{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).\n- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).\n- CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).\n- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).\n- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).\n- CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).\n- CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).\n- CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).\n- CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).\n- CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).\n- CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).\n- CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).\n- CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).\n- CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).\n- CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region\u0027s RMID to free list (bsc#1276791).\n- CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).\n- CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).\n- CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).\n- CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).\n- CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).\n- CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).\n- CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).\n- CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).\n- CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).\n- CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).\n- CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).\n- CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).\n- CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).\n- CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx-\u003estate (bsc#1275564).\n- CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).\n- CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).\n- CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).\n- CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).\n- CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).\n- CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).\n- CVE-2026-80579: fbdev: clear fb_info-\u003emode before deleting a videomode (bsc#1277260).\n- CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706).\n- CVE-2026-80977: net: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error() (bsc#1280259).\n- CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).\n- CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477).\n- CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).\n- CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144).\n- CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).\n- CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525).\n- CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).\n- CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726).\n- CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865).\n- CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979).\n- CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742).\n- CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784).\n- CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037).\n- CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768).\n- CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770).\n- CVE-2026-97491: net/rds: Don\u0027t sleep inside rds_ib_conn_path_shutdown (bsc#1283142).\n- CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).\n- CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).\n- CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736).\n- CVE-2026-97945: replace with mainline version and update References (bsc#1283144).\n- CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823).\n- CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).\n- CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).\n- CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979).\n- CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936).\n- CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).\n- CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415).\n- CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559).\n- CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581).\n- CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).\n- CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).\n- CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606).\n- CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462).\n- CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).\n- CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295).\n- CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647).\n- CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291).\n- CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).\n- CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289).\n- CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).\n- CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649).\n- CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288).\n- CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR\u0027s PD (bsc#1284655).\n- CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424).\n- CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).\n\nThe following non security issues were fixed:\n\n- ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes).\n- ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git-fixes).\n- ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes).\n- ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git-fixes).\n- ASoC: Intel: avs: Reset the stream unless it is already prepared (git-fixes).\n- ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes).\n- ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes).\n- ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes).\n- ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git-fixes).\n- ASoC: stm32: spdifrx: fix synchronization state check (git-fixes).\n- ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes).\n- Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes).\n- Bluetooth: MGMT: Fix status of pending commands flushed on power off (git-fixes).\n- Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git-fixes).\n- Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes).\n- Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes).\n- Drivers: hv: Don\u0027t reset VMBus connection state on error/exit paths (git-fixes).\n- Drivers: hv: vmbus: fix typo \"substract\" in comment (git-fixes).\n- drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes).\n- drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git-fixes).\n- drm/amdgpu: don\u0027t drop the runtime PM reference twice in amdgpu_gpr (git-fixes).\n- drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes).\n- drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes).\n- drm/aspeed: Balance the display clock enable on teardown (git-fixes).\n- drm/dp: don\u0027t mark the AUX backlight enabled when enabling failed (git-fixes).\n- drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes).\n- drm/gud: don\u0027t keep a connector without a CRTC as connector_state (git-fixes).\n- drm/i915/gem: Prevent overstepping exec array boundary (git-fixes).\n- drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes).\n- drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes).\n- drm/vc4: Free the BO cache size list on teardown (git-fixes).\n- gpio: exar: initialize the ID before registering its cleanup (git-fixes).\n- gpio: xilinx: fix runtime PM leak on request error path (git-fixes).\n- IB/hfi1: Resolve the credit-return buffer through the send context\u0027s node (git-fixes).\n- kernel-binary.spec.in: Fix syntax error.\n- KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199).\n- KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199).\n- KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199).\n- KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199).\n- KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199).\n- KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- memstick: core: wait for request completion before freeing card (git-fixes).\n- memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes).\n- mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes).\n- mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes).\n- mmc: mtk-sd: Cancel request timeout work on remove (git-fixes).\n- mmc: sdhci-sprd: disable runtime PM on remove (git-fixes).\n- net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes).\n- net: mctp-i2c: fix duplicate reception of old data (bsc#1266730).\n- net: usb: ax88179_178a: fix rx frame length for non-last packets (git-fixes).\n- netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).\n- PCI: hv: Probe vPCI buses asynchronously (git-fixes).\n- PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes).\n- pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes).\n- power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git-fixes).\n- power: supply: Fix maintenance charge table kernel-doc (git-fixes).\n- power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes).\n- powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199).\n- pseries/plpks: clear SED key data after use (bsc#1215199).\n- pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199).\n- pseries/plpks: clear signed update authentication buffer (bsc#1215199).\n- pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199).\n- pseries/plpks: make narrowing conversions explicit (bsc#1215199).\n- pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199).\n- regulator: ltc3676: don\u0027t read the write-only HRST and CLIRQ registers (git-fixes).\n- serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git-fixes).\n- tools/hv: fix typo \"retrive\" in comment (git-fixes).\n- tools: gpio: fix building from the top level with O= (git-fixes).\n- wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes).\n- wifi: mt76: mt792x: pick the SAR table layout from the table itself (git-fixes).\n- wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes).\n- xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.0-kernel-719",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24371-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:24371-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202624371-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:24371-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202624371-1/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1215199",
        "url": "https://bugzilla.suse.com/1215199"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1255531",
        "url": "https://bugzilla.suse.com/1255531"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264267",
        "url": "https://bugzilla.suse.com/1264267"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264851",
        "url": "https://bugzilla.suse.com/1264851"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266694",
        "url": "https://bugzilla.suse.com/1266694"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266730",
        "url": "https://bugzilla.suse.com/1266730"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269561",
        "url": "https://bugzilla.suse.com/1269561"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272178",
        "url": "https://bugzilla.suse.com/1272178"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273040",
        "url": "https://bugzilla.suse.com/1273040"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273116",
        "url": "https://bugzilla.suse.com/1273116"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273290",
        "url": "https://bugzilla.suse.com/1273290"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273599",
        "url": "https://bugzilla.suse.com/1273599"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273751",
        "url": "https://bugzilla.suse.com/1273751"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273764",
        "url": "https://bugzilla.suse.com/1273764"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273865",
        "url": "https://bugzilla.suse.com/1273865"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274008",
        "url": "https://bugzilla.suse.com/1274008"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274256",
        "url": "https://bugzilla.suse.com/1274256"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274653",
        "url": "https://bugzilla.suse.com/1274653"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275510",
        "url": "https://bugzilla.suse.com/1275510"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275564",
        "url": "https://bugzilla.suse.com/1275564"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275644",
        "url": "https://bugzilla.suse.com/1275644"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275785",
        "url": "https://bugzilla.suse.com/1275785"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275786",
        "url": "https://bugzilla.suse.com/1275786"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275964",
        "url": "https://bugzilla.suse.com/1275964"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276562",
        "url": "https://bugzilla.suse.com/1276562"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276791",
        "url": "https://bugzilla.suse.com/1276791"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276836",
        "url": "https://bugzilla.suse.com/1276836"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276873",
        "url": "https://bugzilla.suse.com/1276873"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276951",
        "url": "https://bugzilla.suse.com/1276951"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277174",
        "url": "https://bugzilla.suse.com/1277174"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277260",
        "url": "https://bugzilla.suse.com/1277260"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277310",
        "url": "https://bugzilla.suse.com/1277310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277603",
        "url": "https://bugzilla.suse.com/1277603"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277614",
        "url": "https://bugzilla.suse.com/1277614"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277691",
        "url": "https://bugzilla.suse.com/1277691"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277742",
        "url": "https://bugzilla.suse.com/1277742"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277747",
        "url": "https://bugzilla.suse.com/1277747"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277804",
        "url": "https://bugzilla.suse.com/1277804"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277821",
        "url": "https://bugzilla.suse.com/1277821"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277889",
        "url": "https://bugzilla.suse.com/1277889"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277894",
        "url": "https://bugzilla.suse.com/1277894"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277931",
        "url": "https://bugzilla.suse.com/1277931"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278232",
        "url": "https://bugzilla.suse.com/1278232"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279706",
        "url": "https://bugzilla.suse.com/1279706"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280179",
        "url": "https://bugzilla.suse.com/1280179"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280251",
        "url": "https://bugzilla.suse.com/1280251"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280259",
        "url": "https://bugzilla.suse.com/1280259"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280477",
        "url": "https://bugzilla.suse.com/1280477"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280743",
        "url": "https://bugzilla.suse.com/1280743"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280966",
        "url": "https://bugzilla.suse.com/1280966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281144",
        "url": "https://bugzilla.suse.com/1281144"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281280",
        "url": "https://bugzilla.suse.com/1281280"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281525",
        "url": "https://bugzilla.suse.com/1281525"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281726",
        "url": "https://bugzilla.suse.com/1281726"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281771",
        "url": "https://bugzilla.suse.com/1281771"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281819",
        "url": "https://bugzilla.suse.com/1281819"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281865",
        "url": "https://bugzilla.suse.com/1281865"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281979",
        "url": "https://bugzilla.suse.com/1281979"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282742",
        "url": "https://bugzilla.suse.com/1282742"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282755",
        "url": "https://bugzilla.suse.com/1282755"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282761",
        "url": "https://bugzilla.suse.com/1282761"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282762",
        "url": "https://bugzilla.suse.com/1282762"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282768",
        "url": "https://bugzilla.suse.com/1282768"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282770",
        "url": "https://bugzilla.suse.com/1282770"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282784",
        "url": "https://bugzilla.suse.com/1282784"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282808",
        "url": "https://bugzilla.suse.com/1282808"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282932",
        "url": "https://bugzilla.suse.com/1282932"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283037",
        "url": "https://bugzilla.suse.com/1283037"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283142",
        "url": "https://bugzilla.suse.com/1283142"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283144",
        "url": "https://bugzilla.suse.com/1283144"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283736",
        "url": "https://bugzilla.suse.com/1283736"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283823",
        "url": "https://bugzilla.suse.com/1283823"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283835",
        "url": "https://bugzilla.suse.com/1283835"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283851",
        "url": "https://bugzilla.suse.com/1283851"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283894",
        "url": "https://bugzilla.suse.com/1283894"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283936",
        "url": "https://bugzilla.suse.com/1283936"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283946",
        "url": "https://bugzilla.suse.com/1283946"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283963",
        "url": "https://bugzilla.suse.com/1283963"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283979",
        "url": "https://bugzilla.suse.com/1283979"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284288",
        "url": "https://bugzilla.suse.com/1284288"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284289",
        "url": "https://bugzilla.suse.com/1284289"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284291",
        "url": "https://bugzilla.suse.com/1284291"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284295",
        "url": "https://bugzilla.suse.com/1284295"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284408",
        "url": "https://bugzilla.suse.com/1284408"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284415",
        "url": "https://bugzilla.suse.com/1284415"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284424",
        "url": "https://bugzilla.suse.com/1284424"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284462",
        "url": "https://bugzilla.suse.com/1284462"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284518",
        "url": "https://bugzilla.suse.com/1284518"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284559",
        "url": "https://bugzilla.suse.com/1284559"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284581",
        "url": "https://bugzilla.suse.com/1284581"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284606",
        "url": "https://bugzilla.suse.com/1284606"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284647",
        "url": "https://bugzilla.suse.com/1284647"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284649",
        "url": "https://bugzilla.suse.com/1284649"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284655",
        "url": "https://bugzilla.suse.com/1284655"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284713",
        "url": "https://bugzilla.suse.com/1284713"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284746",
        "url": "https://bugzilla.suse.com/1284746"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284790",
        "url": "https://bugzilla.suse.com/1284790"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284791",
        "url": "https://bugzilla.suse.com/1284791"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1285684",
        "url": "https://bugzilla.suse.com/1285684"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-68358 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-68358/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43091 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43091/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43299 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43299/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45865 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45865/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45930 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45930/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53108 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53108/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63830 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63830/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63983 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63983/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64012 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64012/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64070 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64070/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64116 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64116/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64280 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64280/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64422 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64422/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64424 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64424/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64461 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64461/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64568 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64568/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68233 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68233/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68241 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68241/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68242 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68242/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68323 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68323/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72015 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72015/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72040 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72040/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72041 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72081 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72172 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72172/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72213 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72213/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72236 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72236/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72301 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72301/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72305 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72305/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72319 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72319/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72493 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72493/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74312 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74312/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74379 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74379/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74544 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74544/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74578 