eblock[0] \u003e I2C_SMBUS_BLOCK_MAX with -EINVAL, consistent with\nboth the I2C_SMBUS_BLOCK_DATA case in the same function and the\nI2C_SMBUS_I2C_BLOCK_DATA validation in i2c_smbus_xfer_emulated().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64191",
"url": "https://www.suse.com/security/cve/CVE-2026-64191"
},
{
"category": "external",
"summary": "SUSE Bug 1272211 for CVE-2026-64191",
"url": "https://bugzilla.suse.com/1272211"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64191"
},
{
"cve": "CVE-2026-64220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64220"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndevice property: set fwnode-\u003esecondary to NULL in fwnode_init()\n\nIf a firmware node is allocated on the stack (for instance: temporary\nsoftware node whose life-time we control) or on the heap - but using a\nnon-zeroing allocation function - and initialized using fwnode_init(),\nits secondary pointer will contain uninitalized memory which likely will\nbe neither NULL nor IS_ERR() and so may end up being dereferenced (for\nexample: in dev_to_swnode()). Set fwnode-\u003esecondary to NULL on\ninitialization.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64220",
"url": "https://www.suse.com/security/cve/CVE-2026-64220"
},
{
"category": "external",
"summary": "SUSE Bug 1272785 for CVE-2026-64220",
"url": "https://bugzilla.suse.com/1272785"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64220"
},
{
"cve": "CVE-2026-64221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64221"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: ti-qspi: fix use-after-free after DMA setup failure\n\nThe driver falls back to PIO mode if DMA setup fails during probe.\n\nMake sure to clear the DMA channel pointer also if buffer allocation\nfails to avoid passing a pointer to the released channel to the DMA\nengine (or trying to free the channel a second time on late probe errors\nor driver unbind).\n\nThis issue was flagged by Sashiko when reviewing a devres allocation\nconversion patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64221",
"url": "https://www.suse.com/security/cve/CVE-2026-64221"
},
{
"category": "external",
"summary": "SUSE Bug 1272797 for CVE-2026-64221",
"url": "https://bugzilla.suse.com/1272797"
},
{
"category": "external",
"summary": "SUSE Bug 1272876 for CVE-2026-64221",
"url": "https://bugzilla.suse.com/1272876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-64221"
},
{
"cve": "CVE-2026-64223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64223"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: consume only present negotiated TTLM maps\n\nieee80211_tid_to_link_map_size_ok() validates negotiated TTLM elements\nagainst the number of link-map entries indicated by link_map_presence.\nieee80211_parse_neg_ttlm() must consume the same layout.\n\nThe parser advanced its cursor for every TID, including TIDs whose\npresence bit is clear and therefore have no map bytes in the element.\nA sparse map can then make a later present TID read past the validated\nelement.\n\nThe bad bytes land in neg_ttlm-\u003e{up,down}link[tid] but are gated by\nvalid_links before being applied to driver state, so a peer cannot\nturn the read into a policy change. Under KUnit + KASAN with an\nexact-sized element allocation the OOB read is reported as a\nslab-out-of-bounds; whether the same trigger fires under the\nproduction RX path depends on surrounding allocator state.\n\nAdvance the cursor only when the current TID has a map present.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64223",
"url": "https://www.suse.com/security/cve/CVE-2026-64223"
},
{
"category": "external",
"summary": "SUSE Bug 1272800 for CVE-2026-64223",
"url": "https://bugzilla.suse.com/1272800"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64223"
},
{
"cve": "CVE-2026-64231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dsi: don\u0027t dump registers past the mapped region\n\nOn DSI 6G platforms the IO address space is internally adjusted by\nio_offset. Later this adjusted address might be used for memory dumping.\nHowever the size that is used for memory dumping isn\u0027t adjusted to\naccount for the io_offset, leading to the potential access to the\nunmapped region. Lower ctrl_size by the io_offset value to prevent\naccess past the mapped area.\n\n msm_disp_snapshot_add_block+0x1d4/0x3c8 [msm] (P)\n msm_dsi_host_snapshot+0x4c/0x78 [msm]\n msm_dsi_snapshot+0x28/0x50 [msm]\n msm_disp_snapshot_capture_state+0x74/0x140 [msm]\n msm_disp_snapshot_state_sync+0x60/0x90 [msm]\n _msm_disp_snapshot_work+0x30/0x90 [msm]\n kthread_worker_fn+0xdc/0x460\n kthread+0x120/0x140\n\nPatchwork: https://patchwork.freedesktop.org/patch/721747/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64231",