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74578/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74583 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74583/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74587 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74587/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74611 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74611/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74614 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74614/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74653 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74653/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74723 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74723/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80579 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80579/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80893 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80893/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80977 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80977/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89528 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89528/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89669 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89669/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89685 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89685/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89706 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89706/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89778 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89778/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89811 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89811/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89987 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89987/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90011 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90011/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90101 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90101/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90283 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90283/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90289 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90289/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90315 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90315/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-92488 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-92488/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93222 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93222/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93252 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93252/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93787 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93787/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93800 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93800/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93806 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93806/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93820 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93820/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93821 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93821/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93822 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93822/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97415 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97415/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97416 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97416/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97491 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97491/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97555 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97555/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97564 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97564/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97595 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97595/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97945 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97945/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98010 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98010/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98015 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98015/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98016 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98016/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98077 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98089 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98089/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98130 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98130/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98173 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98173/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98216 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98216/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98248 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98248/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98252 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98252/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98253 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98253/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98260 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98260/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98269 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98269/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98273 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98273/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98323 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98323/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98347 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98347/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98352 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98352/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98354 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98354/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98357 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98357/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98358 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98358/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98359 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98359/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98360 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98360/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98365 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98365/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98366 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98366/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98367 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98367/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-99999 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-99999/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2026-10-27T13:10:55Z",
      "generator": {
        "date": "2026-10-21T12:21:28Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:24371-1",
      "initial_release_date": "2026-10-21T12:21:28Z",
      "revision_history": [
        {
          "date": "2026-10-21T12:21:28Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-27T13:10:55Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-0:6.4.0-159998.54.1.aarch64",
                "product": {
                  "name": "kernel-default-0:6.4.0-159998.54.1.aarch64",
                  "product_id": "kernel-default-0:6.4.0-159998.54.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default@6.4.0-159998.54.1?arch=aarch64\u0026upstream=kernel-source-0:6.4.0-159998.54.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
                "product": {
                  "name": "kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
                  "product_id": "kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-base@6.4.0-159998.54.1.159998.21.40?arch=aarch64\u0026upstream=kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-0:6.4.0-159998.54.1.noarch",
                "product": {
                  "name": "kernel-devel-0:6.4.0-159998.54.1.noarch",
                  "product_id": "kernel-devel-0:6.4.0-159998.54.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@6.4.0-159998.54.1?arch=noarch\u0026upstream=kernel-source-0:6.4.0-159998.54.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-0:6.4.0-159998.54.1.noarch",
                "product": {
                  "name": "kernel-macros-0:6.4.0-159998.54.1.noarch",
                  "product_id": "kernel-macros-0:6.4.0-159998.54.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-macros@6.4.0-159998.54.1?arch=noarch\u0026upstream=kernel-source-0:6.4.0-159998.54.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-0:6.4.0-159998.54.1.noarch",
                "product": {
                  "name": "kernel-source-0:6.4.0-159998.54.1.noarch",
                  "product_id": "kernel-source-0:6.4.0-159998.54.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source@6.4.0-159998.54.1?arch=noarch\u0026upstream=kernel-source-0:6.4.0-159998.54.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-0:6.4.0-159998.54.1.s390x",
                "product": {
                  "name": "kernel-default-0:6.4.0-159998.54.1.s390x",
                  "product_id": "kernel-default-0:6.4.0-159998.54.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default@6.4.0-159998.54.1?arch=s390x\u0026upstream=kernel-source-0:6.4.0-159998.54.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
                "product": {
                  "name": "kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
                  "product_id": "kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-livepatch@6.4.0-159998.54.1?arch=s390x\u0026upstream=kernel-source-0:6.4.0-159998.54.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-0:6.4.0-159998.54.1.x86_64",
                "product": {
                  "name": "kernel-default-0:6.4.0-159998.54.1.x86_64",
                  "product_id": "kernel-default-0:6.4.0-159998.54.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default@6.4.0-159998.54.1?arch=x86_64\u0026upstream=kernel-source-0:6.4.0-159998.54.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
                "product": {
                  "name": "kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
                  "product_id": "kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-base@6.4.0-159998.54.1.159998.21.40?arch=x86_64\u0026upstream=kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
                "product": {
                  "name": "kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
                  "product_id": "kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-livepatch@6.4.0-159998.54.1?arch=x86_64\u0026upstream=kernel-source-0:6.4.0-159998.54.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
                  "product_id": "kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-kvmsmall@6.4.0-159998.54.1?arch=x86_64\u0026upstream=kernel-source-0:6.4.0-159998.54.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.0",
                "product": {
                  "name": "SUSE Linux Micro 6.0",
                  "product_id": "SUSE Linux Micro 6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-0:6.4.0-159998.54.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64"
        },
        "product_reference": "kernel-default-0:6.4.0-159998.54.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-0:6.4.0-159998.54.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x"
        },
        "product_reference": "kernel-default-0:6.4.0-159998.54.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-0:6.4.0-159998.54.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64"
        },
        "product_reference": "kernel-default-0:6.4.0-159998.54.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64"
        },
        "product_reference": "kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64"
        },
        "product_reference": "kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-livepatch-0:6.4.0-159998.54.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x"
        },
        "product_reference": "kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64"
        },
        "product_reference": "kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:6.4.0-159998.54.1.noarch as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch"
        },
        "product_reference": "kernel-devel-0:6.4.0-159998.54.1.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-0:6.4.0-159998.54.1.noarch as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch"
        },
        "product_reference": "kernel-macros-0:6.4.0-159998.54.1.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:6.4.0-159998.54.1.noarch as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        },
        "product_reference": "kernel-source-0:6.4.0-159998.54.1.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-68358",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-68358"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix racy bitfield write in btrfs_clear_space_info_full()\n\nFrom the memory-barriers.txt document regarding memory barrier ordering\nguarantees:\n\n (*) These guarantees do not apply to bitfields, because compilers often\n     generate code to modify these using non-atomic read-modify-write\n     sequences.  Do not attempt to use bitfields to synchronize parallel\n     algorithms.\n\n (*) Even in cases where bitfields are protected by locks, all fields\n     in a given bitfield must be protected by one lock.  If two fields\n     in a given bitfield are protected by different locks, the compiler\u0027s\n     non-atomic read-modify-write sequences can cause an update to one\n     field to corrupt the value of an adjacent field.\n\nbtrfs_space_info has a bitfield sharing an underlying word consisting of\nthe fields full, chunk_alloc, and flush:\n\nstruct btrfs_space_info {\n        struct btrfs_fs_info *     fs_info;              /*     0     8 */\n        struct btrfs_space_info *  parent;               /*     8     8 */\n        ...\n        int                        clamp;                /*   172     4 */\n        unsigned int               full:1;               /*   176: 0  4 */\n        unsigned int               chunk_alloc:1;        /*   176: 1  4 */\n        unsigned int               flush:1;              /*   176: 2  4 */\n        ...\n\nTherefore, to be safe from parallel read-modify-writes losing a write to\none of the bitfield members protected by a lock, all writes to all the\nbitfields must use the lock. They almost universally do, except for\nbtrfs_clear_space_info_full() which iterates over the space_infos and\nwrites out found-\u003efull = 0 without a lock.\n\nImagine that we have one thread completing a transaction in which we\nfinished deleting a block_group and are thus calling\nbtrfs_clear_space_info_full() while simultaneously the data reclaim\nticket infrastructure is running do_async_reclaim_data_space():\n\n          T1                                             T2\nbtrfs_commit_transaction\n  btrfs_clear_space_info_full\n  data_sinfo-\u003efull = 0\n  READ: full:0, chunk_alloc:0, flush:1\n                                              do_async_reclaim_data_space(data_sinfo)\n                                              spin_lock(\u0026space_info-\u003elock);\n                                              if(list_empty(tickets))\n                                                space_info-\u003eflush = 0;\n                                                READ: full: 0, chunk_alloc:0, flush:1\n                                                MOD/WRITE: full: 0, chunk_alloc:0, flush:0\n                                                spin_unlock(\u0026space_info-\u003elock);\n                                                return;\n  MOD/WRITE: full:0, chunk_alloc:0, flush:1\n\nand now data_sinfo-\u003eflush is 1 but the reclaim worker has exited. This\nbreaks the invariant that flush is 0 iff there is no work queued or\nrunning. Once this invariant is violated, future allocations that go\ninto __reserve_bytes() will add tickets to space_info-\u003etickets but will\nsee space_info-\u003eflush is set to 1 and not queue the work. After this,\nthey will block forever on the resulting ticket, as it is now impossible\nto kick the worker again.\n\nI also confirmed by looking at the assembly of the affected kernel that\nit is doing RMW operations. For example, to set the flush (3rd) bit to 0,\nthe assembly is:\n  andb    $0xfb,0x60(%rbx)\nand similarly for setting the full (1st) bit to 0:\n  andb    $0xfe,-0x20(%rax)\n\nSo I think this is really a bug on practical systems.  I have observed\na number of systems in this exact state, but am currently unable to\nreproduce it.\n\nRather than leaving this footgun lying around for the future, take\nadvantage of the fact that there is room in the struct anyway, and that\nit is already quite large and simply change the three bitfield members to\nbools. This avoids writes to space_info-\u003efull having any effect on\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-68358",
          "url": "https://www.suse.com/security/cve/CVE-2025-68358"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1255531 for CVE-2025-68358",
          "url": "https://bugzilla.suse.com/1255531"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-68358"
    },
    {
      "cve": "CVE-2026-43091",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43091"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: Wait for RCU readers during policy netns exit\n\nxfrm_policy_fini() frees the policy_bydst hash tables after flushing the\npolicy work items and deleting all policies, but it does not wait for\nconcurrent RCU readers to leave their read-side critical sections first.\n\nThe policy_bydst tables are published via rcu_assign_pointer() and are\nlooked up through rcu_dereference_check(), so netns teardown must also\nwait for an RCU grace period before freeing the table memory.\n\nFix this by adding synchronize_rcu() before freeing the policy hash tables.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43091",
          "url": "https://www.suse.com/security/cve/CVE-2026-43091"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264267 for CVE-2026-43091",
          "url": "https://bugzilla.suse.com/1264267"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43091"
    },
    {
      "cve": "CVE-2026-43299",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43299"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()\n\n[BUG]\nThere is a bug report that when btrfs hits ENOSPC error in a critical\npath, btrfs flips RO (this part is expected, although the ENOSPC bug\nstill needs to be addressed).\n\nThe problem is after the RO flip, if there is a read repair pending, we\ncan hit the ASSERT() inside btrfs_repair_io_failure() like the following:\n\n  BTRFS info (device vdc): relocating block group 30408704 flags metadata|raid1\n  ------------[ cut here ]------------\n  BTRFS: Transaction aborted (error -28)\n  WARNING: fs/btrfs/extent-tree.c:3235 at __btrfs_free_extent.isra.0+0x453/0xfd0, CPU#1: btrfs/383844\n  Modules linked in: kvm_intel kvm irqbypass\n  [...]\n  ---[ end trace 0000000000000000 ]---\n  BTRFS info (device vdc state EA): 2 enospc errors during balance\n  BTRFS info (device vdc state EA): balance: ended with status: -30\n  BTRFS error (device vdc state EA): parent transid verify failed on logical 30556160 mirror 2 wanted 8 found 6\n  BTRFS error (device vdc state EA): bdev /dev/nvme0n1 errs: wr 0, rd 0, flush 0, corrupt 10, gen 0\n  [...]\n  assertion failed: !(fs_info-\u003esb-\u003es_flags \u0026 SB_RDONLY) :: 0, in fs/btrfs/bio.c:938\n  ------------[ cut here ]------------\n  assertion failed: !(fs_info-\u003esb-\u003es_flags \u0026 SB_RDONLY) :: 0, in fs/btrfs/bio.c:938\n  kernel BUG at fs/btrfs/bio.c:938!\n  Oops: invalid opcode: 0000 [#1] SMP NOPTI\n  CPU: 0 UID: 0 PID: 868 Comm: kworker/u8:13 Tainted: G        W        N  6.19.0-rc6+ #4788 PREEMPT(full)\n  Tainted: [W]=WARN, [N]=TEST\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014\n  Workqueue: btrfs-endio simple_end_io_work\n  RIP: 0010:btrfs_repair_io_failure.cold+0xb2/0x120\n  RSP: 0000:ffffc90001d2bcf0 EFLAGS: 00010246\n  RAX: 0000000000000051 RBX: 0000000000001000 RCX: 0000000000000000\n  RDX: 0000000000000000 RSI: ffffffff8305cf42 RDI: 00000000ffffffff\n  RBP: 0000000000000002 R08: 00000000fffeffff R09: ffffffff837fa988\n  R10: ffffffff8327a9e0 R11: 6f69747265737361 R12: ffff88813018d310\n  R13: ffff888168b8a000 R14: ffffc90001d2bd90 R15: ffff88810a169000\n  FS:  0000000000000000(0000) GS:ffff8885e752c000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  ------------[ cut here ]------------\n\n[CAUSE]\nThe cause of -ENOSPC error during the test case btrfs/124 is still\nunknown, although it\u0027s known that we still have cases where metadata can\nbe over-committed but can not be fulfilled correctly, thus if we hit\nsuch ENOSPC error inside a critical path, we have no choice but abort\nthe current transaction.\n\nThis will mark the fs read-only.\n\nThe problem is inside the btrfs_repair_io_failure() path that we require\nthe fs not to be mount read-only. This is normally fine, but if we are\ndoing a read-repair meanwhile the fs flips RO due to a critical error,\nwe can enter btrfs_repair_io_failure() with super block set to\nread-only, thus triggering the above crash.\n\n[FIX]\nJust replace the ASSERT() with a proper return if the fs is already\nread-only.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43299",
          "url": "https://www.suse.com/security/cve/CVE-2026-43299"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264851 for CVE-2026-43299",
          "url": "https://bugzilla.suse.com/1264851"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43299"
    },
    {
      "cve": "CVE-2026-45865",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45865"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmctp i2c: initialise event handler read bytes\n\nSet a 0xff value for i2c reads of an mctp-i2c device. Otherwise reads\nwill return \"val\" from the i2c bus driver. For i2c-aspeed and\ni2c-npcm7xx that is a stack uninitialised u8.\n\nTested with \"i2ctransfer -y 1 r10@0x34\" where 0x34 is a mctp-i2c\ninstance, now it returns all 0xff.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45865",
          "url": "https://www.suse.com/security/cve/CVE-2026-45865"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266694 for CVE-2026-45865",
          "url": "https://bugzilla.suse.com/1266694"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45865"
    },
    {
      "cve": "CVE-2026-45930",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45930"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mctp: ensure our nlmsg responses are initialised\n\nSyed Faraz Abrar (@farazsth98) from Zellic, and Pumpkin (@u1f383) from\nDEVCORE Research Team working with Trend Micro Zero Day Initiative\nreport that a RTM_GETNEIGH will return uninitalised data in the pad\nbytes of the ndmsg data.\n\nEnsure we\u0027re initialising the netlink data to zero, in the link, addr\nand neigh response messages.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45930",
          "url": "https://www.suse.com/security/cve/CVE-2026-45930"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266730 for CVE-2026-45930",
          "url": "https://bugzilla.suse.com/1266730"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45930"
    },
    {