"url": "https://www.suse.com/security/cve/CVE-2026-64231"
},
{
"category": "external",
"summary": "SUSE Bug 1272787 for CVE-2026-64231",
"url": "https://bugzilla.suse.com/1272787"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64231"
},
{
"cve": "CVE-2026-64234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64234"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: serial: pch_uart: add check for dma_alloc_coherent()\n\nAdd a check for dma_alloc_coherent() failure to prevent a potential\nNULL pointer dereference in dma_handle_rx(). Properly release DMA\nchannels and the PCI device reference using a goto ladder if the\nallocation fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64234",
"url": "https://www.suse.com/security/cve/CVE-2026-64234"
},
{
"category": "external",
"summary": "SUSE Bug 1272646 for CVE-2026-64234",
"url": "https://bugzilla.suse.com/1272646"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64234"
},
{
"cve": "CVE-2026-64242",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64242"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: net2280: Fix double free in probe error path\n\nusb_initialize_gadget() installs gadget_release() as the release\ncallback for the embedded gadget device. The struct net2280 instance is\ntherefore released through gadget_release() when the gadget device\u0027s last\nreference is dropped.\n\nThe probe error path calls net2280_remove(), which tears down the\npartially initialized device and drops the gadget reference with\nusb_put_gadget(). Calling kfree(dev) afterwards can free the same object\nagain.\n\nDrop the explicit kfree() and let the gadget device release callback\nhandle the final free. This issue was found by a static analysis tool\nI am developing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64242",
"url": "https://www.suse.com/security/cve/CVE-2026-64242"
},
{
"category": "external",
"summary": "SUSE Bug 1272659 for CVE-2026-64242",
"url": "https://bugzilla.suse.com/1272659"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64242"
},
{
"cve": "CVE-2026-64298",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64298"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4: include MAY_WRITE in open permission mask for O_TRUNC\n\nPOSIX requires write permission to truncate a file, so an open() that\nspecifies O_TRUNC must be authorized for write access regardless of the\nO_ACCMODE access mode.\n\nnfs_open_permission_mask() builds the access mask passed to\nnfs_may_open(), which is the local authorization gate for OPENs the\nclient serves itself from a cached write delegation via the\ncan_open_delegated() path in nfs4_try_open_cached(). The mask is\nderived from O_ACCMODE alone, so an open(O_RDONLY | O_TRUNC) against a\nfile the caller cannot write requests only MAY_READ and passes the\nlocal check. The OPEN is then satisfied locally and the truncation is\nissued to the server as a SETATTR(size=0) over the delegation stateid,\nwhich the server accepts under standard write-delegation semantics.\nPOSIX requires that this open fail with EACCES.\n\nInclude MAY_WRITE in the mask whenever O_TRUNC is set so the local\ncheck matches the access the server would have enforced.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64298",
"url": "https://www.suse.com/security/cve/CVE-2026-64298"
},
{
"category": "external",
"summary": "SUSE Bug 1273550 for CVE-2026-64298",
"url": "https://bugzilla.suse.com/1273550"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64298"
},
{
"cve": "CVE-2026-64330",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64330"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm: Validate SVID index in svdm_consume_modes()\n\nIn svdm_consume_modes(), the SVID value is read from pmdata-\u003esvids using\npmdata-\u003esvid_index as an array index without bounds validation:\n\n paltmode-\u003esvid = pmdata-\u003esvids[pmdata-\u003esvid_index];\n\nIf pmdata-\u003esvid_index is driven beyond SVID_DISCOVERY_MAX (16), it results\nin an out-of-bounds read of the pmdata-\u003esvids array. Because pd_mode_data\nis embedded inside struct tcpm_port, indexing past svids reads into\nadjacent fields. In particular:\n- At index 16, it reads the altmodes count.\n- At index 18 and beyond, it reads into altmode_desc[], which contains\n partner-supplied SVDM Discovery Modes VDOs.\n\nBy injecting a chosen SVID into altmode_desc[0].vdo and driving svid_index\nto 20, the partner can force paltmode-\u003esvid to be loaded with an arbitrary,\npartner- chosen SVID, which is then registered via\ntypec_partner_register_altmode().\n\nFix this by validating that pmdata-\u003esvid_index is non-negative and strictly\nless than pmdata-\u003ensvids before accessing the pmdata-\u003esvids array inside\nsvdm_consume_modes().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64330",
"url": "https://www.suse.com/security/cve/CVE-2026-64330"
},
{
"category": "external",
"summary": "SUSE Bug 1272681 for CVE-2026-64330",
"url": "https://bugzilla.suse.com/1272681"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-64330"
},
{
"cve": "CVE-2026-64336",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64336"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: keyspan_pda: fix information leak\n\nThe write() callback is supposed to return the number of characters\naccepted or a negative errno. Since the addition of write fifo support\nthe keyspan_pda implementation will however return the number characters\nsubmitted to the device if the write urb is not already in use. If this\nnumber is larger than the number of characters passed to write(), the\nline discipline continues writing data from beyond the tty write buffer.\n\nFix the information leak by making sure that keyspan_pda_write_start()\nreturns zero on success as intended.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64336",
"url": "https://www.suse.com/security/cve/CVE-2026-64336"
},
{
"category": "external",
"summary": "SUSE Bug 1272685 for CVE-2026-64336",
"url": "https://bugzilla.suse.com/1272685"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64336"
},
{
"cve": "CVE-2026-64345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64345"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_printer: take kref only for successful open\n\nprinter_open() returns -EBUSY when the character device is already\nopen, but it increments dev-\u003ekref regardless of the return value. VFS\ndoes not call -\u003erelease() for a failed open, so every rejected second\nopen permanently leaks one reference.\n\nMove kref_get() into the successful-open branch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64345",
"url": "https://www.suse.com/security/cve/CVE-2026-64345"
},
{
"category": "external",
"summary": "SUSE Bug 1272689 for CVE-2026-64345",
"url": "https://bugzilla.suse.com/1272689"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "low"
}
],
"title": "CVE-2026-64345"
},
{
"cve": "CVE-2026-64347",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64347"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: composite: fix dead empty check in the USB_DT_OTG handler\n\nThe OTG branch of composite_setup() falls back to the first\nconfiguration when none is selected:\n\n\tif (cdev-\u003econfig)\n\t\tconfig = cdev-\u003econfig;\n\telse\n\t\tconfig = list_first_entry(\u0026cdev-\u003econfigs,\n\t\t\t\t\t struct usb_configuration, list);\n\tif (!config)\n\t\tgoto done;\n\t...\n\tmemcpy(req-\u003ebuf, config-\u003edescriptors[0], value);\n\nlist_first_entry() never returns NULL. On an empty list it returns\ncontainer_of() of the list head. So the \"if (!config)\" check is dead.\n\nWhen cdev-\u003econfigs is empty, config points at the head inside struct\nusb_composite_dev. config-\u003edescriptors[0] reads whatever sits at that\noffset. The memcpy copies up to w_length bytes of it into the response\nbuffer.\n\ncdev-\u003econfigs can be empty in two cases. One is a teardown race on\ngadget unbind with a control transfer in flight. The other is a driver\nthat sets is_otg before it adds a config. A reproducer that holds\ncdev-\u003econfigs empty triggers a KASAN fault in this branch.\n\nUse list_first_entry_or_null() so the existing check does its job.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64347",
"url": "https://www.suse.com/security/cve/CVE-2026-64347"
},
{
"category": "external",
"summary": "SUSE Bug 1272807 for CVE-2026-64347",
"url": "https://bugzilla.suse.com/1272807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64347"
},