      "cve": "CVE-2026-53108",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53108"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/64s: Fix unmap race with PMD migration entries\n\nThe following race is possible with migration swap entries or\ndevice-private THP entries. e.g. when move_pages is called on a PMD THP\npage, then there maybe an intermediate state, where PMD entry acts as\na migration swap entry (pmd_present() is true). Then if an munmap\nhappens at the same time, then this VM_BUG_ON() can happen in\npmdp_huge_get_and_clear_full().\n\nThis patch fixes that.\n\nThread A: move_pages() syscall\n  add_folio_for_migration()\n    mmap_read_lock(mm)\n    folio_isolate_lru(folio)\n    mmap_read_unlock(mm)\n\n  do_move_pages_to_node()\n    migrate_pages()\n      try_to_migrate_one()\n        spin_lock(ptl)\n        set_pmd_migration_entry()\n          pmdp_invalidate()     # PMD: _PAGE_INVALID | _PAGE_PTE | pfn\n          set_pmd_at()          # PMD: migration swap entry (pmd_present=0)\n        spin_unlock(ptl)\n        [page copy phase]       # \u003c--- RACE WINDOW --\u003e\n\nThread B: munmap()\n  mmap_write_downgrade(mm)\n  unmap_vmas() -\u003e zap_pmd_range()\n    zap_huge_pmd()\n      __pmd_trans_huge_lock()\n        pmd_is_huge():          # !pmd_present \u0026\u0026 !pmd_none -\u003e TRUE (swap entry)\n        pmd_lock() -\u003e \t\t# spin_lock(ptl), waits for Thread A to release ptl\n      pmdp_huge_get_and_clear_full()\n        VM_BUG_ON(!pmd_present(*pmdp))  # HITS!\n\n[  287.738700][ T1867] ------------[ cut here ]------------\n[  287.743843][ T1867] kernel BUG at arch/powerpc/mm/book3s64/pgtable.c:187!\ncpu 0x0: Vector: 700 (Program Check) at [c00000044037f4f0]\n    pc: c000000000094ca4: pmdp_huge_get_and_clear_full+0x6c/0x23c\n    lr: c000000000645dec: zap_huge_pmd+0xb0/0x868\n    sp: c00000044037f790\n   msr: 800000000282b033\n  current = 0xc0000004032c1a00\n  paca    = 0xc000000004fe0000   irqmask: 0x03   irq_happened: 0x09\n    pid   = 1867, comm = a.out\nkernel BUG at :187!\nLinux version 6.19.0-12136-g14360d4f917c-dirty (powerpc64le-linux-gnu-gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #27 SMP PREEMPT Sun Feb 22 10:38:56 IST 2026\nenter ? for help\n[link register   ] c000000000645dec zap_huge_pmd+0xb0/0x868\n[c00000044037f790] c00000044037f7d0 (unreliable)\n[c00000044037f7d0] c000000000645dcc zap_huge_pmd+0x90/0x868\n[c00000044037f840] c0000000005724cc unmap_page_range+0x176c/0x1f40\n[c00000044037fa00] c000000000572ea0 unmap_vmas+0xb0/0x1d8\n[c00000044037fa90] c0000000005af254 unmap_region+0xb4/0x128\n[c00000044037fb50] c0000000005af400 vms_complete_munmap_vmas+0x138/0x310\n[c00000044037fbe0] c0000000005b0f1c do_vmi_align_munmap+0x1ec/0x238\n[c00000044037fd30] c0000000005b3688 __vm_munmap+0x170/0x1f8\n[c00000044037fdf0] c000000000587f74 sys_munmap+0x2c/0x40\n[c00000044037fe10] c000000000032668 system_call_exception+0x128/0x350\n[c00000044037fe50] c00000000000d05c system_call_vectored_common+0x15c/0x2ec\n---- Exception: 3000 (System Call Vectored) at 0000000010064a2c\nSP (7fff9b1ee9c0) is in userspace\n0:mon\u003e zh\n\ncommit a30b48bf1b24 (\"mm/migrate_device: implement THP migration of zone device pages\"),\nenabled migration for device-private PMD entries. Hence this is one\nother path where this warning could get trigger from.\n\n ------------[ cut here ]------------\n WARNING: arch/powerpc/mm/book3s64/hash_pgtable.c:199 at hash__pmd_hugepage_update+0x48/0x284, CPU#3: hmm-tests/1905\n Modules linked in: test_hmm\n CPU: 3 UID: 0 PID: 1905 Comm: hmm-tests Tainted: G    B   W    L   N  7.0.0-rc1-01438-g7e2f0ee7581c #21 PREEMPT\n Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP, [N]=TEST\n Hardware name: IBM pSeries (emulated by qemu) POWER10 (architected) 0x801200 0xf000006 of:SLOF,git-ee03ae pSeries\n NIP [c000000000096b70] hash__pmd_hugepage_update+0x48/0x284\n LR [c000000000096e7c] hash__pmdp_huge_get_and_clear+0xd0/0xd4\n Call Trace:\n [c000000604707670] [c000000004e102b8] 0xc000000004e102b8 (unreliable)\n [c000000604707700] [c00000000064ec3c] set_pmd_migration_entry+0x414/0x498\n [c000000604707760] [c00000000063e5a4] migrate_vma_col\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53108",
          "url": "https://www.suse.com/security/cve/CVE-2026-53108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269561 for CVE-2026-53108",
          "url": "https://bugzilla.suse.com/1269561"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53108"
    },
    {
      "cve": "CVE-2026-63830",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63830"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skmsg: preserve sg.copy across SG transforms\n\nThe sk_msg sg.copy bitmap is part of the scatterlist entry ownership\nstate. A set bit tells sk_msg_compute_data_pointers() not to expose the\nentry through writable BPF ctx-\u003edata. This protects entries backed by\npages that are not private to the sk_msg, such as splice-backed file\npage-cache pages.\n\nSeveral sk_msg transform paths move, copy, split, or compact\nmsg-\u003esg.data[] entries without moving the matching sg.copy bit. This can\nmake an externally backed entry arrive at a new slot with a clear copy\nbit. A later SK_MSG verdict can then expose sg_virt(sge) as writable\nctx-\u003edata and BPF stores can modify the original page cache.\n\nKeep sg.copy synchronized with sg.data[] whenever entries are\ntransferred, shifted, split, or copied into a new sk_msg. Clear the bit\nwhen an entry is replaced by a newly allocated private page or freed.\nThis covers the BPF pull/push/pop helpers, sk_msg_shift_left/right(),\nsk_msg_xfer(), and tls_split_open_record(), including the partial tail\nentry created during TLS open-record splitting.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63830",
          "url": "https://www.suse.com/security/cve/CVE-2026-63830"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272178 for CVE-2026-63830",
          "url": "https://bugzilla.suse.com/1272178"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272265 for CVE-2026-63830",
          "url": "https://bugzilla.suse.com/1272265"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-63830"
    },
    {
      "cve": "CVE-2026-63983",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63983"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: fix packet loop on netem when duplicate is on\n\nWhen netem duplicates a packet it re-enqueues the copy at the root qdisc.\nIf another netem sits in the tree the copy can be duplicated\nagain, recursing until the stack or memory is exhausted.\n\nThe original duplication guard temporarily zeroed q-\u003eduplicate around\nthe re-enqueue, but that does not cover all cases because it is\nper-qdisc state shared across all concurrent enqueue paths\nand is not safe without additional locking.\n\nUse the skb tc_depth field introduced in an earlier patch:\n - increment it on the duplicate before re-enqueue\n - skip duplication for any skb whose tc_depth is already non-zero.\n\nThis marks the packet itself rather than mutating qdisc state,\ntherefore it is safe regardless of tree topology or concurrency.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63983",
          "url": "https://www.suse.com/security/cve/CVE-2026-63983"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273040 for CVE-2026-63983",
          "url": "https://bugzilla.suse.com/1273040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-63983"
    },
    {
      "cve": "CVE-2026-64012",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64012"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked\n\nWhen sfb has children (eg qfq qdisc) whose peek() callback is\nqdisc_peek_dequeued(), we could get a kernel panic. When the parent of such\nqdiscs (eg illustrated in patch #3 as tbf) wants to retrieve an skb from\nits child (sfb in this case), it will do the following:\n 1a. do a peek() - and when sensing there\u0027s an skb the child can offer, then\n     - the child in this case(sfb) calls its child\u0027s (qfq) peek.\n        qfq does the right thing and will return the gso_skb queue packet.\n        Note: if there wasnt a gso_skb entry then qfq will store it there.\n 1b. invoke a dequeue() on the child (sfb). And herein lies the problem.\n     - sfb will call the child\u0027s dequeue() which will essentially just\n       try to grab something of qfq\u0027s queue.\n\n[  127.594489][  T453] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f]\n[  127.594741][  T453] CPU: 2 UID: 0 PID: 453 Comm: ping Not tainted 7.1.0-rc1-00035-gac961974495b-dirty #793 PREEMPT(full)\n[  127.595059][  T453] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011\n[  127.595254][  T453] RIP: 0010:qfq_dequeue+0x35c/0x1650 [sch_qfq]\n[  127.595461][  T453] Code: 00 fc ff df 80 3c 02 00 0f 85 17 0e 00 00 4c 8d 73 48 48 89 9d b8 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 76 0c 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b\n[  127.596081][  T453] RSP: 0018:ffff88810e5af440 EFLAGS: 00010216\n[  127.596337][  T453] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: dffffc0000000000\n[  127.596623][  T453] RDX: 0000000000000009 RSI: 0000001880000000 RDI: ffff888104fd82b0\n[  127.596917][  T453] RBP: ffff888104fd8000 R08: ffff888104fd8280 R09: 1ffff110211893a3\n[  127.597165][  T453] R10: 1ffff110211893a6 R11: 1ffff110211893a7 R12: 0000001880000000\n[  127.597404][  T453] R13: ffff888104fd82b8 R14: 0000000000000048 R15: 0000000040000000\n[  127.597644][  T453] FS:  00007fc380cbfc40(0000) GS:ffff88816f2a8000(0000) knlGS:0000000000000000\n[  127.597956][  T453] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  127.598160][  T453] CR2: 00005610aa9890a8 CR3: 000000010369e000 CR4: 0000000000750ef0\n[  127.598390][  T453] PKRU: 55555554\n[  127.598509][  T453] Call Trace:\n[  127.598629][  T453]  \u003cTASK\u003e\n[  127.598718][  T453]  ? mark_held_locks+0x40/0x70\n[  127.598890][  T453]  ? srso_alias_return_thunk+0x5/0xfbef5\n[  127.599053][  T453]  sfb_dequeue+0x88/0x4d0\n[  127.599174][  T453]  ? ktime_get+0x137/0x230\n[  127.599328][  T453]  ? srso_alias_return_thunk+0x5/0xfbef5\n[  127.599480][  T453]  ? qdisc_peek_dequeued+0x7b/0x350 [sch_qfq]\n[  127.599670][  T453]  ? srso_alias_return_thunk+0x5/0xfbef5\n[  127.599831][  T453]  tbf_dequeue+0x6b1/0x1098 [sch_tbf]\n[  127.599988][  T453]  __qdisc_run+0x169/0x1900\n\nThe right thing to do in #1b is to grab the skb off gso_skb queue.\nThis patchset fixes that issue by changing #1b to use qdisc_dequeue_peeked()\nmethod instead.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64012",
          "url": "https://www.suse.com/security/cve/CVE-2026-64012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273764 for CVE-2026-64012",
          "url": "https://bugzilla.suse.com/1273764"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64012"
    },
    {
      "cve": "CVE-2026-64070",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64070"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/hv-gpci: fix preempt count leak in sysfs show paths\n\nFour sysfs show() callbacks in hv-gpci take get_cpu_var(hv_gpci_reqb)\n(which calls preempt_disable()) but only call the matching put_cpu_var()\non the error path under the \u0027out:\u0027 label. Every successful read leaks\none preempt_disable():\n\n  processor_bus_topology_show()\n  processor_config_show()\n  affinity_domain_via_virtual_processor_show()\n  affinity_domain_via_domain_show()\n\n(affinity_domain_via_partition_show() was already correct.)\n\nOn a CONFIG_PREEMPT=y kernel, repeated reads raise preempt_count and\neventually return to userspace with preemption still disabled. The\nnext user-mode page fault then hits faulthandler_disabled() == 1,\ngets forced to SIGSEGV, and the resulting coredump trips\n\u0027BUG: scheduling while atomic\u0027 in call_usermodehelper_exec -\u003e\nwait_for_completion_state -\u003e schedule:\n\n  BUG: scheduling while atomic: \u003ctask\u003e/\u003cpid\u003e/0x00000004\n  ...\n  __schedule_bug+0x6c/0x90\n  __schedule+0x58c/0x13a0\n  schedule+0x48/0x1a0\n  schedule_timeout+0x104/0x170\n  wait_for_completion_state+0x16c/0x330\n  call_usermodehelper_exec+0x254/0x2d0\n  vfs_coredump+0x1050/0x2590\n  get_signal+0xb9c/0xc80\n  do_notify_resume+0xf8/0x470\n\nAdd an out_success label that calls put_cpu_var() before returning\nthe byte count, mirroring affinity_domain_via_partition_show().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64070",
          "url": "https://www.suse.com/security/cve/CVE-2026-64070"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273116 for CVE-2026-64070",
          "url": "https://bugzilla.suse.com/1273116"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64070"
    },
    {
      "cve": "CVE-2026-64116",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64116"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: ioam: add NULL check for idev in ipv6_hop_ioam()\n\nReported by Sashiko:\n\nThe function ipv6_hop_ioam() accesses\n__in6_dev_get(skb-\u003edev)-\u003ecnf.ioam6_enabled without validating the returned\nidev pointer. Because addrconf_ifdown() can concurrently clear dev-\u003eip6_ptr\nvia RCU, __in6_dev_get() can return NULL during interface teardown, which\ncould cause a NULL pointer dereference when processing an IOAM Hop-by-Hop\noption.\n\nLet\u0027s add a check and use SKB_DROP_REASON_IPV6DISABLED accordingly.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64116",
          "url": "https://www.suse.com/security/cve/CVE-2026-64116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273751 for CVE-2026-64116",
          "url": "https://bugzilla.suse.com/1273751"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64116"
    },
    {
      "cve": "CVE-2026-64280",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64280"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()\n\nafu_ioctl_dma_map() accepts a 64-bit length from userspace via\nDFL_FPGA_PORT_DMA_MAP ioctl without an upper bound check. The value\nis passed to afu_dma_pin_pages() where npages is derived as\nlength \u003e\u003e PAGE_SHIFT and passed to pin_user_pages_fast() which takes\nint nr_pages, causing implicit truncation if length is very large.\n\nValidate map.length at the ioctl entry point before calling\nafu_dma_map_region(), rejecting values whose page count exceeds\nINT_MAX.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64280",
          "url": "https://www.suse.com/security/cve/CVE-2026-64280"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273599 for CVE-2026-64280",
          "url": "https://bugzilla.suse.com/1273599"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64280"
    },
    {
      "cve": "CVE-2026-64422",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64422"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes\n\nReject invalid `net.ipv4.tcp_reordering` values before they reach TCP\nsocket state. The sysctl is stored as an `int` but copied into the\n`u32` `tp-\u003ereordering` field for new sockets, so negative writes wrap\nto large values.\n\nWith `tcp_mtu_probing=2`, the wrapped value can overflow the\n`tcp_mtu_probe()` size calculation and drive the MTU probing path into\nan out-of-bounds read. Route `tcp_reordering` writes through\n`proc_dointvec_minmax()` and require it to be at least 1. Also require\n`tcp_max_reordering` to be at least 1 so the configured maximum cannot\nbecome negative either.\n\nWhen registering the table for a non-init network namespace, relocate\n`extra2` pointers that refer into `init_net.ipv4` so the\n`tcp_reordering` upper bound follows that namespace\u0027s\n`tcp_max_reordering`.\n\nHarden `tcp_mtu_probe()` itself by computing `size_needed` as `u64`.\nThis keeps the send queue and window checks from being bypassed through\nsigned integer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64422",
          "url": "https://www.suse.com/security/cve/CVE-2026-64422"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273290 for CVE-2026-64422",
          "url": "https://bugzilla.suse.com/1273290"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64422"
    },
    {
      "cve": "CVE-2026-64424",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64424"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetpoll: fix a use-after-free on shutdown path\n\nThere is a use-after-free error on netpoll, which is clearly detected by\nKASAN.\n\n      BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3b/0x80\n      Read of size 1 at addr ... by task kworker/9:1\n      Workqueue: events queue_process\n      Call Trace:\n       skb_dequeue+0x1e/0xb0\n       queue_process+0x2c/0x600\n       process_scheduled_works+0x4b6/0x850\n       worker_thread+0x414/0x5a0\n      Allocated by task 242:\n       __netpoll_setup+0x201/0x4a0\n       netpoll_setup+0x249/0x550\n       enabled_store+0x32f/0x380\n      Freed by task 0:\n       kfree+0x1b7/0x540\n       rcu_core+0x3f8/0x7a0\n\nThe problem happens when there is a pending TX worker running in\nparallel with the cleanup path.\n\nThis is what happens on netpoll shutdown path:\n\n1) __netpoll_cleanup() is called\n2) set dev-\u003enpinfo to NULL\n3) call_rcu() with rcu_cleanup_netpoll_info()\n  3.1) rcu_cleanup_netpoll_info() tries to cancel all workers with\n       cancel_delayed_work(), but doesn\u0027t wait for the worker to finish\n4) and kfree(npinfo);\n\nBecause 3.1) doesn\u0027t really cancel the work, as the comment says \"we\ncan\u0027t call cancel_delayed_work_sync here, as we are in softirq\", the TX\nworker can run after 4).\n\nTl;DR: queue_process() is not an RCU reader, it reaches npinfo through\nthe work item via container_of().\n\nUse disable_delayed_work_sync() to ensure the worker is completely\nstopped and prevent any future re-arming attempts. Once npinfo is set\nto NULL, senders will bail out and not queue new work. The disable flag\nensures any in-flight re-arming attempts also fail silently.\n\nIn the future, we can do the cleanup inline here without needing the\nnpinfo-\u003ercu rcu_head, but that is net-next material.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64424",
          "url": "https://www.suse.com/security/cve/CVE-2026-64424"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274256 for CVE-2026-64424",
          "url": "https://bugzilla.suse.com/1274256"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64424"
    },
    {
      "cve": "CVE-2026-64461",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64461"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: mediatek: Fix IRQ domain leak when port fails to enable\n\nWhen mtk_pcie_enable_port() fails, mtk_pcie_port_free() removes the port\nfrom pcie-\u003eports and frees the port structure. However, the IRQ domains set\nup earlier by mtk_pcie_init_irq_domain() are never freed.\n\nFix this by refactoring mtk_pcie_irq_teardown() into a per-port helper,\nmtk_pcie_irq_teardown_port(), and calling it from mtk_pcie_setup() when\nmtk_pcie_enable_port() fails. Since the IRQ teardown must only happen in\nthe probe error path (during resume, child devices may have active MSI\nmappings and the NOIRQ context prohibits sleeping locks),\nmtk_pcie_enable_port() is changed to return an error code so callers can\ndistinguish the two paths and act accordingly.\n\nThis issue was reported by Sashiko while reviewing the EcoNet EN7528 SoC\nsupport series.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64461",
          "url": "https://www.suse.com/security/cve/CVE-2026-64461"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273865 for CVE-2026-64461",
          "url": "https://bugzilla.suse.com/1273865"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64461"
    },
    {
      "cve": "CVE-2026-64568",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64568"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure\n\nieee80211_set_unsol_bcast_probe_resp() calls kfree_rcu() on the old\ntemplate before allocating the replacement. If the kzalloc() then fails,\nit returns -ENOMEM while link-\u003eu.ap.unsol_bcast_probe_resp still points\nat the object already queued for freeing. A later update or AP teardown\nre-queues that same rcu_head; the second free is caught by KASAN when the\nRCU sheaf is processed in softirq:\n\n  BUG: KASAN: double-free in rcu_free_sheaf (mm/slub.c:5850)\n  Free of addr ffff88800d06f300 by task exploit/145\n   ...\n   __rcu_free_sheaf_prepare (mm/slub.c:2634 mm/slub.c:2940)\n   rcu_free_sheaf (mm/slub.c:5850)\n   rcu_core (kernel/rcu/tree.c:2617 kernel/rcu/tree.c:2869)\n   handle_softirqs (kernel/softirq.c:622)\n  The buggy address belongs to the cache kmalloc-128 of size 128\n\nQueue the old object for kfree_rcu() only after the new one is published,\nmatching ieee80211_set_probe_resp() and ieee80211_set_s1g_short_beacon().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64568",
          "url": "https://www.suse.com/security/cve/CVE-2026-64568"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274008 for CVE-2026-64568",
          "url": "https://bugzilla.suse.com/1274008"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64568"
    },
    {
      "cve": "CVE-2026-68233",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68233"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Shut down BO cache timer before teardown\n\nThe BO cache timer callback schedules time_work, and time_work can rearm\nthe timer through vc4_bo_cache_free_old().\n\nvc4_bo_cache_destroy() deletes the timer and then cancels the work, which\ndoes not break that cycle: the work being cancelled can rearm the timer,\nand the timer then queues work again after teardown.\n\nUse timer_shutdown_sync() instead, so the timer cannot be rearmed and the\ncycle ends with cancel_work_sync().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68233",
          "url": "https://www.suse.com/security/cve/CVE-2026-68233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275644 for CVE-2026-68233",
          "url": "https://bugzilla.suse.com/1275644"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-68233"
    },
    {
      "cve": "CVE-2026-68241",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68241"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/mst: limit DP MST ESI service loop\n\nThe loop in intel_dp_check_mst_status() keeps servicing interrupts\noriginating from the sink without bound. Add an upper bound to the new\ninterrupts occurring during interrupt processing to not get stuck on\npotentially stuck sink devices. Use arbitrary 32 tries to clear incoming\ninterrupts in one go.\n\nDiscovered using AI-assisted static analysis confirmed by Intel Product\nSecurity.\n\nNote: The condition likely pre-dates the commit in the Fixes: tag, but\nthis is about as far back as a backport has any chance of\nsucceeding. Before that, the retry had a goto.\n\n(cherry picked from commit b4ea5272133059acb493cc36599071a9e852ec2e)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68241",
          "url": "https://www.suse.com/security/cve/CVE-2026-68241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275785 for CVE-2026-68241",
          "url": "https://bugzilla.suse.com/1275785"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-68241"
    },
    {
      "cve": "CVE-2026-68242",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68242"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gt: Fix NULL deref on sched_engine alloc failure\n\nAvoid using intel_context_put() before intel_context_init() in\nexeclists_create_virtual() as the kref_put() inside would lead\nto NULL deref on the IOCTL path when sched_engine allocation fails.\n\nDiscovered using AI-assisted static analysis confirmed by\nIntel Product Security.\n\n(cherry picked from commit 4f2a12f2d50e9f48227656e4dcbd6423506be31d)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68242",
          "url": "https://www.suse.com/security/cve/CVE-2026-68242"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275786 for CVE-2026-68242",
          "url": "https://bugzilla.suse.com/1275786"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-68242"
    },
    {
      "cve": "CVE-2026-68323",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68323"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: serialize udp bearer replicast list updates\n\ntipc_udp_rcast_add() and cleanup_bearer() both update ub-\u003ercast.list with\nlist_add_rcu() / list_del_rcu(), but nothing serializes them. The add runs\nfrom the encap receive softirq (via tipc_udp_rcast_disc()) without\nrtnl_lock(), so it can race the cleanup delete and corrupt the list:\n\n  list_del corruption. prev-\u003enext should be ffff8880298d7ab8,\n    but was ffff88802449ad38. (prev=ffff888027e3ec98)\n  kernel BUG at lib/list_debug.c:62!\n  RIP: __list_del_entry_valid_or_report+0x17a/0x200\n  Workqueue: events cleanup_bearer\n  Call Trace:\n   cleanup_bearer (net/tipc/udp_media.c:811)\n   process_one_work (kernel/workqueue.c:3302)\n   worker_thread (kernel/workqueue.c:3466)\n\nThe bearer can be enabled from an unprivileged user namespace, as the\nTIPCv2 generic-netlink ops carry no GENL_ADMIN_PERM.\n\nAdd a spinlock to struct udp_bearer and take it around the list_add_rcu()\nin tipc_udp_rcast_add() and the list_del_rcu() loop in cleanup_bearer() so\nthe two writers can no longer corrupt the list.\n\nReject a duplicate peer under the same lock before allocating, and remove\ntipc_udp_is_known_peer(). The old lockless pre-check in\ntipc_udp_rcast_disc() was racy: two softirqs discovering the same peer\ncould both find it absent and add it twice.\n\ncleanup_bearer() runs from a workqueue after tipc_udp_disable() clears the\nbearer\u0027s up bit, so an encap softirq can still reach tipc_udp_rcast_add()\nand add a peer after cleanup_bearer() has already emptied the list, leaking\nthat entry when the bearer is freed. Mark the bearer disabled under\nrcast_lock once the list is emptied and refuse further additions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68323",
          "url": "https://www.suse.com/security/cve/CVE-2026-68323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274653 for CVE-2026-68323",
          "url": "https://bugzilla.suse.com/1274653"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-68323"
    },
    {
      "cve": "CVE-2026-72015",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72015"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/resctrl: Fix double-add of pseudo-locked region\u0027s RMID to free list\n\nA pseudo-locked group\u0027s RMID is freed when it is created. On unmount\nrmdir_all_sub() unconditionally frees all RMID of all groups, resulting\nin a double-free of the pseudo-locked group\u0027s RMID. The consequence of this\nis that the original free results in the pseudo-locked group\u0027s RMID being\nadded to the rmid_free_lru linked list and the second free then attempts\nto add the same RMID entry to the rmid_free_lru again.\n\nDo not double-free a pseudo-locked group\u0027s RMID.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72015",