{
"cve": "CVE-2026-64465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64465"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: xhci: Fix sleep in atomic context in xhci_free_streams()\n\nWhen a USB device with active stream endpoints is disconnected,\nxhci_free_streams() is called from the hub_event workqueue to\nfree the stream resources. It calls xhci_free_stream_info()\nwhile holding xhci-\u003elock with irqs disabled.\n\nxhci_free_stream_info() invokes xhci_free_stream_ctx(), which\ncalls dma_free_coherent() for large stream context arrays.\n\ndma_free_coherent() can sleep (e.g. via vunmap), triggering\na BUG when called from atomic context.\n\nCall trace:\n dma_free_attrs+0x174/0x220\n xhci_free_stream_info+0xd0/0x11c\n xhci_free_streams+0x278/0x37c\n usb_free_streams+0x98/0xc0\n usb_unbind_interface+0x1b8/0x2f8\n device_release_driver_internal+0x1d4/0x2cc\n device_release_driver+0x18/0x28\n bus_remove_device+0x160/0x1a4\n device_del+0x1ec/0x350\n usb_disable_device+0x98/0x214\n usb_disconnect+0xf0/0x35c\n hub_event+0xab4/0x19ec\n process_one_work+0x278/0x63c\n\nFix this by saving the stream_info pointers and clearing the\nep references under the lock, then calling xhci_free_stream_info()\noutside the lock where sleeping is allowed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64465",
"url": "https://www.suse.com/security/cve/CVE-2026-64465"
},
{
"category": "external",
"summary": "SUSE Bug 1272843 for CVE-2026-64465",
"url": "https://bugzilla.suse.com/1272843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-64465"
},
{
"cve": "CVE-2026-64530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64530"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle\n\ntcf_classify() can return TC_ACT_CONSUMED while the skb is held by the\ndefragmentation engine (e.g. act_ct on out-of-order fragments). When\nthat happens the skb is no longer owned by the caller and must not be\ntouched again.\n\ntcf_qevent_handle() did not handle TC_ACT_CONSUMED: it fell through the\nswitch and returned the skb to the caller as if classification had\npassed. The only qdisc that wires up qevents today is RED, via three call sites\n(qe_mark on RED_PROB_MARK/HARD_MARK, qe_early_drop on congestion_drop)\nred_enqueue() was continuing to operate on an skb it no longer owns in this\ncase -- enqueueing it, dropping it, or updating statistics. Resulting in a UAF.\n\n tc qdisc add dev eth0 root handle 1: red ... qevent early_drop block 10\n tc filter add block 10 ... action ct\n\n (with ct defrag enabled and traffic that produces out-of-order\n fragments, e.g. a fragmented UDP stream)\n\nHandle TC_ACT_CONSUMED in tcf_qevent_handle() the same way the ingress\nand egress fast paths do: treat it as stolen and return NULL without\ntouching the skb. Unlike the TC_ACT_STOLEN case, the skb must not be\ndropped/freed here, as it is no longer owned by us.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64530",
"url": "https://www.suse.com/security/cve/CVE-2026-64530"
},
{
"category": "external",
"summary": "SUSE Bug 1271866 for CVE-2026-64530",
"url": "https://bugzilla.suse.com/1271866"
},
{
"category": "external",
"summary": "SUSE Bug 1271867 for CVE-2026-64530",
"url": "https://bugzilla.suse.com/1271867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-64530"
},
{
"cve": "CVE-2026-64560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64560"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nposix-cpu-timers: Prevent UAF caused by non-leader exec() race\n\nWongi and Jungwoo decoded and reported a non-leader exec() related race\nwhich can result in an UAF:\n\n sys_timer_delete()\t\t\texec()\n posix_cpu_timer_del()\n // Observes old leader\n p = pid_task(pid, pid_type);\t\tde_thread()\n \t\t\t\t\t switch_leader();\n\t\t\t\t\t release_task(old_leader)\n\t\t\t\t\t __exit_signal(old_leader)\n\t\t\t\t\t sighand = lock(old_leader, sighand);\n\t\t\t\t\t posix_cpu_timers*_exit();\n sighand = lock_task_sighand(p)\t unhash_task(old_leader);\n sh = lock(p, sighand)\t \t old_leader-\u003esighand = NULL;\n\t\t\t\t\t unlock(sighand);\n (p-\u003esighand == NULL)\n\tunlock(sh)\n\treturn NULL;\n\n // Returns without action\n if(!sighand)\n return 0;\n free_posix_timer();\n\nThis is \"harmless\" unless the deleted timer was armed and enqueued in\np-\u003esignal because on exec() a TGID targeted timer is inherited.