          "url": "https://www.suse.com/security/cve/CVE-2026-72015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276791 for CVE-2026-72015",
          "url": "https://bugzilla.suse.com/1276791"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72015"
    },
    {
      "cve": "CVE-2026-72040",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72040"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: fix refcount leak in i_ipmi_request()\n\nWhen a caller provides a `supplied_recv` message to i_ipmi_request(),\nthe function increments the user\u0027s `nr_msgs` reference count. If an\nerror occurs later, the out_err cleanup path only frees the recv_msg\nif the function allocated it itself (i.e., !supplied_recv). In the\nsupplied_recv case the cleanup is skipped, leaving the reference count\nelevated. The caller ipmi_request_supply_msgs() does not release the\nsupplied_recv on error, so the reference is permanently leaked.\n\nFix this by explicitly reverting the reference count operations when a\nsupplied recv_msg with a valid user pointer is present in the error\npath: decrement nr_msgs and drop the user\u0027s kref.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72040",
          "url": "https://www.suse.com/security/cve/CVE-2026-72040"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276836 for CVE-2026-72040",
          "url": "https://bugzilla.suse.com/1276836"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72040"
    },
    {
      "cve": "CVE-2026-72041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nespintcp: use sk_msg_free_partial to fix partial send\n\nsk_msg_free_partial() ensures consistency of the skmsg at every\niteration, without having to manually handle uncharges and offsets.\nThis simplifies the code, and fixes some bugs in skmsg accounting when\nwe don\u0027t send the full contents.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72041",
          "url": "https://www.suse.com/security/cve/CVE-2026-72041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275510 for CVE-2026-72041",
          "url": "https://bugzilla.suse.com/1275510"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72041"
    },
    {
      "cve": "CVE-2026-72081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: elx: efct: Fix I/O leak on unsupported additional CDB\n\nefct_dispatch_fcp_cmd() allocates an efct_io before dispatching an\nunsolicited FCP command. If the command has an unsupported additional\nCDB, the function returns -EIO before handing the IO to the SCSI layer.\n\nFree the allocated IO before returning from this error path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72081",
          "url": "https://www.suse.com/security/cve/CVE-2026-72081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277174 for CVE-2026-72081",
          "url": "https://bugzilla.suse.com/1277174"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72081"
    },
    {
      "cve": "CVE-2026-72172",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72172"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mm_init: fix uninitialized struct pages for ZONE_DEVICE\n\nIf DAX memory is hotplugged into an unoccupied subsection of an early\nsection, section_activate() reuses the unoptimized boot memmap.  However,\ncompound_nr_pages() still assumes that vmemmap optimization is in effect\nand initializes only the reduced number of struct pages.  As a result, the\nremaining tail struct pages are left uninitialized, which can later lead\nto unexpected behavior or crashes.\n\nFix this by treating early sections as unoptimized when calculating how\nmany struct pages to initialize.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72172",
          "url": "https://www.suse.com/security/cve/CVE-2026-72172"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277691 for CVE-2026-72172",
          "url": "https://bugzilla.suse.com/1277691"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72172"
    },
    {
      "cve": "CVE-2026-72213",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72213"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch\n\nIn alloc_hugetlb_folio(), a single h_cg pointer is used for both the rsvd\nand non-rsvd hugetlb cgroup charges.  When map_chg is set,\nhugetlb_cgroup_charge_cgroup_rsvd() stores the charged cgroup in h_cg, but\nthe immediately following hugetlb_cgroup_charge_cgroup() overwrites h_cg\nwith the non-rsvd cgroup pointer.\n\nAs a result, hugetlb_cgroup_commit_charge_rsvd() stores the wrong\n(non-rsvd) cgroup pointer into the folio\u0027s rsvd slot.\n\nWhen the folio is later freed, free_huge_folio() unconditionally calls\nboth hugetlb_cgroup_uncharge_folio() and\nhugetlb_cgroup_uncharge_folio_rsvd().  The rsvd uncharge reads back the\nwrong cgroup from the folio and decrements a counter that was never\ncharged for that cgroup, causing a page_counter underflow:\n\n  page_counter underflow: -512 nr_pages=512\n  WARNING: mm/page_counter.c:61 at page_counter_cancel\n\nFix this by introducing a separate h_cg_rsvd pointer exclusively for the\nrsvd charge path, keeping the rsvd and non-rsvd charges fully independent\nthrough their charge, commit, and error uncharge paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72213",
          "url": "https://www.suse.com/security/cve/CVE-2026-72213"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277603 for CVE-2026-72213",
          "url": "https://bugzilla.suse.com/1277603"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72213"
    },
    {
      "cve": "CVE-2026-72236",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72236"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()\n\nev variable is userspace controlled via event-\u003eattr.config and used\nas an array index after bounds checking, but without speculation\nbarriers.\n\nAdd the missing array_index_nospec() call to prevent speculative\nexecution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72236",
          "url": "https://www.suse.com/security/cve/CVE-2026-72236"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277614 for CVE-2026-72236",
          "url": "https://bugzilla.suse.com/1277614"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72236"
    },
    {
      "cve": "CVE-2026-72301",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72301"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get\n\nIn sof_ipc3_bytes_put(), the size used for the memcpy is derived from\nthe old data-\u003esize already in the buffer, not the incoming new data\u0027s\nsize field. If the new data has a different size, the copy length is\nwrong: it may truncate valid data or copy stale bytes.\n\nSimilarly, sof_ipc3_bytes_get() checks data-\u003esize against max_size\nwithout accounting for the sizeof(struct sof_ipc_ctrl_data) offset\nof the flex array within the allocation.\n\nFix bytes_put to validate and use the incoming data\u0027s sof_abi_hdr.size\nfrom ucontrol before copying. Fix bytes_get to subtract sizeof(*cdata)\nfrom the bounds check to match the actual available space.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72301",
          "url": "https://www.suse.com/security/cve/CVE-2026-72301"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277742 for CVE-2026-72301",
          "url": "https://bugzilla.suse.com/1277742"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277743 for CVE-2026-72301",
          "url": "https://bugzilla.suse.com/1277743"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72301"
    },
    {
      "cve": "CVE-2026-72305",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72305"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nVDUSE: avoid leaking information to userspace\n\nThe bounceing is not necessarily page aligned, so current VDUSE can\nleak kernel information through mapping bounce pages to\nuserspace. Allocate bounce pages with __GFP_ZERO to avoid leaking\ninformation to userspace.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72305",
          "url": "https://www.suse.com/security/cve/CVE-2026-72305"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277747 for CVE-2026-72305",
          "url": "https://bugzilla.suse.com/1277747"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-72305"
    },
    {
      "cve": "CVE-2026-72319",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72319"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: ensure inner headers in ICMP errors are in headroom\n\nSashiko points out that after stripping the outer headers\nwith pskb_pull() we should ensure the inner IP headers\nin ICMP errors from tunnels are present in the skb headroom\nfor functions like ipv4_update_pmtu(), icmp_send() and\nIP_VS_DBG().\n\nAlso, add more checks for the length of the inner headers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72319",
          "url": "https://www.suse.com/security/cve/CVE-2026-72319"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275964 for CVE-2026-72319",
          "url": "https://bugzilla.suse.com/1275964"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72319"
    },
    {
      "cve": "CVE-2026-72493",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72493"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: serialize netif_running() check in enqueue_to_backlog()\n\nSyzbot reported a KASAN slab-use-after-free in fib_rules_lookup().\n\nThe root cause is a race condition where packets can escape the backlog\nflushing during device unregistration (e.g., during netns exit).\n\nCommit e9e4dd3267d0 (\"net: do not process device backlog during unregistration\")\nintroduced a lockless netif_running() check in enqueue_to_backlog() to\nprevent queuing packets to an unregistering device.\n\nHowever, this creates a TOCTOU race window.\n\nA lockless transmitter (like veth_xmit) can pass\nthe check before dev_close() clears IFF_UP. If the transmitter is then\ndelayed, flush_all_backlogs() can run and finish before the transmitter\ngrabs the backlog lock and queues the packet. The packet then escapes\nthe flush and triggers UAF later when processed.\n\nFix this by moving the netif_running() check inside the backlog lock.\nThis serializes the check with the flush work (which also grabs the lock).\nWe then either queue the packet before the flush runs (so it gets flushed),\nor check netif_running() after the flush/close completes (so it gets dropped).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72493",
          "url": "https://www.suse.com/security/cve/CVE-2026-72493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276951 for CVE-2026-72493",
          "url": "https://bugzilla.suse.com/1276951"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276959 for CVE-2026-72493",
          "url": "https://bugzilla.suse.com/1276959"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72493"
    },
    {
      "cve": "CVE-2026-74312",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74312"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvhost/vdpa: validate virtqueue index in mmap and fault paths\n\nvhost_vdpa_mmap() and vhost_vdpa_fault() use vma-\u003evm_pgoff as a\nvirtqueue index for get_vq_notification(), but they do not validate\nthat the index is smaller than v-\u003envqs.\n\nThe ioctl path already performs both a bounds check and\narray_index_nospec(), but the mmap/fault path only checks that the\nindex fits in u16. This allows an out-of-range queue index to reach\ndriver-specific get_vq_notification() callbacks.\n\nFix this by extracting a unified vhost_vdpa_get_vq_notification()\nhelper that validates the queue index against v-\u003envqs and applies\narray_index_nospec() before calling the driver callback. Both the\nmmap and fault paths use this helper, and the bounds checking is\nconsolidated into a single location.\n\nFrom source inspection, the most defensible impact is out-of-bounds\naccess in the callback path, potentially leading to invalid PFN\nremaps and crash/DoS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74312",
          "url": "https://www.suse.com/security/cve/CVE-2026-74312"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276873 for CVE-2026-74312",
          "url": "https://bugzilla.suse.com/1276873"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74312"
    },
    {
      "cve": "CVE-2026-74379",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74379"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndax/kmem: account for partial discontiguous resource upon removal\n\nWhen dev_dax_kmem_probe() partially succeeds (at least one range is\nmapped) but a subsequent range fails request_mem_region() or\nadd_memory_driver_managed(), the probe silently continues, ultimately\nreturning success, but with the corresponding range resource NULL\u0027ed out.\n\ndev_dax_kmem_remove() iterates over all dax_device ranges regardless of if\nthe underlying resource exists.  When remove_memory() is called later, it\nreturns 0 because the memory was never added which causes\ndev_dax_kmem_remove() to incorrectly assume the (nonexistent) resource can\nbe removed and attempts cleanup on a NULL pointer.\n\nFix this by skipping these ranges altogether, noting that these cases are\nconsidered success, such that the cleanup is still reached when all\nactually-added ranges are successfully removed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74379",
          "url": "https://www.suse.com/security/cve/CVE-2026-74379"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278232 for CVE-2026-74379",
          "url": "https://bugzilla.suse.com/1278232"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74379"
    },
    {
      "cve": "CVE-2026-74544",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74544"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_u32: validate offshift to prevent shift-out-of-bounds\n\nu32_change() copies the user-provided tc_u32_sel.offshift (unsigned char,\n0-255) into the kernel knode object without bounds validation. When a\npacket later hits u32_classify() with TC_U32_VAROFFSET set, it evaluates\n`ntohs(offmask \u0026 *data) \u003e\u003e offshift` where the left operand is a 16-bit\nvalue promoted to a 32-bit int. Any offshift \u003e= 32 is undefined behavior\nper C11 6.5.7p3, triggerable by an unprivileged user via user/network\nnamespaces.\n\nUBSAN: shift-out-of-bounds in net/sched/cls_u32.c:236:43\nshift exponent 32 is too large for 32-bit type int\n\nFix this by rejecting offshift \u003e= 16 during filter creation in\nu32_change().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74544",
          "url": "https://www.suse.com/security/cve/CVE-2026-74544"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277894 for CVE-2026-74544",
          "url": "https://bugzilla.suse.com/1277894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74544"
    },
    {
      "cve": "CVE-2026-74578",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74578"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_skcipher - force synchronous processing on trees without ctx-\u003estate\n\nThe AIO/async path in skcipher_recvmsg() passes the socket-wide ctx-\u003eiv\ndirectly into the skcipher request. After io_submit() the socket lock is\ndropped and the request is processed asynchronously, so a concurrent\nsendmsg(ALG_SET_IV) can overwrite ctx-\u003eiv and make the in-flight request\nrun under an attacker-controlled IV. For CTR/stream modes this is\nIV/keystream reuse and lets an unprivileged user recover the plaintext of\na concurrent operation.\n\nSnapshotting ctx-\u003eiv into per-request storage for the async path is not\nsufficient. For ciphers with statesize == 0 - which includes cbc and ctr -\nthe MSG_MORE inter-chunk IV chaining is carried solely by the in-place\nreq-\u003eiv writeback, which a snapshot redirects into per-request memory that\naf_alg_free_resources() releases on completion, silently producing wrong\noutput. Writing the IV back from the completion callback instead is not\npossible either: that would require lock_sock() there, but the callback can\nrun in softirq/atomic context, so it must not sleep.\n\nMake the operation synchronous instead, which removes both the IV race and\nany writeback race. This is equivalent to the upstream resolution, commit\nfcc77d33a34c (\"net: Remove support for AIO on sockets\"), which removed the\nAIO socket path across net/ entirely and so produces the same end state for\nthis file. This patch deviates from that commit deliberately: rather than\nremoving AIO socket support tree-wide, which would be far too invasive for\nstable, it removes only the AIO branch in crypto/algif_skcipher.c.\nio_submit() now completes synchronously; AF_ALG async is rarely used in\npractice.\n\nThe -EIOCBQUEUED check in skcipher_recvmsg() is now dead but harmless,\nand is left alone to keep the fix minimal.\n\nTested on 6.6.y: attacker IV injection dropped from 2296/200000 to 0/200000\nafter the change; MSG_MORE chunked CTR output bit-identical to single-shot.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74578",
          "url": "https://www.suse.com/security/cve/CVE-2026-74578"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275564 for CVE-2026-74578",
          "url": "https://bugzilla.suse.com/1275564"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74578"
    },
    {
      "cve": "CVE-2026-74583",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74583"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_route: fix fastmap use-after-free on filter\n\nThe route4 classifier maintains a 16-slot fastmap cache that stores raw\nstruct route4_filter pointers indexed by (id, iif). The reader\n(route4_classify) populates this cache via route4_set_fastmap() for every\nclassified packet that hits a filter. The writer (route4_delete,\nroute4_change) clears the cache via route4_reset_fastmap() before\nRCU-deferred kfree of the filter.\n\nThis creates a UAF race:\n 1. Reader walks the RCU-protected bucket chain, finds filter f\n 2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work()\n 3. Reader calls route4_set_fastmap() and writes f into the cache\n    *after* the writer\u0027s reset, caching a pointer about to be freed\n 4. After the RCU grace period, kfree(f) executes\n 5. Next classified packet on the same (id, iif) tuple hits the stale\n    fastmap entry and reads f-\u003eres from freed memory\n\nReproduced with an mdelay(100) accelerator in route4_set_fastmap() and a\nconcurrent add/delete stress test (provided by both zdi and Santosh).\nBoth triggered KASAN slab-use-after-free reports in the route4 fastmap\npaths.\n\nFix:\nIntroduce a per-filter boolean dying flag to suppress stale fastmap\nrepublishing by in-flight readers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74583",
          "url": "https://www.suse.com/security/cve/CVE-2026-74583"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277889 for CVE-2026-74583",
          "url": "https://bugzilla.suse.com/1277889"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74583"
    },
    {
      "cve": "CVE-2026-74587",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74587"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix use-after-free of cached ASCONF chunk\n\naddip_last_asconf caches the outstanding outbound ASCONF chunk. The normal\nASCONF-ACK completion path releases the chunk and clears the pointer.\n\nHowever, sctp_asconf_queue_teardown() releases the cached chunk without\nclearing addip_last_asconf. During peer restart handling,\nsctp_sf_do_dupcook_a() queues SCTP_CMD_PURGE_ASCONF_QUEUE, which invokes\nsctp_asconf_queue_teardown() while the association remains alive and leaves\nthe pointer dangling.\n\nA delayed authenticated ASCONF-ACK can then reach sctp_sf_do_asconf_ack(),\nwhich accesses the stale chunk and passes it to sctp_process_asconf_ack(),\ncausing a use-after-free and a second release.\n\nClearing the pointer exposes a race with T4 expiry. Peer restart handling\nqueues the timer stop before the purge, but SCTP_CMD_TIMER_STOP uses\ntimer_delete(), which does not wait for a callback already running on\nanother CPU. Such a callback can reach sctp_sf_t4_timer_expire() after\nthe purge and dereference NULL.\n\nClear addip_last_asconf after releasing the cached chunk, and make\nsctp_sf_t4_timer_expire() consume a stale T4 expiry if no outstanding\nASCONF remains.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74587",
          "url": "https://www.suse.com/security/cve/CVE-2026-74587"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277821 for CVE-2026-74587",
          "url": "https://bugzilla.suse.com/1277821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282644 for CVE-2026-74587",
          "url": "https://bugzilla.suse.com/1282644"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74587"
    },
    {
      "cve": "CVE-2026-74611",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74611"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: rx: restore msg_iter before TLS 1.3 optimistic retry\n\ntls_decrypt_sg() advances msg-\u003emsg_iter when it maps user pages for\nthe optimistic TLS 1.3 zero-copy path. If the decrypted record turns\nout not to be unpadded application data, tls_decrypt_sw() retries into\na kernel skb, but leaves the iterator advanced.\n\nThe subsequent copy from the skb then writes decrypted bytes again at\na later point in the caller iovecs while recvmsg() reports only the\npost-retry length. A TLS peer can trigger this after the receiver\nenables TLS_RX_EXPECT_NO_PAD.\n\nRevert the iterator by the number of bytes consumed by the optimistic\nmapping before retrying without zero-copy.\n\nAdd a selftest which sends a TLS 1.3 control record with\nTLS_RX_EXPECT_NO_PAD enabled and verifies that recvmsg() does not\noverwrite later iovecs beyond the returned length.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74611",
          "url": "https://www.suse.com/security/cve/CVE-2026-74611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277804 for CVE-2026-74611",
          "url": "https://bugzilla.suse.com/1277804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277807 for CVE-2026-74611",
          "url": "https://bugzilla.suse.com/1277807"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74611"
    },
    {
      "cve": "CVE-2026-74614",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74614"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: read virtqueues under worker locks\n\nCommit bd50c5dc182b (\"vsock/virtio: add support for device\nsuspend/resume\") made the *_run flags transition from false to true when\nrestore installs replacement virtqueues.  The RX, TX and event workers\nread their virtqueue before locking and checking the corresponding flag,\nso a worker delayed across freeze and restore can observe the replacement\nqueue\u0027s running state while retaining a pointer to the deleted queue.\n\nRead each virtqueue under its mutex after checking the run flag, keeping\nthe pointer and state in the same queue generation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74614",
          "url": "https://www.suse.com/security/cve/CVE-2026-74614"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277931 for CVE-2026-74614",
          "url": "https://bugzilla.suse.com/1277931"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74614"
    },
    {
      "cve": "CVE-2026-74653",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74653"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx\n\nThe NXP LPC32xx UART (PORT_LPC3220) can latch an RX character-timeout\ninterrupt while the RX FIFO is empty: IIR reports UART_IIR_RX_TIMEOUT\n(0x0c) but LSR.DR is clear. A character timeout is only cleared by\nreading RHR, but serial8250_rx_chars() reads RHR only when LSR.DR is\nset, so nothing ever clears the condition. The interrupt is\nlevel-triggered and re-fires immediately, so on a single-core ARM926\nthe resulting interrupt storm livelocks the CPU.\n\nIt is reproducible when userspace repeatedly opens the front-panel port\n(ttyS1): serial8250_do_set_termios() re-enables interrupts on unlock and\nthe handler then spins forever with iir=0xcc lsr=0x60 ier=0x05, tripping\nthe soft-lockup detector in serial8250_handle_irq_locked().\n\nLPC32xx has no dedicated 8250 glue driver, it\u0027s driven by the generic\n8250_of. Add a hardware specific handle_irq for PORT_LPC3220, wired up\nin of_platform_serial_setup() the same way fsl8250_handle_irq is\ninstalled. The handler follows dw8250_handle_irq(): on an RX timeout\nwith an empty FIFO (LSR.DR and LSR.BI clear) it does one throwaway RHR\nread to clear the condition, then calls serial8250_handle_irq_locked().\nNo real received data is ever discarded, and it is a no-op on healthy\nUARTs which never report a timeout with DR clear.\n\nThis is the same class of bug already worked around in other 8250 drivers;\nsee commit 424d79183af0 (\"serial: 8250_dw: Avoid \"too much work\" from bogus rx timeout interrupt\")\nwhich reports the identical iir=0xcc/lsr=0x60. See also\nUART_RX_TIMEOUT_QUIRK in 8250_omap, and the note in 8250_bcm7271.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74653",
          "url": "https://www.suse.com/security/cve/CVE-2026-74653"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277310 for CVE-2026-74653",
          "url": "https://bugzilla.suse.com/1277310"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74653"
    },
    {
      "cve": "CVE-2026-74723",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74723"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: lzo: reject inline extents without valid headers\n\n[BUG]\nFor a crafted btrfs image, the following KASAN can be triggered when\nreading an inline lzo compressed file extent:\n\n  BUG: KASAN: slab-out-of-bounds in lzo_decompress+0x57d/0x700\n  Read of size 4 at addr ffff888006f2e644 by task btrfs_lzo_inlin/77\n\n  Call Trace:\n   \u003cTASK\u003e\n   dump_stack_lvl+0x5b/0x70\n   print_report+0xd1/0x610\n   kasan_report+0xe0/0x110\n   __asan_report_load_n_noabort+0x13/0x20\n   lzo_decompress+0x57d/0x700\n   btrfs_decompress+0x140/0x1c0\n   uncompress_inline+0x147/0x1b0\n   btrfs_get_extent+0xb23/0x10a0\n   btrfs_do_readpage.constprop.0+0x538/0x1ac0\n   btrfs_readahead+0x32f/0x5f0\n   read_pages+0x16f/0x850\n   page_cache_ra_unbounded+0x296/0x490\n   do_page_cache_ra+0xd9/0x130\n   page_cache_sync_ra+0x3ee/0x6f0\n   filemap_get_pages+0x306/0x15c0\n   filemap_read+0x329/0xd00\n   btrfs_file_read_iter+0x1f8/0x2b0\n   vfs_read+0x4ef/0x720\n   ksys_read+0xf8/0x1d0\n   __x64_sys_read+0x71/0xb0\n   x64_sys_call+0x1ab0/0x1b70\n   do_syscall_64+0x61/0x470\n   entry_SYSCALL_64_after_hwframe+0x4b/0x53\n   \u003c/TASK\u003e\n\n[CAUSE]\nFor an inline lzo compressed file extent, there should always be one lzo\nheader, recording the total length of the compressed data, followed by\none segment header, recording the compressed lzo payload.\n\nBut if a crafted inline lzo compressed file extent contains only an lzo\nheader, without the segment header or payload, lzo_decompress() will\nstill try to read the segment header, causing a read beyond the item\nboundary.\n\nFurthermore if the inline lzo compressed file extent is the first item\nof the leaf, it will be at the extent buffer boundary. The above\nout-of-boundary read will go beyond the extent buffer boundary,\ntriggering the above KASAN report.\n\n[FIX]\nValidate the total length of the inlined lzo compressed file extent, to\nmake sure there is at least one LZO header and one segment header, and a\nnon-zero payload.\n\n[ Rework the commit message to remove slop ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74723",
          "url": "https://www.suse.com/security/cve/CVE-2026-74723"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276562 for CVE-2026-74723",
          "url": "https://bugzilla.suse.com/1276562"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74723"
    },
    {
      "cve": "CVE-2026-80579",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80579"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: clear fb_info-\u003emode before deleting a videomode\n\nfb_set_var() can delete a mode from info-\u003emodelist when userspace\npasses FB_ACTIVATE_INV_MODE through FBIOPUT_VSCREENINFO. The code\nchecks that the mode being deleted is not the current info-\u003evar and\nthat fbcon is not using it, but it does not check fb_info-\u003emode.\n\nfb_info-\u003emode may still point into the modelist entry being deleted.\nIf the entry is freed, later mode sysfs reads through show_mode() can\ndereference a stale pointer.\n\nClear fb_info-\u003emode before calling fb_delete_videomode() when it\nmatches the mode being removed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80579",
          "url": "https://www.suse.com/security/cve/CVE-2026-80579"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277260 for CVE-2026-80579",
          "url": "https://bugzilla.suse.com/1277260"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80579"
    },
    {
      "cve": "CVE-2026-80893",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80893"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()\n\ncopy_hugetlb_page_range() clears the uffd-wp bit of migration and hwpoison\nentries with huge_pte_clear_uffd_wp(), which operates on the present-PTE\nbit position.  Swap entries keep the uffd-wp state elsewhere -- the\nmigration branch reads and sets it with pte_swp_uffd_wp() and\npte_swp_mkuffd_wp() -- and the present-PTE position falls into the swap\npayload.  On x86-64 it lands in the inverted swap offset, where a\nnaturally-aligned hugetlb PFN always has the affected bit set, so the\nclear advances the encoded PFN by two pages.\n\nNo userfaultfd needs to be involved: the clear is guarded only by the\nchild VMA not being uffd-wp registered, so a plain fork() with an\nin-flight hugetlb migration entry (or a poisoned hugetlb page) corrupts\nthe entry copied into the child.  Instrumenting the clear and forking\nafter MADV_HWPOISON on a 2MB anon hugetlb page shows:\n\n  offset before=120e00\n  offset after =120e02\n\nThe fallout is mostly latent: rmap walks match migration entries by folio\nrange and remove_migration_pte() rebuilds the PTE from the folio, so a\nwithin-folio PFN skew heals once migration completes.  But any path that\nre-encodes the corrupted offset -- e.g.  hugetlb_change_protection()\nrewriting a writable migration entry via\nmake_readable_migration_entry(swp_offset(entry)) -- propagates it.\n\nMigration entries legitimately carry uffd-wp, so clear it with\npte_swp_clear_uffd_wp(), matching copy_nonpresent_pte() and\nmove_huge_pte().\n\nA hwpoison entry, on the other hand, never carries the uffd-wp bit: it is\ninstalled fresh by make_hwpoison_entry() (try_to_unmap_one() does not\npreserve uffd-wp on the hwpoison path) and hugetlb_change_protection()\nleaves hwpoison entries untouched.  There was nothing to clear there, only\nthe corruption, so drop the clear entirely.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80893",
          "url": "https://www.suse.com/security/cve/CVE-2026-80893"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279706 for CVE-2026-80893",
          "url": "https://bugzilla.suse.com/1279706"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80893"
    },
    {
      "cve": "CVE-2026-80977",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80977"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error()\n\nskb_tx_error() completes the zerocopy uarg and clears\nSKBFL_ALL_ZEROCOPY, and skb_zcopy_downgrade_managed() clears\nSKBFL_MANAGED_FRAG_REFS. Both live in skb_shinfo(), which every clone\nshares, while the caller only owns the reference it is about to drop.\nThrough a clone it tells the producer its pages are free and drops\nSKBFL_SHARED_FRAG for an skb that is still in flight.\n\nOpen vSwitch reaches this with a non-last OVS_ACTION_ATTR_RECIRC:\nclone_execute() sends a skb_clone() into ovs_dp_process_packet() while\ndo_execute_actions() keeps forwarding the original, and skb_clone()\ndoes not privatise the frags here -- skb_orphan_frags() returns early\non SKBFL_DONT_ORPHAN. A flow miss on the clone then strips the marker\nfrom the packet still being forwarded, and a later local ESP delivery\ndecrypts in place over frags it does not own privately.\n\nSkip it for a cloned skb. Nothing is lost: skb_release_data() clears\nthe zerocopy state once the last reference to the shared data goes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80977",
          "url": "https://www.suse.com/security/cve/CVE-2026-80977"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280259 for CVE-2026-80977",
          "url": "https://bugzilla.suse.com/1280259"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280462 for CVE-2026-80977",
          "url": "https://bugzilla.suse.com/1280462"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80977"
    },
    {
      "cve": "CVE-2026-89528",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89528"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Reject Read lists that exceed the page budget\n\nIndividual Read segment lengths are validated at decode time, but\nnothing prevents a requester from sending multiple segments whose\ncumulative length exceeds the rq_pages array budget. When one\nsegment fills the page array exactly, the runtime guard in\nsvc_rdma_build_read_segment() is bypassed because len reaches zero.\nA subsequent segment then accesses the NULL sentinel slot at\nrq_pages[rq_maxpages], resulting in a NULL pointer dereference during\nDMA mapping.\n\nAccumulate pages across all Read segments and reject the message at\ndecode time when the total would overflow the page budget.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89528",
          "url": "https://www.suse.com/security/cve/CVE-2026-89528"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280743 for CVE-2026-89528",
          "url": "https://bugzilla.suse.com/1280743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280744 for CVE-2026-89528",
          "url": "https://bugzilla.suse.com/1280744"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89528"
    },
    {
      "cve": "CVE-2026-89669",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89669"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: initialize copy-notify stateid before publishing it\n\nnfsd4_copy_notify() finished initializing the cpntf state after\nnfs4_alloc_init_cpntf_state() had already linked it into the\ns2s_cp_stateids IDR and the parent\u0027s sc_cp_list, with cs_count == 1 (the\nmembership reference) and none held for the caller. A racing\nOFFLOAD_CANCEL (crafted cl_id == nn-\u003es2s_cp_cl_id plus the guessable\nso_id) could reach manage_cpntf_state() and free the entry, turning the\ncaller\u0027s subsequent cpn_cnr_stateid read and cp_p_stateid/cp_p_clid\nwrites into use-after-free. The owning clientid was also only recorded\nafter publication, so it could not gate an ownership check in that window.\n\nRecord cp_p_stateid and cp_p_clid inside nfs4_alloc_init_cpntf_state()\nbefore nfs4_init_cp_state() publishes the entry, and return it with an\nextra reference. The caller reads the stateid under that reference and\ndrops it with nfs4_put_cpntf_state(); on a late error the laundromat\nreaps the entry.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89669",
          "url": "https://www.suse.com/security/cve/CVE-2026-89669"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280251 for CVE-2026-89669",
          "url": "https://bugzilla.suse.com/1280251"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280286 for CVE-2026-89669",
          "url": "https://bugzilla.suse.com/1280286"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89669"
    },
    {
      "cve": "CVE-2026-89685",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89685"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix clock domain mismatch in clients_still_reclaiming()\n\nclients_still_reclaiming() computes a deadline from nn-\u003eboot_time\n(CLOCK_REALTIME, ~1.7 billion) but compares it against\nktime_get_boottime_seconds() (CLOCK_BOOTTIME, seconds since boot).\nThe comparison is always false - it would take ~54 years of uptime\nfor BOOTTIME to exceed the REALTIME-derived deadline.\n\nThis means any client can hold the server in grace indefinitely by\nsending CLAIM_PREVIOUS OPEN requests, blocking all non-reclaim\noperations for all other clients.\n\nAdd boot_time_bt (CLOCK_BOOTTIME) alongside the existing boot_time\nand use it for the deadline computation. boot_time (CLOCK_REALTIME)\nis preserved for its cl_boot clientid-nonce role.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89685",
          "url": "https://www.suse.com/security/cve/CVE-2026-89685"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280179 for CVE-2026-89685",
          "url": "https://bugzilla.suse.com/1280179"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89685"
    },
    {
      "cve": "CVE-2026-89706",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89706"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: Reset write verifier when async COPY writeback fails\n\nAsync COPY captures nn-\u003ewriteverf at request time and reports it to\nthe client via CB_OFFLOAD after the worker kthread completes. When\nthe post-copy vfs_fsync_range() or filemap_check_wb_err() in\n_nfsd_copy_file_range() reports an error, the worker correctly\nleaves NFSD4_COPY_F_COMMITTED clear so that CB_OFFLOAD encodes\nwr_stable_how as NFS_UNSTABLE, but the server\u0027s write verifier is\nnot rotated.\n\nA client that receives NFS_UNSTABLE in CB_OFFLOAD follows up with\nCOMMIT to make the copied data durable. With the verifier\nunchanged, COMMIT returns the same value the client just received\nvia CB_OFFLOAD, and the client concludes the copy is durable --\nsilently dropping the data whose writeback in fact failed. This\nviolates the UNSTABLE+COMMIT durability contract (RFC 7862 section\n15.1, RFC 8881 section 18.32) and matches the bug just fixed in\nnfsd_vfs_write() and nfsd_commit().\n\nRotate nn-\u003ewriteverf at the writeback-failure site. The async COPY\nworker has no svc_rqst, so commit_reset_write_verifier() is not\navailable here; calling nfsd_reset_write_verifier() directly\nmirrors the trace-less reset already used by\nnfsd_file_check_write_error() for the same purpose. Filter out\n-EAGAIN and -ESTALE, matching commit_reset_write_verifier(), since\nneither indicates a durable-storage failure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89706",
          "url": "https://www.suse.com/security/cve/CVE-2026-89706"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280477 for CVE-2026-89706",
          "url": "https://bugzilla.suse.com/1280477"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89706"
    },
    {
      "cve": "CVE-2026-89778",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89778"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nisofs: fix out-of-bounds page array access on empty zisofs block\n\nzisofs_uncompress_block()\u0027s empty-block fast path returns\npcount \u003c\u003c PAGE_SHIFT, ignoring the incoming poffset, unlike the\ndecompression path which returns bytes produced relative to poffset.\nzisofs_fill_pages() uses that return to advance its page cursor, so when\nthe zisofs block size is below PAGE_SIZE and a sub-page block leaves\npoffset partway into a page, a following empty block over-counts and\nadvances pages[] one element past its end, after which\n\"if (poffset \u0026\u0026 *pages)\" reads pages[1] out of bounds.  rock.c only\nrejects a block-size shift \u003e 17, so a crafted \"ZF\" Rock Ridge record can\nset it below PAGE_SHIFT; the bug is reached by an ordinary read() of a\ncompressed file on such a mounted ISO9660 image.\n\nReturn the byte count relative to poffset and zero only\n[poffset, PAGE_SIZE) of the first page, matching the decompression path.\nThe page-aligned case (poffset == 0) is unaffected.\n\n  BUG: KASAN: slab-out-of-bounds in zisofs_read_folio (fs/isofs/compress.c:290)\n  Read of size 8 at addr ffff88800f5eac48 by task exploit/142\n   zisofs_read_folio (fs/isofs/compress.c:290)\n   read_pages (mm/readahead.c:184)\n   ...\n   filemap_read (mm/filemap.c:2814)\n   vfs_read (fs/read_write.c:574)\n   __x64_sys_pread64 (fs/read_write.c:769)\n   do_syscall_64 (arch/x86/entry/syscall_64.c:94)\n   entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)\n  The buggy address is located 0 bytes to the right of the\n  allocated 8-byte region in the kmalloc-8 cache",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89778",
          "url": "https://www.suse.com/security/cve/CVE-2026-89778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280966 for CVE-2026-89778",
          "url": "https://bugzilla.suse.com/1280966"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89778"
    },
    {
      "cve": "CVE-2026-89811",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89811"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Add TLB flush after MES queue eviction/suspension\n\nMES (Micro Engine Scheduler) does not perform heavy-weight TLB\ninvalidation after unmapping queues, unlike HWS which does this\nautomatically. This causes a race condition where in-flight DMA\ndescriptors can access memory that has been unmapped, leading to page\nfaults and GPU queue hangs during SVM page migration.\n\nThe issue manifests as KFDSVMRangeTest.MultiThreadMigrationTest\nfailures on gfx1151 (Strix Point) with XNACK mode 1 enabled - the GPU\ncompute queue hangs with packets submitted but never consumed.\n\nAdd kfd_flush_tlb() calls after MES queue removal in two locations:\n- evict_process_queues_cpsch(): after all queues removed during eviction\n- suspend_queues(): after debug/criu queue suspension (with mem_fence barrier)\n\nThis ensures all in-flight memory accesses from unmapped queues are\nflushed before memory is freed or migrated.\n\n(cherry picked from commit f5c4f88e0f9c45a8fb9dfac0c1df726c95e41b77)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89811",
          "url": "https://www.suse.com/security/cve/CVE-2026-89811"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281144 for CVE-2026-89811",
          "url": "https://bugzilla.suse.com/1281144"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89811"
    },
    {
      "cve": "CVE-2026-89987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: transfer the pmd dirty bit to the folio on zap\n\nzap_huge_pmd_folio() propagates the pmd young bit to the folio for the\nfile case, but not the dirty bit.  The pte path does propagate it, in\nzap_present_folio_ptes() and so does the pmd split path, in\n__split_huge_pmd_locked().\n\nFor most file mappings the omission is harmless, because writing to a\nshared file mapping goes through page_mkwrite(), which dirties the folio. \ntmpfs is different: it has no page_mkwrite(), and vma_wants_writenotify()\nis false for it, so a *read* fault on a MAP_SHARED tmpfs mapping installs\na writable pmd via do_read_fault().  do_read_fault() does not call\nfault_dirty_shared_page(), so subsequent stores through that mapping set\nonly the hardware dirty bit in the pmd and never call folio_mark_dirty(). \nA shmem folio allocated by a fault is marked uptodate but not dirty (see\nthe clear: block in shmem_get_folio_gfp()), so PG_dirty is never set at\nall.\n\nUnmapping such a folio - munmap(), or exit_mmap() when the process dies -\nthen loses the only record that it was written, because zap_huge_pmd()\ndrops the pmd without transferring the dirty bit.  Reclaim afterwards sees\na clean shmem folio: the whole swap-out block in shrink_folio_list() is\ninside \"if (folio_test_dirty(folio))\", so pageout() is skipped and the\nfolio falls into __remove_mapping().  There, folio_is_file_lru() is false\nfor a swapbacked folio, so no shadow entry is created and\n__filemap_remove_folio(folio, NULL) simply empties the i_pages slot.  The\ndata is freed without ever being written to swap, and the next fault on\nthat index returns a freshly zeroed folio.\n\nThis is silent data loss for any process that keeps state in a MAP_SHARED\ntmpfs segment across an unmap - for example a cache handed from one\nprocess generation to the next through /dev/shm.  It requires the folio to\nbe PMD-mapped, so it only shows up once shmem THP is enabled (which is\nwhat we did in Meta fleet and started noticing crashes); with THP off the\npte path transfers the dirty bit correctly.  It also only becomes visible\nwhen swap is enabled, because with no swap device shmem folios (which are\non the anon LRU) are not scanned by reclaim at all, so the clean folio is\nnever dropped.\n\nReproduced on x86_64 with a tmpfs mounted huge=within_size: read-fault a\n2MB-backed region, write a known pattern through the resulting mapping,\nmunmap, force reclaim of the cgroup, then re-map and read back.  Without\nthis patch the region reads back as zeros and vmstat shows zswpout 0 - the\ndata was discarded rather than swapped.  With this patch the region reads\nback correctly and the pages are swapped out as expected.  With\nhuge=never, or when the first touch is a write, the test passes either\nway.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89987",
          "url": "https://www.suse.com/security/cve/CVE-2026-89987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281819 for CVE-2026-89987",
          "url": "https://bugzilla.suse.com/1281819"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-89987"
    },
    {
      "cve": "CVE-2026-90011",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90011"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Reserve a terminator byte for the login payload\n\niscsi_target_check_login_request() rejects a login PDU whose\nDataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is \u0027\u003e\u0027 and\nlogin-\u003ereq_buf is allocated with exactly MAX_KEY_VALUE_PAIRS\nbytes. Since iscsit_get_login_rx() receives payload_length + padding\nbytes, where\n\n\tpadding = ((-payload_length) \u0026 3);\n\nany payload_length from 8189 to 8192 fills the whole 8192 byte\nbuffer. The write stays in bounds, but no byte is left for a NUL\nterminator.\n\nThe buffer is subsequently consumed as a C string. In the CHAP path\nchap_check_algorithm() calls kstrdup(a_str), and extract_param() calls\nstrstr(in_buf, pattern) followed by strlen_semi(), none of which take a\nlength. convert_null_to_semi() additionally rewrites every embedded NUL\nto \u0027;\u0027, so even a payload made of well formed NUL separated key=value\nrecords is left without a terminator. These walk past the end of the\nobject into adjacent slab memory. It is reachable by an unauthenticated\ninitiator against a portal configured for CHAP; when authentication is\nnot required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and\nthe CHAP path is never entered.\n\nAllocate one extra byte. kzalloc() zeroes it and nothing ever writes to\nit, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS\nbytes, so the buffer is always terminated.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90011",
          "url": "https://www.suse.com/security/cve/CVE-2026-90011"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281280 for CVE-2026-90011",
          "url": "https://bugzilla.suse.com/1281280"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281282 for CVE-2026-90011",
          "url": "https://bugzilla.suse.com/1281282"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90011"
    },
    {
      "cve": "CVE-2026-90101",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90101"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix call to hardware monitoring event handler\n\nThe first parameter of hwmon_notify_event() is supposed to be the hardware\nmonitoring device. The bnxt driver calls it with the platform device as\nfirst parameter instead. This API break results in undefined behavior and\nmay result in a crash.\n\nPass the hardware monitoring device as parameter instead to fix the\nproblem.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90101",
          "url": "https://www.suse.com/security/cve/CVE-2026-90101"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281525 for CVE-2026-90101",
          "url": "https://bugzilla.suse.com/1281525"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-90101"
    },
    {
      "cve": "CVE-2026-90283",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90283"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhugetlbfs: release subpool on fill_super failure\n\nhugetlbfs_fill_super() allocates a hugepage subpool when size or min_size\nmount options are specified.  hugepage_new_subpool() may also reserve huge\npages for min_size.\n\nIf root dentry creation fails after the subpool is created, the failure\npath frees the subpool with kfree().  This bypasses hugepage_put_subpool()\nand can leave min_size reservations charged.\n\nUse hugepage_put_subpool() on the failure path, matching the normal\nput_super path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90283",
          "url": "https://www.suse.com/security/cve/CVE-2026-90283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281771 for CVE-2026-90283",
          "url": "https://bugzilla.suse.com/1281771"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 1.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-90283"
    },
    {
      "cve": "CVE-2026-90289",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90289"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Resize MST HDCP per-connector arrays to 32\n\nAMDGPU_DM_MAX_DISPLAY_INDEX is 31. It suggest a maximum number of\n32 connectors. But the way it\u0027s used is like MAX_DISPLAY_COUNT.\nHence we\u0027re off by one with DRM core, which supports a max of 32\nconnectors.\n\nRename AMDGPU_DM_MAX_DISPLAY_INDEX to AMDGPU_DM_MAX_DISPLAY_COUNT\nto match its actual use, and increase the size to 32 to match the\noriginally intended size.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90289",
          "url": "https://www.suse.com/security/cve/CVE-2026-90289"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281726 for CVE-2026-90289",
          "url": "https://bugzilla.suse.com/1281726"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-90289"
    },
    {