\n\nAs sys_timer_delete() freed the underlying posix timer object\nrun_posix_cpu_timers() or any timerqueue related add/delete operations on\nother timers will access the freed object\u0027s timerqueue node, which results\nin an UAF.\n\nThere is a similar problem vs. posix_cpu_timer_set(). For regular posix\ntimers it just transiently returns -ESRCH to user space, but for the use\ncase in do_cpu_nanosleep() it\u0027s the same UAF just that the k_itimer is\nallocated on the stack.\n\nAlso posix_cpu_timer_rearm() fails to rearm the timer, which means it stops\nto expire.\n\nWhile debating solutions Frederic pointed out another problem:\n\n posix_cpu_timer_del(tmr)\n\t\t\t\t\t__exit_signal(p)\n\t\t\t\t\t posix_cpu_timers*_exit(p);\n\t\t\t\t\t unhash_task(p);\n\t\t\t\t\t p-\u003esighand = NULL;\n sh = lock_task_sighand(p)\n sighand = p-\u003esighand;\n\tif (!sighand)\n\t return NULL;\n\tlock(sighand);\n\n if (!sh)\n\tWARN_ON_ONCE(timer_queued(tmr));\n\nOn weakly ordered architectures it is not guaranteed that\nposix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit()\nwhen p-\u003esighand is observed as NULL, which means the WARN() can be a false\npositive.\n\nSolve these issues by:\n\n 1) Changing the store in __exit_signal() to smp_store_release().\n\n 2) Adding a smp_acquire__after_ctrl_dep() into the !sighand path\n of lock_task_sighand().\n\n 3) Creating a helper function for looking up the task and locking sighand\n which does not return when sighand == NULL. Instead it retries the\n task lookup and only if that fails it gives up.\n\n 4) Using that helper in the three affected functions.\n\n#1/#2 ensures that the reader side which observes sighand == NULL also\nobserves all preceeding stores, i.e. the stores in posix_cpu_timers*_exit()\nand the ones in unhash_task().\n\n#3 ensures that the above described non-leader exec() situation is handled\ngracefully. When the task lookup returns the old leader, but sighand ==\nNULL then it retries. In the non-leader exec() case the subsequent task\nlookup will observe the new leader due to #1/#2. In normal exit() scenarios\nthe subsequent lookup fails.\n\nWhen the task lookup fails, the function also checks whether the timer is\nstill enqueued and issues a warning if that\u0027s the case. Unfortunately there\nis nothing which can be done about it, but as the task is already not\nlonger visible the timer should not be accessed anymore. This check also\nrequires memory ordering, which is not provided when the first lookup\nfails. To achieve that the check is preceeded by a smp_rmb() which pairs\nwith the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that\nthe stores in posix_cpu_timers*_exit() are visible.\n\nThe history of the non-leader exec() issue goes back to the early days of\nposix CPU timers, which stored a pointer to the group leader task in the\ntimer. That obviously fails when a non-leader exec() switches the leader.\ncommit e0a70217107e (\"posix-cpu-timers: workaround to suppress the problems\nwith mt exec\") added a temporary workaround for that in 2010 which surv\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64560",
"url": "https://www.suse.com/security/cve/CVE-2026-64560"
},
{
"category": "external",
"summary": "SUSE Bug 1273004 for CVE-2026-64560",
"url": "https://bugzilla.suse.com/1273004"
},
{
"category": "external",
"summary": "SUSE Bug 1273007 for CVE-2026-64560",
"url": "https://bugzilla.suse.com/1273007"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-64560"
},
{
"cve": "CVE-2026-64561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64561"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Check for invalid/obsolete root *after* making MMU pages available\n\nCheck for a \"stale\" page fault, i.e. for an invalid and/or obsolete root,\nafter making MMU pages available for the shadow MMU. If reclaiming shadow\npages zaps an in-use root, i.e. marks it invalid, then KVM will attempt to\nmap memory into an invalid root. On its own, populating an invalid root is\n\"fine\", but because child shadow pages inherit their parent\u0027s role, any\nchildren created during the map/fetch will be created as invalid pages,\nthus violating KVM\u0027s invariant that invalid pages are never on the list of\nactive MMU pages.\n\nNote, the underlying flaw has existed since KVM first started tracking\ninvalid roots in 2008 (commit 2e53d63acba7, \"KVM: MMU: ignore zapped root\npagetables\"), but the true badness only came along in 2020 (Linux 5.9)\nwith the invariant that invalid shadow pages can\u0027t be on the list of\nactive pages.\n\nNote #2, inheriting role.invalid when creating child shadow pages is also\nfar from ideal; that flaw will be addressed separately.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64561",