      "cve": "CVE-2026-90315",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90315"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/sysfs: Add lockdown checks to legacy I/O and memory handlers\n\nCurrently, the legacy I/O and memory sysfs handlers do not check\nsecurity_locked_down(LOCKDOWN_PCI_ACCESS), leaving the legacy_io and\nlegacy_mem files unprotected when the kernel is locked down.\n\nCommit eb627e17727e (\"PCI: Lock down BAR access when the kernel is locked\ndown\") added the check to pci_write_config(), pci_mmap_resource(), and\npci_write_resource_io() to prevent userspace from programming DMA-capable\nhardware that could be used to modify kernel code, but did not cover the\nlegacy handlers.\n\nAs a result, root can still write arbitrary I/O ports and map the legacy\nI/O and memory spaces while the kernel is locked down, which is the same\ncapability the lockdown is meant to remove.\n\nAdd the same check to pci_write_legacy_io(), pci_mmap_legacy_mem(), and\npci_mmap_legacy_io().\n\nThese generic handlers cover both architectures that define HAVE_PCI_LEGACY\n(such as Alpha and PowerPC).\n\n[bhelgaas: add Link]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90315",
          "url": "https://www.suse.com/security/cve/CVE-2026-90315"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281865 for CVE-2026-90315",
          "url": "https://bugzilla.suse.com/1281865"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-90315"
    },
    {
      "cve": "CVE-2026-92488",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-92488"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/erdma: complete object teardown when the destroy command fails\n\nerdma_destroy_qp(), erdma_destroy_cq(), erdma_dereg_mr(), and\nerdma_destroy_ah() returned early when erdma_post_cmd_wait() failed,\nleaking the queue buffers, MTTs, doorbells and the STAG, QPN, CQN and AHN\nidentifiers. A command timeout clears ERDMA_CMDQ_STATE_OK_BIT and\npermanently disables the command queue, so no retry can succeed; the RDMA\ncore keeps the object after a failed destructor and forced uverbs cleanup\nthen nulls the pointers, making the resources unreachable.\n\nWarn on failure but release every software-owned resource and return\nsuccess, since during terminal destruction the hardware command result is\nonly diagnostic.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-92488",
          "url": "https://www.suse.com/security/cve/CVE-2026-92488"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281979 for CVE-2026-92488",
          "url": "https://bugzilla.suse.com/1281979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-92488"
    },
    {
      "cve": "CVE-2026-93222",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93222"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsignal: avoid shared siginfo namespace rewrites\n\nsend_signal_locked() rewrites sender ids for the target namespace.  Group\nsends reuse the same siginfo, so one recipient can affect the next.\n\nCopy the siginfo before changing it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93222",
          "url": "https://www.suse.com/security/cve/CVE-2026-93222"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282742 for CVE-2026-93222",
          "url": "https://bugzilla.suse.com/1282742"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93222"
    },
    {
      "cve": "CVE-2026-93252",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93252"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix circular locking dependency in ocfs2_init_acl()\n\nA lockdep warning indicates a circular locking dependency between\n`\u0026oi-\u003eip_xattr_sem` and `\u0026journal-\u003ej_trans_barrier`:\n\nWARNING: possible circular locking dependency detected\nis trying to acquire lock:\n (\u0026oi-\u003eip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2fd/0x7e0\n fs/ocfs2/acl.c:367\n\nbut task is already holding lock:\n (\u0026journal-\u003ej_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700\n fs/ocfs2/journal.c:369\n\nThe deadlock involves two code paths: Path 1 (setxattr) where\n`ocfs2_xattr_set()` acquires `ip_xattr_sem` (write) and then starts a\ntransaction, which acquires `j_trans_barrier` (read); and Path 2\n(mkdir/mknod) where `ocfs2_mknod()` starts a transaction (`j_trans_barrier`\nread) and then calls `ocfs2_init_acl()`, which attempts to acquire\n`ip_xattr_sem` (read) on the parent directory to retrieve the default ACL.\n\nBecause rw_semaphores are subject to writer priority, a pending writer on\n`j_trans_barrier` (e.g., the journal commit thread) can cause Path 1 to\nblock, while Path 2 is blocked waiting for Path 1 to release\n`ip_xattr_sem`.\n\nThe patch fixes the lock ordering by precomputing the ACL state before\nstarting the OCFS2 transaction, while preserving POSIX ACL storage\nsemantics and the existing inode/security initialization order. By reading\nthe parent directory\u0027s default ACL and preparing the new inode\u0027s ACLs\noutside the transaction, `ip_xattr_sem` is always acquired before\n`j_trans_barrier`.\n\n`struct ocfs2_acl_state` encapsulates the prepared ACL state, while\n`ocfs2_acl_init_prepare()` and `ocfs2_acl_init_release()` avoid code\nduplication between `ocfs2_mknod()` and `ocfs2_init_security_and_acl()`.\n`ocfs2_calc_xattr_init()` and `ocfs2_init_acl()` use this precomputed\nstate, removing internal `ip_xattr_sem` acquisition and redundant disk\nreads.\n\nAdditionally, remove the `ip_xattr_sem` acquisition from\n`ocfs2_xattr_set_handle()`. This function is only used while initializing a\nnew inode that has not yet been inserted into the inode hash or attached to\na dentry, meaning there is no risk of concurrent access and the lock is\nunnecessary.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93252",
          "url": "https://www.suse.com/security/cve/CVE-2026-93252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282784 for CVE-2026-93252",
          "url": "https://bugzilla.suse.com/1282784"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93252"
    },
    {
      "cve": "CVE-2026-93787",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93787"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: bound dirent name against end of SMB response in cifs_filldir\n\ncifs_filldir() copies the entry name out of an SMB1 TRANS2_FIND_FIRST /\nFIND_NEXT response using a length (de.namelen) supplied by the server.\nThe kmalloc\u0027d SMB response buffer is bounded, but nothing checks that\nde.name + de.namelen still lies inside that buffer before the eventual\nfilldir64() -\u003e verify_dirent_name() -\u003e memchr() reads namelen bytes.\n\nA hostile SMB1 server that returns an oversized FileNameLength in a\ndirectory entry therefore causes memchr() to read past the end of the\nresponse slab buffer. Reachable from any user who can list a directory\non a CIFS mount served by an attacker-controlled server (getdents64()\non the mounted directory):\n\n  BUG: KASAN: slab-out-of-bounds in memchr+0x71/0x80\n  Read of size 1 at addr ffff88800e0640cc by task poc/115\n  Call Trace:\n   dump_stack_lvl+0x64/0x80\n   print_report+0xce/0x620\n   kasan_report+0xec/0x120\n   memchr+0x71/0x80\n   filldir64+0x4c/0x6a0\n   cifs_filldir.constprop.0+0x9bb/0x1e00\n   cifs_readdir+0x2101/0x3380\n   iterate_dir+0x19c/0x520\n   __x64_sys_getdents64+0x126/0x210\n   do_syscall_64+0x107/0x5a0\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nPass the end-of-response pointer down to cifs_filldir() and reject\nentries whose name would extend past that boundary.\n\nThis bug was discovered by Artiphishell\u0027s vTriage pipeline, which\ngenerated a userspace reproducer (an emulated hostile SMB1 server plus\na getdents64() client) that reliably triggers the KASAN report on an\nunpatched kernel. The fix below was drafted with the Claude coding\nassistant; a userspace reproducer is available on request.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93787",
          "url": "https://www.suse.com/security/cve/CVE-2026-93787"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282932 for CVE-2026-93787",
          "url": "https://bugzilla.suse.com/1282932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282933 for CVE-2026-93787",
          "url": "https://bugzilla.suse.com/1282933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-93787"
    },
    {
      "cve": "CVE-2026-93800",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93800"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()\n\nIf during relocation we fail in insert_dirty_subvol() because\nbtrfs_update_reloc_root() returned an error, we will leave a root\u0027s\nreloc_root field pointing to a reloc root that was freed instead of NULL,\nresulting later in a use-after-free, or double free attempt during\nunmount.\n\nThe sequence of steps is this:\n\n1) During relocation the call to btrfs_update_reloc_root() in\n   insert_dirty_subvol() fails, so insert_dirty_subvol() returns the\n   error to merge_reloc_root() without adding the root to the list\n   rc-\u003edirty_subvol_roots;\n\n2) Then merge_reloc_root() aborts the current transaction because\n   insert_dirty_subvol() returned an error;\n\n3) Up the call chain, merge_reloc_roots() gets the error, adds the\n   reloc root for root X to the local reloc_roots list and jumps to the\n   \u0027out\u0027 label, where it calls free_reloc_roots() to free all the reloc\n   roots in the local reloc_roots list. This frees the reloc root for\n   root X;\n\n4) We go up the call chain to relocate_block_group() which calls\n   clean_dirty_subvols() to go over dirty roots and set their\n   -\u003ereloc_root field to NULL, but root X is not in the dirty_subvol_roots\n   list, so its -\u003ereloc_root still points to a reloc root;\n\n5) Relocation finishes, with an error and a transaction abort, but the\n   -\u003ereloc_root field for root X still points to the reloc root that was\n   freed in step 3;\n\n6) When unmounting the fs we end up calling:\n\n     btrfs_free_fs_roots()\n        btrfs_drop_and_free_fs_root()\n           --\u003e calls btrfs_put_root() against root X\u0027s -\u003ereloc_root\n               which is not NULL and points to the already freed\n               reloc root in step 4 above\n\n  Resulting in a use-after-free to a double free attempt.\n\nSyzbot reported this with the following dmesg/syslog:\n\n   [  106.004389][ T5339] BTRFS error (device loop0 state A): Transaction aborted (error -5)\n   [  106.014266][ T5339] BTRFS: error (device loop0 state A) in merge_reloc_root:1655: errno=-5 IO failure\n   [  106.021891][ T1061] BTRFS error (device loop0 state A): error while writing out transaction: -5\n   [  106.026964][ T1061] BTRFS warning (device loop0 state A): Skipping commit of aborted transaction.\n   [  106.033807][ T5340] BTRFS error (device loop0 state A): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0\n   [  106.039265][ T1061] BTRFS: error (device loop0 state A) in cleanup_transaction:2067: errno=-5 IO failure\n   [  106.044382][ T5339] BTRFS info (device loop0 state EA): forced readonly\n   [  106.074329][ T5339] BTRFS: error (device loop0 state EA) in merge_reloc_roots:1887: errno=-5 IO failure\n   [  106.081004][ T5356] BTRFS info (device loop0 state EA): scrub: started on devid 1\n   [  106.085611][ T5339] BTRFS info (device loop0 state EA): balance: ended with status: -30\n   [  106.089517][ T5356] BTRFS info (device loop0 state EA): scrub: not finished on devid 1 with status: -30\n   [  106.662365][ T5338] BTRFS info (device loop0 state EA): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409\n   [  106.682946][ T5338] ==================================================================\n   [  106.686574][ T5338] BUG: KASAN: slab-use-after-free in btrfs_put_root+0x2f/0x250\n   [  106.690090][ T5338] Write of size 4 at addr ffff88803f978630 by task syz.0.0/5338\n   [  106.693173][ T5338]\n   [  106.694279][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)\n   [  106.694293][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n   [  106.694300][ T5338] Call Trace:\n   [  106.694308][ T5338]  \u003cTASK\u003e\n   [  106.694314][ T5338]  dump_stack_lvl+0xe8/0x150\n   [  106.694331][ T5338]  print_address_description+0x55/0x1e0\n   [  106.694343][ T5338]  ? btrfs_put_root+0x2f/0x250\n   [  106.694358][ T5338]  print_report+0x58/0x70\n   [  106.\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93800",
          "url": "https://www.suse.com/security/cve/CVE-2026-93800"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282808 for CVE-2026-93800",
          "url": "https://bugzilla.suse.com/1282808"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93800"
    },
    {
      "cve": "CVE-2026-93806",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93806"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: validate assoc response length before status and IE access\n\ncfg80211_rx_assoc_resp() initialises the status and response-IE fields\nof cfg80211_connect_resp_params from the management frame before\nproving that the frame is long enough for those offsets. S1G and\nregular association responses also have different IE offsets, but the\nS1G path only patched resp_ie after the unsafe initialiser had already\nrun.\n\nDefer resp_ie, resp_ie_len, and status to after the link-iteration\nloop. Use a bool to remember whether the frame is S1G, then validate\nthe appropriate minimum length and set all three fields in a single\nif/else block. Funnel short-frame and SME-reject cleanup through a\nshared free_bss label for the abandon paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93806",
          "url": "https://www.suse.com/security/cve/CVE-2026-93806"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283037 for CVE-2026-93806",
          "url": "https://bugzilla.suse.com/1283037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93806"
    },
    {
      "cve": "CVE-2026-93820",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93820"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: rockchip: Protect root bus removal with rescan lock\n\nHold the pci_rescan_remove_lock lock while stopping and removing a root bus\nto avoid racing with concurrent rescan or hotplug operations triggered via\nsysfs.  Such races may lead to use-after-free issues or system crashes.\n\n[bhelgaas: commit log]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93820",
          "url": "https://www.suse.com/security/cve/CVE-2026-93820"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282755 for CVE-2026-93820",
          "url": "https://bugzilla.suse.com/1282755"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93820"
    },
    {
      "cve": "CVE-2026-93821",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93821"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: altera: Protect root bus removal with rescan lock\n\nHold the pci_rescan_remove_lock lock while stopping and removing a root bus\nto avoid racing with concurrent rescan or hotplug operations triggered via\nsysfs.  Such races may lead to use-after-free issues or system crashes.\n\n[bhelgaas: commit log]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93821",
          "url": "https://www.suse.com/security/cve/CVE-2026-93821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282761 for CVE-2026-93821",
          "url": "https://bugzilla.suse.com/1282761"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93821"
    },
    {
      "cve": "CVE-2026-93822",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93822"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: iproc: Protect root bus removal with rescan lock\n\nHold the pci_rescan_remove_lock lock while stopping and removing a root bus\nto avoid racing with concurrent rescan or hotplug operations triggered via\nsysfs.  Such races may lead to use-after-free issues or system crashes.\n\n[bhelgaas: commit log]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93822",
          "url": "https://www.suse.com/security/cve/CVE-2026-93822"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282762 for CVE-2026-93822",
          "url": "https://bugzilla.suse.com/1282762"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93822"
    },
    {
      "cve": "CVE-2026-97415",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97415"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF\n\nROOT_REF and ROOT_BACKREF items contain a struct btrfs_root_ref followed\nby the subvolume name. Several readers assume that this layout is already\nvalid and then use the on-disk name length directly. A corrupted item can\ntherefore make those readers address bytes outside the item, and\nBTRFS_IOC_GET_SUBVOL_INFO can copy too many bytes into its fixed-size UAPI\nname buffer.\n\nValidate ROOT_REF and ROOT_BACKREF items in tree-checker before any reader\nuses them. Reject records that do not contain a non-empty name, whose\nname_len does not exactly describe the remaining item payload, or whose\nname exceeds BTRFS_NAME_LEN.\n\nFor BTRFS_IOC_GET_SUBVOL_INFO, copy only the validated on-disk name_len\ninstead of deriving the copy length from the item size. The ioctl result is\nzeroed when allocated. That leaves the existing trailing zero byte\nuntouched.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97415",
          "url": "https://www.suse.com/security/cve/CVE-2026-97415"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282768 for CVE-2026-97415",
          "url": "https://bugzilla.suse.com/1282768"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97415"
    },
    {
      "cve": "CVE-2026-97416",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97416"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()\n\n[BUG]\nRunning btrfs balance can trigger a null-ptr-deref before relocating a\ndata chunk when metadata corruption leaves a chunk in the chunk tree\nwithout a corresponding block group in the in-memory cache:\n\n  KASAN: null-ptr-deref in range [0x0000000000000088-0x000000000000008f]\n  RIP: 0010:btrfs_may_alloc_data_chunk+0x40/0x1c0 fs/btrfs/volumes.c:3601\n  Call Trace:\n    __btrfs_balance fs/btrfs/volumes.c:4217 [inline]\n    btrfs_balance+0x2516/0x42b0 fs/btrfs/volumes.c:4604\n    btrfs_ioctl_balance fs/btrfs/ioctl.c:3577 [inline]\n    btrfs_ioctl+0x25cf/0x5b90 fs/btrfs/ioctl.c:5313\n    ...\n\n[CAUSE]\n__btrfs_balance() iterates the on-disk chunk tree and passes the chunk\nlogical bytenr to btrfs_may_alloc_data_chunk() before relocating a data\nchunk. That helper then queries the in-memory block group cache:\n\n  cache = btrfs_lookup_block_group(fs_info, chunk_offset);\n  chunk_type = cache-\u003eflags;   /* cache may be NULL */\n\nA corrupt image can contain a chunk item whose matching block group\nitem is missing, so no block group is ever inserted into the cache. In\nthat case btrfs_lookup_block_group() returns NULL.\n\nThe code only guards this with ASSERT(cache), which becomes a no-op when\nCONFIG_BTRFS_ASSERT is disabled. The subsequent dereference of\ncache-\u003eflags therefore crashes the kernel.\n\n[FIX]\nAdd a NULL check after btrfs_lookup_block_group() in\nbtrfs_may_alloc_data_chunk() and print and error message for clarity.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97416",
          "url": "https://www.suse.com/security/cve/CVE-2026-97416"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282770 for CVE-2026-97416",
          "url": "https://bugzilla.suse.com/1282770"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97416"
    },
    {
      "cve": "CVE-2026-97491",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97491"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: Don\u0027t sleep inside rds_ib_conn_path_shutdown\n\nNew rds rdma self tests exposed a hang when tearing down\nthe ib network configs.  This is caused by the shutdown worker\nthread sleeping on the wait_event call, which blocks other work\nitems in the queue. Fix this by changing wait_event to\nwait_event timeout, and looping until the wait check succeeds.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97491",
          "url": "https://www.suse.com/security/cve/CVE-2026-97491"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283142 for CVE-2026-97491",
          "url": "https://bugzilla.suse.com/1283142"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97491"
    },
    {
      "cve": "CVE-2026-97555",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97555"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix heap overflow in DACL owner/group rewrite\n\nWhen id_mode_to_cifs_acl rewrites an existing DACL, it allocates a\nbuffer sized according to the on-disk DACL length reported by\ndacl_ptr-\u003esize. However, replace_sids_and_copy_aces may rewrite each\nACE with a new owner/group SID obtained from the cifs.idmap upcall.\nThose SIDs can have up to SID_MAX_SUB_AUTHORITIES (15) sub-authorities,\nmaking each ACE up to 76 bytes (sizeof(struct smb_ace)).\n\nIf the original DACL contains short SIDs (e.g., 1 sub-authority) while\nthe replacement SIDs are long, the rewritten ACEs overflow the\nallocation.\n\nFix this by always budgeting for worst-case SID expansion: allocate\nsizeof(struct smb_acl) plus num_aces * sizeof(struct smb_ace), which\ncovers the smb_acl header and room for every ACE at maximum SID size.\nThis replaces the previous split logic that used dacl_ptr-\u003esize for\ncifsacl mounts but num_aces * sizeof(struct smb_ace) for mode_from_sid\nmounts: both paths can trigger the same rewrite and need the same\nheadroom.\n\nKASAN reports this as:\n  BUG: KASAN: slab-out-of-bounds in build_sec_desc+0x1e8a/0x2680 [cifs]\n  Write of size 4 at addr ffff8881a5e25374 by task chown/5298\n  ...\n  The buggy address is located 0 bytes to the right of\n   allocated 884-byte region [ffff8881a5e25000, ffff8881a5e25374)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97555",
          "url": "https://www.suse.com/security/cve/CVE-2026-97555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283851 for CVE-2026-97555",
          "url": "https://bugzilla.suse.com/1283851"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283852 for CVE-2026-97555",
          "url": "https://bugzilla.suse.com/1283852"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-97555"
    },
    {
      "cve": "CVE-2026-97564",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97564"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject userspace cifs.idmap descriptions\n\ncifs.idmap key descriptions carry authority-bearing fields (owner and\ngroup SIDs and uid/gid values in \"os:\"/\"gs:\"/\"oi:\"/\"gi:\" form) that the\ncifs.idmap upcall helper treats as kernel-originating inputs.  Unlike\nits sibling cifs.spnego, the cifs.idmap key type has no vet_description\nhook, so userspace can create keys of this type through\nrequest_key(2)/add_key(2) and supply those fields without CIFS origin.\nA request_key(2) call with a non-NULL callout then drives a root\nusermodehelper upcall (/sbin/request-key -\u003e cifs.idmap) that consumes\nthe unvetted description in root context.\n\nOnly accept cifs.idmap descriptions while CIFS is using its private\nroot_cred to request the key.  id_to_sid()/sid_to_id() already run\nunder override_creds(root_cred), so the kernel-originated path is\nunaffected.\n\nThis mirrors commit 3da1fdf4efbc (\"smb: client: reject userspace\ncifs.spnego descriptions\"), which applied the same restriction to\ncifs.spnego.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97564",
          "url": "https://www.suse.com/security/cve/CVE-2026-97564"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283946 for CVE-2026-97564",
          "url": "https://bugzilla.suse.com/1283946"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283947 for CVE-2026-97564",
          "url": "https://bugzilla.suse.com/1283947"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-97564"
    },
    {
      "cve": "CVE-2026-97595",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97595"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: fix use-after-free of sdata via queued RX frames\n\nThe RX softirq producer ieee802154_subif_frame() queues received beacon\nand MAC-command frames onto local-\u003erx_beacon_list / rx_mac_cmd_list and\nschedules a process-context worker, storing a raw mac_pkt-\u003esdata (and\nskb-\u003edev == sdata-\u003edev) with neither a reference nor any locking:\n\n - the lists have no lock: the softirq producer list_add_tail()s while the\n   mac_wq worker list_del()s, so sibling interfaces on the same phy corrupt\n   the list;\n\n - the workers dereference the interface after it may have been freed.\n   mac802154_rx_mac_cmd_worker() touches mac_pkt-\u003esdata directly, and\n   mac802154_rx_beacon_worker() -\u003e mac802154_process_beacon() dereferences\n   skb-\u003edev (== sdata-\u003edev). Removing an interface frees its sdata\n   (netdev_priv) while a queued frame still points at it, so a later worker\n   run is a use-after-free.\n\nReproduced under KASAN by flooding a victim interface with MAC command\nframes and removing it (the beacon path is the same class via skb-\u003edev):\n\n  BUG: KASAN: slab-use-after-free in mac802154_rx_mac_cmd_worker+0x463/0x630 [mac802154]\n  Read of size 4 at addr ffff888002f9ea18 by task kworker/u8:1/31\n  Workqueue: phy0-mac-cmds mac802154_rx_mac_cmd_worker [mac802154]\n  Call Trace:\n   mac802154_rx_mac_cmd_worker+0x463/0x630 [mac802154]\n   process_one_work+0x611/0xe80\n   worker_thread+0x52e/0xdc0\n   kthread+0x30c/0x630\n   ret_from_fork+0x2fd/0x3e0\n\nFix both lists together:\n\n - add local-\u003erx_lock and take it around every list access: the softirq\n   producer (plain spin_lock, softirq context) and the workers and flush\n   (spin_lock_bh, process context);\n\n - pin the interface for the lifetime of a queued frame with\n   netdev_hold()/netdev_put(), so the worker can safely dereference sdata /\n   skb-\u003edev even while the interface is being removed;\n\n - dequeue under the lock at the head and loop-drain the whole list in the\n   workers (they previously processed one frame per run and relied on a\n   later enqueue to drain the rest);\n\n - drop not-yet-started frames of an interface before it is unregistered,\n   from ieee802154_if_remove() (after the RCU grace period) and from the\n   ieee802154_remove_interfaces() loop -- the latter is the whole-phy\n   teardown path, which does not go through ieee802154_if_remove().\n\nAn in-flight worker that already dequeued a frame keeps its own netdev\nreference; unregister_netdevice() then waits it out in netdev_run_todo(),\nwhich runs at rtnl_unlock() (rtnl released) and after the interface has\nbeen closed, so it does not pin rtnl. A worker blocked in an association\nTX only delays that one interface\u0027s unregister (the usual \"waiting for %s\nto become free\"), it does not hold rtnl. netdev_hold() is used for this\nreason instead of a cancel_work_sync() under rtnl, which would block on\nthe worker\u0027s unbounded MLME TX wait via ieee802154_sync_queue().\n\nThe mac-command worker additionally skips processing for a stopped\ninterface (ieee802154_sdata_running()), avoiding a needless association\nresponse during teardown.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97595",
          "url": "https://www.suse.com/security/cve/CVE-2026-97595"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283736 for CVE-2026-97595",
          "url": "https://bugzilla.suse.com/1283736"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97595"
    },
    {
      "cve": "CVE-2026-97945",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97945"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mm: Fix user-space data loss with MADV_FREE and THP\n\nSome of users of Polars (a data analytics library) have lost production\ndata from this bug. They seem to have just the right combination of\nhuge pages, MADV_FREE and heavy reclaim pressure.\n\npmd_modify() masks the old value with (_HPAGE_CHG_MASK \u0026 ~_PAGE_DIRTY),\nsilently discarding the hardware dirty bit.  The subsequent\npmd_mksaveddirty() call is supposed to transfer _PAGE_DIRTY into\n_PAGE_SAVED_DIRTY when write-protecting, but the dirty bit was already\nstripped from the value, so there is nothing left to transfer.\n\nContrast with pte_modify(), which keeps _PAGE_DIRTY_BITS in its mask,\nand pud_modify(), which keeps _HPAGE_CHG_MASK untouched: pmd_modify()\nis the odd one out.  Any pmd_modify() on a writable, dirty PMD loses\nthe dirty state.\n\nOne visible consequence is data loss with MADV_FREE on PMD-mapped THP:\n\n    memset(buf, 0x5A, size);          // PMD-mapped THP, PMD dirty\n    madvise(buf, size, MADV_FREE);    // PMD cleaned but left writable,\n                                      // folio marked lazyfree\n    memset(buf, 0x5A, size);          // hardware sets _PAGE_DIRTY again\n    mprotect(buf, size, PROT_READ);   // pmd_modify() drops the dirty bit\n    mprotect(buf, size, PROT_READ|PROT_WRITE);\n    // ... memory pressure ...\n\nReclaim (e.g. under memcg pressure) then finds the lazyfree folio with\nno dirty bit set anywhere and frees it in\n__discard_anon_folio_pmd_locked(), even though the data was rewritten\nafter MADV_FREE; subsequent reads fault in fresh zero pages.  NUMA\nhinting alone can trigger the same loss, as do_huge_pmd_numa_page()\nrestores the PMD through pmd_modify() as well.\n\nPMD-mapped file THPs are affected too: mprotect()/NUMA hinting dropping\nthe dirty bit means rewritten data is never written back.\n\nFix it by keeping _PAGE_DIRTY in the preserved mask, exactly like\npte_modify() and pud_modify() do.  The existing\npmd_mksaveddirty()/pmd_clear_saveddirty() pair then performs the\nhardware-dirty \u003c-\u003e saved-dirty transition based on the write bit,\npreserving the shadow-stack encoding rules.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97945",
          "url": "https://www.suse.com/security/cve/CVE-2026-97945"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283144 for CVE-2026-97945",
          "url": "https://bugzilla.suse.com/1283144"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97945"
    },
    {
      "cve": "CVE-2026-98010",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98010"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: drr: clamp quantum in change class\n\ndrr_change_class() rejects explicit quantum==0 but falls back to\npsched_mtu() with no floor. With a crafted size table qdisc_pkt_len\nreaches ~2 GiB, so quantum=1 (or a zero psched_mtu on a headerless\ndevice) makes the deficit-refill loop spin under the qdisc lock.\n\nAdd clamp_t(u32, quantum, 256, 1\u003c\u003c20) after the zero reject and on the\nfallback path. The explicit-zero reject is preserved.\n\nConditions to recreate the bug:\n  CONFIG_NET_SCH_DRR=y. Requires CAP_NET_ADMIN (namespace-local via\n  unshare -Urn suffices).\n\n  tc qdisc add dev dummy0 root drr\n  tc class add dev dummy0 parent 1: classid 1:1 drr quantum 1",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98010",
          "url": "https://www.suse.com/security/cve/CVE-2026-98010"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283823 for CVE-2026-98010",
          "url": "https://bugzilla.suse.com/1283823"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98010"
    },
    {
      "cve": "CVE-2026-98015",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98015"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put\n\nIn mlx5_eswitch_termtbl_put(), the zero-ref cleanup check reads\ntt-\u003eref_count after termtbl_mutex has been released.  Two concurrent\ncallers on the same mlx5_termtbl_handle race: one decrements ref_count\nto zero, removes the hash entry, and calls kfree(tt) while the other\nhas already dropped the mutex and is about to evaluate\nif (!tt-\u003eref_count), producing a use-after-free.\n\nFix this by capturing the result of the decrement into a stack-local\nlast variable before dropping the mutex.  The cleanup decision is now\nmade entirely under termtbl_mutex, and tt is not touched after\nkfree.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98015",
          "url": "https://www.suse.com/security/cve/CVE-2026-98015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283963 for CVE-2026-98015",
          "url": "https://bugzilla.suse.com/1283963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283964 for CVE-2026-98015",
          "url": "https://bugzilla.suse.com/1283964"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98015"
    },
    {
      "cve": "CVE-2026-98016",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98016"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix use-after-free race in sample_restore_put()\n\nConcurrent teardown of TC sample rules sharing the same restore\ncontext may re-read restore-\u003ecount after dropping restore_lock.\nAt that point another thread may already have completed cleanup and\nfreed the restore object.\n\nUse the result of the refcount decrement while holding restore_lock to\ndetermine whether cleanup is needed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98016",
          "url": "https://www.suse.com/security/cve/CVE-2026-98016"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283894 for CVE-2026-98016",
          "url": "https://bugzilla.suse.com/1283894"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283895 for CVE-2026-98016",
          "url": "https://bugzilla.suse.com/1283895"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98016"
    },
    {
      "cve": "CVE-2026-98077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()\n\nsip_skip_whitespace() returns dptr unchanged when its own loop\nexhausts the buffer (dptr == limit), instead of NULL like its sibling\nsip_follow_continuation() returns on its own \"no more data\" path.\n\nct_sip_get_header() only checks for NULL after calling it:\n\n  dptr = sip_skip_whitespace(dptr, limit);\n  if (dptr == NULL)\n          break;\n  if (*dptr != \u0027:\u0027 || ++dptr \u003e= limit)\n          break;\n\nso a recognized header name followed only by spaces/tabs running to\nthe exact end of the SIP payload, with no colon, makes the very next\nstatement read one byte past the buffer.\n\nMake both \"no more data\" outcomes return NULL, matching the\nconvention sip_follow_continuation() already uses and that both\nexisting callers already check for.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98077",
          "url": "https://www.suse.com/security/cve/CVE-2026-98077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283979 for CVE-2026-98077",
          "url": "https://bugzilla.suse.com/1283979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98077"
    },
    {
      "cve": "CVE-2026-98089",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98089"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: alb: fix uninitialized transport header access in alb_determine_nd()\n\nalb_determine_nd() uses icmp6_hdr(skb) to inspect ICMPv6 headers.\nHowever, in xmit paths (e.g. packets sent via AF_PACKET / raw sockets\nor forwarded packets), skb-\u003etransport_header is not guaranteed to be\ninitialized. While pskb_network_may_pull() ensures the packet data is\nlinear starting from the network header, it does not set or adjust the\ntransport header offset.\n\nDereferencing icmp6_hdr(skb) can therefore access out-of-bounds memory.\n\nFetch the icmp6hdr directly after ipv6hdr following pskb_network_may_pull(),\nand reload ipv6hdr in case pskb_may_pull() reallocated skb-\u003ehead.\nAlso remove the unused bond argument from alb_determine_nd().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98089",
          "url": "https://www.suse.com/security/cve/CVE-2026-98089"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283936 for CVE-2026-98089",
          "url": "https://bugzilla.suse.com/1283936"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98089"
    },
    {
      "cve": "CVE-2026-98130",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98130"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix a TOCTOU race in SCTP_CMD_TIMER_START\n\nThe SCTP_CMD_TIMER_START handler checks timer_pending() before calling\ntimer_reduce(). The timer can expire and detach between these operations,\ncausing timer_reduce() to rearm the timer without taking the association\nreference required for the newly armed timer.\n\nThe timer callback later unconditionally drops its association reference,\nwhich can leave the association reference count unbalanced and result in\nuse-after-free during association teardown.\n\nUse the return value of timer_reduce() to determine whether the timer was\nactually armed. Take the association reference only when timer_reduce()\nsuccessfully starts a new timer, closing the race between checking the\ntimer state and rearming it.\n\nThis issue was reported by Nico Yip (@_cyeaa_) working with TrendAI Zero\nDay Initiative.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98130",
          "url": "https://www.suse.com/security/cve/CVE-2026-98130"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283835 for CVE-2026-98130",
          "url": "https://bugzilla.suse.com/1283835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285041 for CVE-2026-98130",
          "url": "https://bugzilla.suse.com/1285041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98130"
    },
    {
      "cve": "CVE-2026-98173",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98173"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix use-after-free of iface in cifs_try_adding_channels()\n\ncifs_try_adding_channels() iterates ses-\u003eiface_list with\nlist_for_each_entry_safe_from(), which captures the next entry\n(niface) under iface_lock.  The loop body then drops iface_lock for\nthe whole duration of cifs_ses_add_channel().\n\nA concurrent interface refresh (SMB3_request_interfaces() -\u003e\nparse_server_interfaces()) marks all ifaces inactive and removes and\nfrees any that are not re-advertised via list_del() + kref_put(),\nwhere release_iface() is a bare kfree().  Since niface typically has\nno channel holding a reference, the list reference is its last and it\ncan be freed inside the unlocked window.  On continue, the iterator\nadvance step then dereferences niface-\u003eiface_head.next, and the loop\nbody reads iface-\u003erdma_capable/is_active, both on freed memory.\n\nFix this by never keeping an unreferenced list pointer across the\nunlocked window.  Each channel attempt now re-scans the list from the\nhead under iface_lock, takes a kref on the selected candidate, and\npasses only that referenced candidate to cifs_ses_add_channel().\nweight_fulfilled still tracks selection progress, so restarting the\nscan preserves the original weighted distribution and the\nweight_fulfilled-before-kref_put ordering on the failure path.\n\nAdd a per-pass attempts cap so a flapping interface refresh cannot\nkeep the inner loop spinning within a single tries increment.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98173",
          "url": "https://www.suse.com/security/cve/CVE-2026-98173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284415 for CVE-2026-98173",
          "url": "https://bugzilla.suse.com/1284415"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284418 for CVE-2026-98173",
          "url": "https://bugzilla.suse.com/1284418"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98173"
    },
    {
      "cve": "CVE-2026-98216",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98216"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/hfi1: Fix the PIO_CRED credit-return mmap\n\nhfi1_file_mmap()\u0027s PIO_CRED case must hand user space the single\ncredit-return page that holds this context\u0027s entry.  That page is the\nsecond or third page of the per-node credit-return allocation once the\nhardware send context index reaches 64 or 128, so the failure below is\nintermittent: when the entry lands on the first page the offset is zero\nand everything works.\n\nTwo things are wrong.\n\nFirst, cr_page_offset is a byte offset but .va is a struct\ncredit_return *, so adding it is pointer arithmetic and scales the offset\nby sizeof(struct credit_return) == 64.  memvirt then lands 256 KiB or\n512 KiB past a 10240-byte allocation.  With an IOMMU translating, that\naddress is inside the vmalloc range but in no vm_area, so\ndma_mmap_coherent() -\u003e iommu_dma_mmap() finds no pages, vmalloc_to_pfn()\nreturns page_to_pfn(NULL), and remap_pfn_range() installs a frame above\nMAXPHYADDR.  The first user read then takes:\n\n  psm2_ep_open_pr: Corrupted page table at address 7a14d007e000\n  PGD 800000013886a067 P4D 800000013886a067 PUD 13886b067 PMD 13886c067\n                                            PTE 800049168e911235\n  Oops: Bad pagetable: 000d [#1] SMP PTI\n\nSecond, and still wrong once the arithmetic is corrected,\ndma_mmap_coherent() describes a whole coherent buffer and selects the\npage within it with vma-\u003evm_pgoff.  Offsetting cpu_addr has no effect:\nfor a vmap\u0027d allocation iommu_dma_mmap() uses cpu_addr only to locate the\nvm_area and then maps pages[vm_pgoff], which hfi1_file_mmap() has just\nset to 0.  User space therefore always receives the first credit-return\npage, every credit read is for the wrong context, and send PIO stalls\nforever.\n\nUse the DMA API as intended: pass the base of the allocation with its\nfull length and select the page with vm_pgoff.  A separate length is\nneeded because memlen must keep describing the VMA for the existing size\ncheck.  The dma-direct path stays correct as well, since dma_direct_mmap()\nadds the same vm_pgoff to the base pfn.\n\nTested on a Dell T7610 (Xeon E5-2650 v2, Intel IOMMU in DMA-FQ mode)\nagainst a Threadripper PRO 3995WX peer, both Omni-Path 100.  Before this\nchange psm2_ep_open() Oopses the kernel; with only the arithmetic\ncorrected psm2_ep_open() succeeds but any transfer that uses send PIO\nhangs, PSM2_SDMA=2 (send PIO disabled) completing normally while\nPSM2_SDMA=0 (send PIO only) hangs every time.  With this change send PIO,\nsend DMA and the default mixed mode all work.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98216",
          "url": "https://www.suse.com/security/cve/CVE-2026-98216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284559 for CVE-2026-98216",
          "url": "https://bugzilla.suse.com/1284559"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98216"
    },
    {
      "cve": "CVE-2026-98248",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98248"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: percpu: Fix LSE operations on {8,16}-bit types\n\nThe assembly for __percpu_##name##_case_##sz() and\n__percpu_##name##_return_case_##sz() doesn\u0027t use the \u0027sfx\u0027 macro\nargument to form the LSE instruction. Without \u0027sfx\u0027, a W register\nargument will imply a 32-bit memory location, and consequently\n{8,16}-bit ops will erroneously read and write 32 bits of memory when\nthe LSE instruction is used.\n\nFix this by appending \u0027sfx\u0027 to \u0027op_lse\u0027 to LSE instruction. It is not\nnecessary (and not valid) to append \u0027sfx\u0027 to \u0027op_llsc\u0027, as \u0027op_llsc\u0027 is\na register-register operation which does not access memory (and does not\ntake a size suffix).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98248",
          "url": "https://www.suse.com/security/cve/CVE-2026-98248"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284518 for CVE-2026-98248",
          "url": "https://bugzilla.suse.com/1284518"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284519 for CVE-2026-98248",
          "url": "https://bugzilla.suse.com/1284519"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98248"
    },
    {
      "cve": "CVE-2026-98252",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98252"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: fix refcount bug in iwpm_get_nlmsg_request()\n\niwpm_get_nlmsg_request() initializes refcount _after_ list_add_tail()\nmaking it accessible to global list where another CPU can kref_get()\non nlmsg_request causing a refcount \"addition on 0\" bug. Fix this\nby initializing kref _before_ list_add_tail() so refcount for\nnlmsg_request can be incremented/decremented normally. In addition,\nalso initialize every field before list_add_tail().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98252",
          "url": "https://www.suse.com/security/cve/CVE-2026-98252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284581 for CVE-2026-98252",
          "url": "https://bugzilla.suse.com/1284581"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98252"
    },
    {
      "cve": "CVE-2026-98253",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98253"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/ucma: Serialize join and leave on copy_to_user failure\n\nrdma_join_multicast() queues RoCE work that later reads the ucma_multicast\nthrough event-\u003eparam.ud.private_data, then list_add()s the CMA multicast\nat the head of id_priv-\u003emc_list. rdma_leave_multicast() matches only by\nsockaddr and destroys the first hit.\n\nucma_process_join() used to drop ctx-\u003emutex after a successful join and\nretake it only if copy_to_user() failed. Two concurrent JOIN_MCAST calls\nwith the same address can therefore insert a second CMA entry before the\nfirst thread\u0027s leave. leave then cancels the newer work and the older\nworker still dereferences the ucma_multicast that the first thread frees.\n\nKeep ctx-\u003emutex held from rdma_join_multicast() through copy_to_user() and,\non -EFAULT, through rdma_leave_multicast() so leave cannot miss this join.\nDo not leave if join itself failed: that path never published this address\non mc_list, and a leave-by-addr would destroy an earlier successful join.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98253",
          "url": "https://www.suse.com/security/cve/CVE-2026-98253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284790 for CVE-2026-98253",
          "url": "https://bugzilla.suse.com/1284790"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284793 for CVE-2026-98253",
          "url": "https://bugzilla.suse.com/1284793"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98253"
    },
    {
      "cve": "CVE-2026-98260",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98260"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nexec: Cleanup POSIX timers right after de_thread()\n\nA per-thread CPU timer holds a reference to the PID of the thread it is\nattached to and, while it is armed, its node is queued in that thread\u0027s\nposix_cputimers. The task is looked up by that PID.\n\nWhen a non-leader thread exec()s, de_thread() changes which task owns\nthat PID. pid_task(timer-\u003eit.cpu.pid, PIDTYPE_PID) then returns NULL,\nbut the node is still queued on tsk, which is alive. timer_lock_sighand()\ntakes a failed lookup to mean that the node is already dequeued, so it\nhas nothing to undo.\n\nbegin_new_exec() calls posix_cpu_timers_exit(me) right after\nexec_task_namespaces() and that removes the leftover node, so the state\nnormally stays invisible. But bprm-\u003epoint_of_no_return is set before\nde_thread(), so if unshare_files(), set_mm_exe_file(), exec_mmap() or\nexec_task_namespaces() fails, the task dies before it gets there.\nexit_itimers() then frees the k_itimer while its node is still queued,\nand reaping tsk later erases that freed node from the rbtree.\n\nIn short:\n\n      the non-leader thread B           the parent\n\n  timer_create(CLOCK_THREAD_CPUTIME_ID)\n  timer_settime()\n    arm_timer()            // the node is queued on B\n  execve()\n    de_thread(B)\n      exchange_tids(B, leader)  // B\u0027s PID now belongs to the leader\n      release_task(leader)\n        __exit_signal(leader)\n          posix_cpu_timers_exit(leader)  // cleans leader\u0027s queue, not B\u0027s\n          __unhash_process(leader)  // that PID has no task anymore\n    exec_mmap()\n      mmap_read_lock_killable(old_mm)\n                                kill(B, SIGKILL)\n      // -EINTR\n  get_signal()\n    do_exit()\n      exit_itimers()\n        posix_timer_delete()\n          posix_cpu_timer_del()\n        posix_timer_unhash_and_free()  // freed while still queued\n                                wait4()\n                                  release_task(B)\n                                    posix_cpu_timers_exit(B)\n                                      cleanup_timerqueue()\n                                        timerqueue_del()  // use-after-free\n\nMove the POSIX timer cleanup right after de_thread() before any of the\nlater failure conditions brings the task into do_exit().\n\n[ tglx: Move the cleanup right after de_thread() ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98260",
          "url": "https://www.suse.com/security/cve/CVE-2026-98260"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284408 for CVE-2026-98260",
          "url": "https://bugzilla.suse.com/1284408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285052 for CVE-2026-98260",
          "url": "https://bugzilla.suse.com/1285052"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1286032 for CVE-2026-98260",
          "url": "https://bugzilla.suse.com/1286032"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98260"
    },
    {
      "cve": "CVE-2026-98269",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98269"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: abort transaction on failure to update inode for hole punching and reflinking\n\nIf we fail to update the inode we error out without aborting the\ntransaction, which can result in a persistent inconsistency if after\nthe failure the transaction is committed, as we have dropped file\nextent items from a range and either punched a hole or insert a new file\nextent item for that range (for reflinks).\n\nSo add the missing transaction abort.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98269",
          "url": "https://www.suse.com/security/cve/CVE-2026-98269"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284606 for CVE-2026-98269",
          "url": "https://bugzilla.suse.com/1284606"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-98269"
    },
    {
      "cve": "CVE-2026-98273",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98273"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kprobes: Fix crash when probing CS CALL instructions\n\nWhen using eBPF to probe CS CALL instructions within a function,\na crash can be triggered.\n\nThe eBPF tool probes offset 257 of the __hrtimer_run_queues()\nfunction:\n\n\u003c__hrtimer_run_queues+249\u003e:  nopl   0x0(%rax,%rax,1)\n\u003c__hrtimer_run_queues+254\u003e:  mov    %r14,%rdi\n\u003c__hrtimer_run_queues+257\u003e:  cs call \u003c__x86_indirect_thunk_r12\u003e\n\u003c__hrtimer_run_queues+263\u003e:  mov    %eax,%r12d\n\u003c__hrtimer_run_queues+266\u003e:  xchg   %ax,%ax\n\u003c__hrtimer_run_queues+268\u003e:  mov    %r13,%rdi\n\nWhich triggers this crash:\n\n  BUG: unable to handle page fault for address: 00000000000f41c9\n  #PF: supervisor write access in kernel mode\n  #PF: error_code(0x0002) - not-present page\n  PGD 0 P4D 0\n  Oops: 0002 [#1] SMP NOPTI\n  CPU: 1 PID: 0 Comm: swapper/1 Kdump: loaded Tainted: P\n  RIP: 0010:__hrtimer_run_queues+0x106/0x230\n\nNote that __hrtimer_run_queues+0x106 is __hrtimer_run_queues+262, which is\nat the 6th byte of the above CS CALL instruction. Since the CS CALL\ninstruction occupies 6 bytes, the exception occurred in the middle of that\ncall instruction.\n\nThe root cause is that when using eBPF tools to probe in the middle of a\nfunction, a kprobe with INT3 is used as the underlying implementation.\n\nDuring single-step emulation of the original CALL instruction,\nint3_emulate_call() assumes that the probed CALL instruction is 5 bytes\nlong. However, the actual CS-prefixed CALL instruction occupies 6 bytes,\nso it constructs an incorrect exception return address. When the CPU\nreturns from the kprobe handler, the next instruction to be executed is at\nthe address of the last byte of that CS CALL instruction. Coincidentally,\nstarting from that address, the CPU fetches and decodes a completely\ndifferent instruction, which ultimately triggers a kernel crash.\n\nFix the issue by using the actual instruction length obtained from\nthe instruction decoder when constructing the exception return\naddress, rather than relying on the hardcoded CALL_INSN_SIZE macro.\n\n[ mingo: Refined the changelog ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98273",