"url": "https://www.suse.com/security/cve/CVE-2026-64561"
},
{
"category": "external",
"summary": "SUSE Bug 1273231 for CVE-2026-64561",
"url": "https://bugzilla.suse.com/1273231"
},
{
"category": "external",
"summary": "SUSE Bug 1273232 for CVE-2026-64561",
"url": "https://bugzilla.suse.com/1273232"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-64561"
},
{
"cve": "CVE-2026-64564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64564"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: don\u0027t free the ASCONF\u0027s own transport in DEL-IP processing\n\nsctp_process_asconf() caches the transport the ASCONF chunk is processed\nagainst in asconf-\u003etransport (== chunk-\u003etransport, set once in sctp_rcv()).\nFor an ASCONF located through its Address Parameter by\n__sctp_rcv_asconf_lookup(), that cached transport corresponds to the\nAddress Parameter, which need not be the packet\u0027s source address.\n\nsctp_process_asconf_param() rejects a DEL-IP for the packet source address\n(ADDIP D8, SCTP_ERROR_DEL_SRC_IP), but nothing protects asconf-\u003etransport.\nA single ASCONF can therefore carry, in order:\n\n [Address Parameter L] [DEL-IP L] [DEL-IP 0.0.0.0]\n\nwhere L differs from the source. The DEL-IP for L passes the D8 check and\ncalls sctp_assoc_rm_peer() on the transport that asconf-\u003etransport still\npoints at, freeing it (RCU-deferred). The following wildcard DEL-IP then\nreuses the now-dangling asconf-\u003etransport in sctp_assoc_set_primary() and\nsctp_assoc_del_nonprimary_peers(): set_primary() dereferences the freed\ntransport (-\u003eipaddr, -\u003estate) and plants the dangling pointer into\nasoc-\u003epeer.primary_path / active_path, and del_nonprimary_peers(), keeping\nonly the pointer that is no longer on the list, removes every real\ntransport, leaving the association with a transport_count of 0 and\nprimary_path/active_path pointing at freed memory.\n\nReject a DEL-IP that targets the transport the ASCONF is being processed\nagainst, mirroring the existing source-address guard, so the wildcard\nbranch can never reuse a freed transport.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64564",
"url": "https://www.suse.com/security/cve/CVE-2026-64564"
},
{
"category": "external",
"summary": "SUSE Bug 1274072 for CVE-2026-64564",
"url": "https://bugzilla.suse.com/1274072"
},
{
"category": "external",
"summary": "SUSE Bug 1274074 for CVE-2026-64564",
"url": "https://bugzilla.suse.com/1274074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-64564"
},
{
"cve": "CVE-2026-64600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64600"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: resample the data fork mapping after cycling ILOCK\n\nxfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode,\na data fork mapping, and a cow fork mapping. Unfortunately, these two\nhelpers cycle the ILOCK to grab a transaction, which means that the\nmappings are stale as soon as we reacquire the ILOCK. Currently we\nrefresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but\nwe don\u0027t refresh the data fork mapping beforehand, which means that the\nxfs_bmap_trim_cow in that function queries the refcount btree about the\nwrong physical blocks and returns an inaccurate value in *shared.\n\nIf *shared is now false, the directio write proceeds with a stale data\nfork mapping. Fix this by querying the data fork mapping if the\nsequence counter changes across the ILOCK cycle.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64600",
"url": "https://www.suse.com/security/cve/CVE-2026-64600"
},
{
"category": "external",
"summary": "SUSE Bug 1271526 for CVE-2026-64600",
"url": "https://bugzilla.suse.com/1271526"
},
{
"category": "external",
"summary": "SUSE Bug 1271543 for CVE-2026-64600",
"url": "https://bugzilla.suse.com/1271543"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-51.1.noarch",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-51.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-51.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T20:43:06Z",
"details": "important"
}
],
"title": "CVE-2026-64600"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…