          "url": "https://www.suse.com/security/cve/CVE-2026-98273"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284462 for CVE-2026-98273",
          "url": "https://bugzilla.suse.com/1284462"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98273"
    },
    {
      "cve": "CVE-2026-98323",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98323"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Bound fragmented header copies by the remaining length\n\nsiw_get_hdr() can receive an extended DDP/RDMAP header across more than\none TCP callback. The first callback may receive most of the header,\nwhile the next one still limits the copy to hdrlen - MIN_DDP_HDR instead\nof the number of missing bytes. This makes the destination move past the\nend of the header and overwrite the receive state, including\nfpdu_part_rcvd. A later callback can then use a negative fpdu_part_rcvd\nvalue as a copy offset, which creates an OOB write.\n\nUse the number of header bytes already received when calculating the\nnext copy length.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98323",
          "url": "https://www.suse.com/security/cve/CVE-2026-98323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284713 for CVE-2026-98323",
          "url": "https://bugzilla.suse.com/1284713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284714 for CVE-2026-98323",
          "url": "https://bugzilla.suse.com/1284714"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98323"
    },
    {
      "cve": "CVE-2026-98347",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98347"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/IPoIB: Avoid restoring OPER_UP after multicast flush\n\nipoib_ib_dev_flush_light() temporarily clears IPOIB_FLAG_OPER_UP to\nprevent multicast joins while ipoib_mcast_dev_flush() is running, and\nrestores the flag afterwards if it was previously set.\n\nThis restore races with ipoib_ib_dev_down(). If the interface is brought\ndown while the flush is in progress, ipoib_ib_dev_down() clears\nIPOIB_FLAG_OPER_UP, but the flush path may set it again after the device\nhas already gone down.\n\nSince commit 894021a75291 (\"IB/ipoib: Make the carrier_on_task race\naware\"), ipoib_mcast_carrier_on_task() relies on IPOIB_FLAG_OPER_UP\nbeing cleared to terminate its rtnl_trylock() retry loop. If the flag is\nleft set after shutdown, the workqueue retries forever, causing teardown\nto deadlock when ipoib_ndo_uninit() waits in destroy_workqueue() while\nholding RTNL.\n\nInstead of overloading IPOIB_FLAG_OPER_UP to block multicast joins\nduring a light flush, introduce a dedicated IPOIB_FLAG_MCAST_FLUSH flag.\nUse it together with IPOIB_FLAG_OPER_UP to determine whether multicast\njoins are allowed, avoiding the race with device shutdown.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98347",
          "url": "https://www.suse.com/security/cve/CVE-2026-98347"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284295 for CVE-2026-98347",
          "url": "https://bugzilla.suse.com/1284295"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98347"
    },
    {
      "cve": "CVE-2026-98352",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98352"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted\n\nThe client borrows shared CQ credits in the ADDR_RESOLVED handler via\nib_cq_pool_get(), before the peer is connected. create_cm() can return\n-ERESTARTSYS from wait_event_interruptible_timeout() without destroying\nthe CM ID. The init_conns() and stop-and-destroy paths then call\ndestroy_con_cq_qp() while cq is still NULL (no PUT) and only afterwards\nrdma_destroy_id().\n\nCMA serializes the handler against rdma_destroy_id() with handler_mutex,\nbut that does not order the GET against destroy_con_cq_qp(). If\nADDR_RESOLVED has already passed the DESTROYING check, it can take\ncon_mutex, GET credits, and then lose the con to kfree. Device\nunregister later hits WARN_ON(cq-\u003ecqe_used) in ib_cq_pool_cleanup().\n\nSet a per-connection flag under con_mutex before CQ/QP teardown so a\nracing ADDR_RESOLVED cannot borrow credits after teardown has begun.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98352",
          "url": "https://www.suse.com/security/cve/CVE-2026-98352"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284647 for CVE-2026-98352",
          "url": "https://bugzilla.suse.com/1284647"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 1.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-98352"
    },
    {
      "cve": "CVE-2026-98354",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98354"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mad: Fix receive buffer leak when PKey enforcement fails\n\nib_mad_complete_recv() initializes mad_recv_wc-\u003ermpp_list and then runs\nib_mad_enforce_security() before linking recv_buf onto that list.  On\nfailure it calls ib_free_recv_mad(), which only walks rmpp_list and frees\nthe ib_mad_private of every buffer found there.  As the list is still\nempty at that point, nothing is freed at all.\n\nThe caller cannot clean up either: ib_mad_recv_done() sets recv to NULL\nright after ib_mad_complete_recv() returns, assuming the MAD layer took\nownership of the buffer.  Every MAD that fails the PKey check therefore\nleaks one ib_mad_private (about 300 bytes per IB port MAD, ~2K for OPA),\nand a remote node can trigger this repeatedly by sending MADs with a\nwrong PKey.\n\nLink recv_buf onto rmpp_list right after the list is initialized, so the\nerror path has something to free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98354",
          "url": "https://www.suse.com/security/cve/CVE-2026-98354"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284291 for CVE-2026-98354",
          "url": "https://bugzilla.suse.com/1284291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98354"
    },
    {
      "cve": "CVE-2026-98357",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98357"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/isert: wait for deferred control PDU completions before releasing the connection\n\nisert_send_done() hands ISTATE_SEND_TASKMGTRSP, ISTATE_SEND_REJECT and\nISTATE_SEND_TEXTRSP completions off to isert_comp_wq and returns.  The work\nitem then runs isert_completion_put() -\u003e isert_put_cmd(), which reads\nisert_conn-\u003econn and takes conn-\u003ecmd_lock.\n\nNothing orders that work item against teardown.  isert_wait_conn() queues\nisert_release_work, which frees isert_conn, and iscsit_close_connection()\nfrees the iscsit_conn right after it returns, so the queued work can run\nagainst freed memory.\n\nCount the deferred control PDU completions per connection and let\nisert_wait_conn() wait for them before the release work is queued.\n\nISTATE_SEND_LOGOUTRSP is deliberately not counted: that branch runs\niscsit_logout_post_handler(), which ends up waiting for\nconn-\u003econn_wait_comp, and that completion is only sent by\niscsit_close_connection() after it has called iscsit_wait_conn().\nWaiting for it here would deadlock.  Its wait stays the existing\nisert_wait4logout().\n\nThe splat below is from a kernel with tracing printk()s and an msleep(200)\ninjected into isert_do_control_comp() to widen the window:\n\n  BUG: KASAN: slab-use-after-free in isert_put_cmd+0x53d/0x620\n  Read of size 8 at addr ffff8881054f1038 by task kworker/u17:1/182\n\n  CPU: 0 UID: 0 PID: 182 Comm: kworker/u17:1 Tainted: G    B               7.2.0-rc5-TWIDE-gb8babf08acc7 #1 PREEMPT(lazy)\n  Tainted: [B]=BAD_PAGE\n  Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n  Workqueue: isert_comp_wq isert_do_control_comp\n  Call Trace:\n   \u003cTASK\u003e\n   dump_stack_lvl+0x53/0x70\n   print_report+0xd0/0x630\n   ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n   ? _raw_spin_unlock_irqrestore+0x3e/0x70\n   ? isert_put_cmd+0x53d/0x620\n   kasan_report+0xce/0x100\n   ? isert_put_cmd+0x53d/0x620\n   isert_put_cmd+0x53d/0x620\n   ? isert_completion_put+0x305/0x330\n   ? isert_do_control_comp+0x2ef/0x310\n   process_one_work+0x633/0x1030\n   ? assign_work+0x11d/0x370\n   worker_thread+0x45b/0xd10\n   ? __pfx_worker_thread+0x10/0x10\n   ? __pfx_worker_thread+0x10/0x10\n   kthread+0x2c6/0x3b0\n   ? recalc_sigpending+0x15c/0x1e0\n   ? __pfx_kthread+0x10/0x10\n   ret_from_fork+0x36e/0x5a0\n   ? __pfx_ret_from_fork+0x10/0x10\n   ? __switch_to+0x572/0xdd0\n   ? __pfx_kthread+0x10/0x10\n   ret_from_fork_asm+0x1a/0x30\n   \u003c/TASK\u003e\n\n  Allocated by task 48:\n   kasan_save_stack+0x33/0x60\n   kasan_save_track+0x14/0x30\n   __kasan_kmalloc+0x8f/0xa0\n   __kmalloc_cache_noprof+0x158/0x370\n   isert_cma_handler+0x1e3/0x2ae0\n   cma_cm_event_handler+0x3e/0x240\n   cma_ib_req_handler+0x17d9/0x4490\n   cm_process_work+0x41/0x330\n   cm_work_handler+0x5727/0xc160\n   process_one_work+0x633/0x1030\n   worker_thread+0x45b/0xd10\n   kthread+0x2c6/0x3b0\n   ret_from_fork+0x36e/0x5a0\n   ret_from_fork_asm+0x1a/0x30\n\n  Freed by task 184:\n   kasan_save_stack+0x33/0x60\n   kasan_save_track+0x14/0x30\n   kasan_save_free_info+0x3b/0x60\n   __kasan_slab_free+0x43/0x70\n   kfree+0x121/0x380\n   iscsit_close_connection+0x7cf/0x1e60\n   iscsit_take_action_for_connection_exit+0x1b6/0x360\n   iscsi_target_tx_thread+0x472/0x690\n   kthread+0x2c6/0x3b0\n   ret_from_fork+0x36e/0x5a0\n   ret_from_fork_asm+0x1a/0x30",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98357",
          "url": "https://www.suse.com/security/cve/CVE-2026-98357"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284791 for CVE-2026-98357",
          "url": "https://bugzilla.suse.com/1284791"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284794 for CVE-2026-98357",
          "url": "https://bugzilla.suse.com/1284794"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98357"
    },
    {
      "cve": "CVE-2026-98358",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98358"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/iser: reject a remote invalidation of an unregistered direction\n\nA write command whose data is sent entirely as immediate data is not\nregistered.  iser_reg_mem_fastreg() takes the DMA key path and leaves\nrdma_reg[ISER_DIR_OUT].desc at NULL, while iser_dma_map_task_data() has\nalready set dir[ISER_DIR_OUT].\n\niser_check_remote_inv() looks at dir[] alone and hands the descriptor to\niser_inv_desc(), which reads desc-\u003esig_protected.  A target that answers\nsuch a command with IB_WR_SEND_WITH_INV faults the initiator.\nLeaving those commands unregistered is deliberate.\n\nThe same function already terminates the connection when a target sends\na remote invalidation the initiator did not ask for.  A target that\ninvalidates a direction that was never registered is in the same class,\nso give it the same answer.\n\n  Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI\n  KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]\n  CPU: 0 UID: 0 PID: 40 Comm: kworker/u8:2 Not tainted 7.2.0-rc5-ISERHOST-gf5098b6bae76-dirty #3 PREEMPT(lazy)\n  Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n  Workqueue: rxe_wq do_work\n  RIP: 0010:iser_task_rsp+0x6d6/0xec0\n  Code: 48 c1 ea 03 80 3c 02 00 0f 85 ba 06 00 00 48 8b 9b 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 20 48 89 fa 48 c1 ea 03 \u003c0f\u003e b6 04 02 84 c0 74 06 0f 8e 76 06 00 00 80 7b 20 00 0f 84 3d 04\n  RSP: 0018:ffff88811b008db8 EFLAGS: 00010202\n  RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000001848\n  RDX: 0000000000000004 RSI: 1ffff11021587b12 RDI: 0000000000000020\n  RBP: ffff88810adc1ae4 R08: ffff888109b7f860 R09: ffffffff90a922c0\n  R10: ffff88810adc1a1c R11: 000000000000003c R12: ffff888109b7f800\n  R13: ffff88810adc1acc R14: ffff888109b7f820 R15: 0000000000000000\n  FS:  0000000000000000(0000) GS:ffff88818a676000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  CR2: 00000000005afe2b CR3: 000000010af23005 CR4: 0000000000770ef0\n  PKRU: 55555554\n  Call Trace:\n   \u003cIRQ\u003e\n   __ib_process_cq+0xe1/0x390\n   ib_poll_handler+0x6e/0x200\n   irq_poll_softirq+0x1df/0x480\n   ? clockevents_program_event+0x2ba/0x860\n   ? __pfx_irq_poll_softirq+0x10/0x10\n   handle_softirqs+0x18e/0x590\n   ? __pfx_handle_softirqs+0x10/0x10\n   ? __hrtimer_rearm_deferred+0x156/0x450\n   do_softirq+0x3b/0x60\n   \u003c/IRQ\u003e\n   \u003cTASK\u003e\n   __local_bh_enable_ip+0x61/0x70\n   __alloc_skb+0x732/0x890\n   ? _raw_spin_lock_irqsave+0x85/0xe0\n   ? __pfx___alloc_skb+0x10/0x10\n   ? _raw_read_unlock_irqrestore+0x16/0x50\n   rxe_init_packet+0x16b/0x4f0\n   prepare_ack_packet+0xb8/0x830\n   rxe_receiver+0x499/0x9980\n   ? __pfx_rxe_receiver+0x10/0x10\n   ? rxe_completer+0x29e5/0x38c0\n   ? hrtimer_start_range_ns_common+0x75f/0x1730\n   ? hrtimer_start_range_ns+0xa6/0x2c0\n   ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n   ? __pfx_rxe_receiver+0x10/0x10\n   do_work+0x144/0x470\n   process_one_work+0x633/0x1030\n   ? assign_work+0x11d/0x370\n   worker_thread+0x45b/0xd10\n   ? __pfx_worker_thread+0x10/0x10\n   kthread+0x2c6/0x3b0\n   ? recalc_sigpending+0x15c/0x1e0\n   ? __pfx_kthread+0x10/0x10\n   ret_from_fork+0x36e/0x5a0\n   ? __pfx_ret_from_fork+0x10/0x10\n   ? __switch_to+0x572/0xdd0\n   ? __pfx_kthread+0x10/0x10\n   ret_from_fork_asm+0x1a/0x30\n   \u003c/TASK\u003e\n  Modules linked in:\n  ---[ end trace 0000000000000000 ]---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98358",
          "url": "https://www.suse.com/security/cve/CVE-2026-98358"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284289 for CVE-2026-98358",
          "url": "https://bugzilla.suse.com/1284289"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98358"
    },
    {
      "cve": "CVE-2026-98359",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98359"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: Reject unregistering netdevs in ib_get_eth_speed\n\nib_device_get_netdev() intentionally returns a referenced net_device even\nwhen it is unregistering, so matching and cleanup callers can still find\nthe association. The reference keeps struct net_device allocated, but does\nnot guarantee that the device remains operational.\n\nib_get_eth_speed() uses the returned device operationally by invoking its\nethtool callback. Although that call is made under RTNL, the function does\nnot verify the registration state first. An asynchronous RDMA port query\ncan therefore call into a netdev after NETDEV_UNREGISTER and ndo_uninit\nhave completed.\n\nCheck for NETREG_REGISTERED while holding RTNL and return -ENODEV for a\ndevice which is being unregistered. Keeping RTNL across the check and the\nethtool operation prevents unregister from starting between them.\n\nKeep the speed fallback and warning under RTNL as well, so the warning can\nsafely read netdev-\u003ename. Drop the netdev reference before releasing RTNL\nonce all accesses to the device are complete.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98359",
          "url": "https://www.suse.com/security/cve/CVE-2026-98359"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284746 for CVE-2026-98359",
          "url": "https://bugzilla.suse.com/1284746"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284747 for CVE-2026-98359",
          "url": "https://bugzilla.suse.com/1284747"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98359"
    },
    {
      "cve": "CVE-2026-98360",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98360"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds\n\nrxe_get_mcg() publishes a newly allocated multicast group in\nrxe-\u003emcg_tree before programming the backing Ethernet multicast address\nwith rxe_mcast_add(), which runs outside mcg_lock. A local userspace\nRDMA client reaches this path with ATTACH_MCAST on a UD QP; if\nrxe_mcast_add() then returns an error (for example -ENODEV when the\nbacking netdev has been removed, or a propagated dev_mc_add() error),\nthe unwind frees the published group without removing it from the tree.\nA later lookup of the same MGID dereferences the freed struct rxe_mcg\nfrom __rxe_lookup_mcg().\n\nFix this by keeping the new mcg private until rxe_mcast_add() succeeds.\nSplit the tree publication into __rxe_publish_mcg(), call rxe_mcast_add()\nbefore taking the tree reference, and free the still-private mcg on\nfailure. Because the group is never visible in mcg_tree until the\nmulticast address is programmed, no concurrent caller can look it up or\nattach a QP to a group that is about to be torn down, so the error path\nneeds no conditional unwind. If another caller publishes the same MGID\nwhile the address is being programmed, the post-add re-check under\nmcg_lock finds the winner; this caller then drops its private object and\nbalances its own rxe_mcast_add() with rxe_mcast_del() before returning\nthe winner.\n\nReproduced by forcing the rxe_mcast_add() error return under KASAN:\nwithout the change the next attach to the same MGID reports a\nslab-use-after-free in __rxe_lookup_mcg(); with it the forced failure\nreturns cleanly. A no-injection attach/detach regression, including a\ntwo-QP shared join/leave and re-attach, stays KASAN- and leak-clean.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98360",
          "url": "https://www.suse.com/security/cve/CVE-2026-98360"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284649 for CVE-2026-98360",
          "url": "https://bugzilla.suse.com/1284649"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98360"
    },
    {
      "cve": "CVE-2026-98365",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98365"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access\n\nmr_check_range() validates that [iova, iova+length) falls within the\nregistered MR range using wraparound-prone arithmetic:\n\n    if (iova \u003c mr-\u003eibmr.iova ||\n        iova + length \u003e mr-\u003eibmr.iova + mr-\u003eibmr.length)\n\nA remote peer can craft an RDMA-Write/Read RETH so that iova + length\nwraps to 0 (e.g. iova=0xfffffffffffffff8, length=8), bypassing the\ncheck. rxe_mr_iova_to_index() then computes a huge index (int idx, only\nguarded by WARN_ON) and rxe_mr_copy_xarray() dereferences\nmr-\u003epage_info[huge], causing an out-of-bounds read/write and a kernel\noops that is triggerable by an unauthenticated remote peer.\n\nRewrite the check in overflow-safe form; the first two clauses guarantee\nthat the subsequent subtractions do not underflow:\n\n    if (iova \u003c mr-\u003eibmr.iova ||\n        length \u003e mr-\u003eibmr.length ||\n        iova - mr-\u003eibmr.iova \u003e mr-\u003eibmr.length - length)\n\nWith the fix, mr_check_range() returns -EINVAL for the crafted iova and\nthe responder reports REMOTE_ACCESS_ERROR instead of triggering the OOB.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98365",
          "url": "https://www.suse.com/security/cve/CVE-2026-98365"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284288 for CVE-2026-98365",
          "url": "https://bugzilla.suse.com/1284288"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98365"
    },
    {
      "cve": "CVE-2026-98366",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98366"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: validate access flags before swapping the MR\u0027s PD\n\nrxe_rereg_user_mr() reassigns mr-\u003eibmr.pd first and only then\nvalidates the IB_MR_REREG_ACCESS argument:\n\n\tif (flags \u0026 IB_MR_REREG_PD) {\n\t\trxe_put(old_pd);\n\t\trxe_get(pd);\n\t\tmr-\u003eibmr.pd = ibpd;\n\t}\n\n\tif (flags \u0026 IB_MR_REREG_ACCESS) {\n\t\tif (access \u0026 ~RXE_ACCESS_SUPPORTED_MR)\n\t\t\treturn ERR_PTR(-EOPNOTSUPP);\n\t\tmr-\u003eaccess = access;\n\t}\n\nBoth flags pass the entry check because RXE_MR_REREG_SUPPORTED is\nIB_MR_REREG_PD | IB_MR_REREG_ACCESS, so a caller can reach the access\ncheck with mr-\u003eibmr.pd already reassigned.\n\nmr-\u003eibmr.pd is owned by the core, which adjusts pd-\u003eusecnt only on the\nsuccess path: ib_uverbs_rereg_mr() jumps to put_new_uobj on a driver error\nwithout undoing the reassignment, so mr-\u003epd == new_pd while the usecnts\nstill charge the MR to orig_pd. ib_dereg_mr_user() then decrements\nnew_pd, whose count can reach zero while a memory window still references\nit; uverbs_free_pd() frees the PD on that count alone and rxe_mw_cleanup()\nwrites to freed memory:\n\n  BUG: KASAN: slab-use-after-free in __rxe_put+0x31/0xa0\n  Write of size 4 at addr ffff8881301dd690 by task rxe_poc/591\n   __rxe_put+0x31/0xa0\n   rxe_mw_cleanup+0x42/0x200\n   __rxe_cleanup+0x115/0x370\n   rxe_dealloc_mw+0x4c/0x80\n  Allocated by task 591:\n   ib_uverbs_alloc_pd+0x258/0x540\n  Freed by task 591:\n   ib_dealloc_pd_user+0x174/0x210\n   uverbs_free_pd+0x8d/0xc0\n   ib_uverbs_dealloc_pd+0x18e/0x1d0\n\nValidate the access flags before mutating any state so the callback either\napplies every requested change or none.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98366",
          "url": "https://www.suse.com/security/cve/CVE-2026-98366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284655 for CVE-2026-98366",
          "url": "https://bugzilla.suse.com/1284655"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98366"
    },
    {
      "cve": "CVE-2026-98367",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98367"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept\n\nWe need to clear cep before release state_lock as siw_qp_llp_close and\nsiw_qp_modify-\u003esiw_qp_llp_close did.\n\nOtherwise if siw_qp_modify() fails in siw_accept(), the QP\u0027s state_lock\nis released before the error path cleanup. A concurrent ibv_modify_qp()\ntransitioning the QP to ERROR can race in this window:\n\n  siw_accept()                       ibv_modify_qp(ERROR)\n  ----------------------             ----------------------\n  siw_qp_modify() fails\n  up_write(\u0026qp-\u003estate_lock)\n                                     down_write(\u0026qp-\u003estate_lock)\n                                     nextstate_from_idle():\n\t\t\t\t     if (qp-\u003ecep)\n                                       siw_cep_put(qp-\u003ecep) \u003c- frees cep\n                                       qp-\u003ecep = NULL\n  goto error\n    cep-\u003eqp = NULL                   \u003c- UAF\n\nClear qp-\u003ecep and drop the association reference taken by siw_cep_get(),\nall under the write lock held from the initial down_write(\u0026qp-\u003estate_lock).\nThread B therefore sees qp-\u003ecep == NULL, skips its own put, and cannot free\nthe cep before siw_accept() is done with it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98367",
          "url": "https://www.suse.com/security/cve/CVE-2026-98367"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284424 for CVE-2026-98367",
          "url": "https://bugzilla.suse.com/1284424"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98367"
    },
    {
      "cve": "CVE-2026-99999",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-99999"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: validate checksum_start before completing checksum\n\nIf a packet with bad checksum metadata gets into the ipv4 stack,\nskb_checksum_help can corrupt the network header and cause a bunch of\nmischief.\n\nThis was discovered and reported by Paulos, and has been reporoduced\nby others independently since.\n\nWe really shouldn\u0027t allow such packets in, but as a defence\nin depth measure, let\u0027s also check before we complete the checksum.\n\nA more complete validation at input is forthcoming, but needs more work.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
          "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-99999",
          "url": "https://www.suse.com/security/cve/CVE-2026-99999"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285684 for CVE-2026-99999",
          "url": "https://bugzilla.suse.com/1285684"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285687 for CVE-2026-99999",
          "url": "https://bugzilla.suse.com/1285687"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1286031 for CVE-2026-99999",
          "url": "https://bugzilla.suse.com/1286031"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-base-0:6.4.0-159998.54.1.159998.21.40.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-0:6.4.0-159998.54.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-0:6.4.0-159998.54.1.noarch",
            "SUSE Linux Micro 6.0:kernel-source-0:6.4.0-159998.54.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-21T12:21:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-99999"
    }
  ]
}