{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).\n- CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).\n- CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).\n- CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).\n- CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).\n- CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).\n- CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).\n- CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).\n- CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).\n- CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).\n- CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).\n- CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).\n- CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).\n- CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).\n- CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).\n- CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).\n- CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).\n- CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).\n- CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).\n- CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).\n- CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).\n- CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region\u0027s RMID to free list (bsc#1276791).\n- CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).\n- CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).\n- CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).\n- CVE-2026-72110: bpf,fork: wipe -\u003ebpf_storage before bailouts that access it (bsc#1277357).\n- CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).\n- CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).\n- CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).\n- CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).\n- CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).\n- CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).\n- CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).\n- CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).\n- CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).\n- CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).\n- CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).\n- CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).\n- CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).\n- CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).\n- CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).\n- CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).\n- CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).\n- CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564).\n- CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).\n- CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).\n- CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).\n- CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).\n- CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).\n- CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890).\n- CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).\n- CVE-2026-80579: fbdev: clear fb_info-\u003emode before deleting a videomode (bsc#1277260).\n- CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706).\n- CVE-2026-80977: net: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error() (bsc#1280259).\n- CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).\n- CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552).\n- CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950).\n- CVE-2026-89754: mm/pagewalk: fix stale walk-\u003eaction escaping walk_pmd_range() (bsc#1280769).\n- CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770).\n- CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).\n- CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144).\n- CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).\n- CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).\n- CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).\n- CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726).\n- CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274).\n- CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162).\n- CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742).\n- CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784).\n- CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869).\n- CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932).\n- CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769).\n- CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037).\n- CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768).\n- CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770).\n- CVE-2026-97491: net/rds: Don\u0027t sleep inside rds_ib_conn_path_shutdown (bsc#1283142).\n- CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454).\n- CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850).\n- CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).\n- CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853).\n- CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855).\n- CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856).\n- CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858).\n- CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862).\n- CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877).\n- CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).\n- CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153).\n- CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158).\n- CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144).\n- CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823).\n- CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).\n- CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).\n- CVE-2026-98041: bpf: Don\u0027t predict JMP32 pointer vs zero comparisons (bsc#1284064).\n- CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979).\n- CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936).\n- CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812).\n- CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859).\n- CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873).\n- CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).\n- CVE-2026-98167: smb: client: fix server-\u003etotal_read for compound encrypted PDUs (bsc#1284422).\n- CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298).\n- CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310).\n- CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419).\n- CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415).\n- CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412).\n- CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312).\n- CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559).\n- CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581).\n- CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).\n- CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).\n- CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605).\n- CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606).\n- CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462).\n- CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).\n- CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295).\n- CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647).\n- CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291).\n- CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).\n- CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289).\n- CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).\n- CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649).\n- CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288).\n- CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR\u0027s PD (bsc#1284655).\n- CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424).\n- CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).\n- CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).\n\nThe following non security issues were fixed:\n\n- ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git-fixes).\n- arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes).\n- arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes).\n- arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64.\n- arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64.\n- arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64.\n- arm64: irq: exclude the softirq stack switch from KCOV (git-fixes).\n- ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes).\n- ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git-fixes).\n- ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes).\n- ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes).\n- ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git-fixes).\n- ASoC: Intel: avs: Reset the stream unless it is already prepared (git-fixes).\n- ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes).\n- ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes).\n- ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes).\n- ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git-fixes).\n- ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes).\n- ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes).\n- ASoC: stm32: spdifrx: fix synchronization state check (git-fixes).\n- ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes).\n- Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes).\n- Bluetooth: btintel: validate DDC record lengths (git-fixes).\n- Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes).\n- Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes).\n- Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes).\n- Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git-fixes).\n- Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes).\n- Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes).\n- Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes).\n- Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes).\n- Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git-fixes).\n- Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes).\n- Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes).\n- Bluetooth: hci_sync: don\u0027t drain cmd_sync backlog on unregister (git-fixes).\n- Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes).\n- Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes).\n- Bluetooth: ISO: Serialize concurrent connect calls (git-fixes).\n- Bluetooth: MGMT: Fix status of pending commands flushed on power off (git-fixes).\n- Bluetooth: RFCOMM: Fix initial port reference race (git-fixes).\n- Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git-fixes).\n- Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes).\n- Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git-fixes).\n- crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872).\n- Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes).\n- Drivers: hv: Don\u0027t reset VMBus connection state on error/exit paths (git-fixes).\n- Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes).\n- Drivers: hv: vmbus: fix typo \"substract\" in comment (git-fixes).\n- drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes).\n- drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes).\n- drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes).\n- drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git-fixes).\n- drm/amdgpu: don\u0027t drop the runtime PM reference twice in amdgpu_gpr (git-fixes).\n- drm/amdgpu: make Mac FB workaround generic (stable-fixes).\n- drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes).\n- drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes).\n- drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes).\n- drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes).\n- drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes).\n- drm/aspeed: Balance the display clock enable on teardown (git-fixes).\n- drm/dp: don\u0027t mark the AUX backlight enabled when enabling failed (git-fixes).\n- drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes).\n- drm/gud: don\u0027t keep a connector without a CRTC as connector_state (git-fixes).\n- drm/i915/gem: Prevent overstepping exec array boundary (git-fixes).\n- drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes).\n- drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes).\n- drm/imagination: Size page table preallocation by device address (git-fixes).\n- drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes).\n- drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes).\n- drm/vc4: Free the BO cache size list on teardown (git-fixes).\n- drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes).\n- drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes).\n- gpio: exar: initialize the ID before registering its cleanup (git-fixes).\n- gpio: xilinx: fix runtime PM leak on request error path (git-fixes).\n- i2c: at91: release DMA channels when probe defers (git-fixes).\n- i2c: xiic: don\u0027t clobber msg-\u003elen to signal block-read completion (git-fixes).\n- i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes).\n- IB/hfi1: Resolve the credit-return buffer through the send context\u0027s node (git-fixes).\n- iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes).\n- iio: accel: kx022a: Use cleanup.h helpers (stable-fixes).\n- iio: adc: aspeed: propagate reset deassert errors (git-fixes).\n- iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes).\n- iio: bu27034: simplify using guard(mutex) (stable-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: rohm-bu27034: Fix error return (git-fixes).\n- iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes).\n- Input: ati_remote2 - fix type confusion in device attribute handlers (git-fixes).\n- Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes).\n- Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes).\n- Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes).\n- Input: xpad - add support for Corsair Novablade Pro (stable-fixes).\n- iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git-fixes).\n- KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199).\n- KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199).\n- KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199).\n- KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199).\n- KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199).\n- KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git-fixes).\n- KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199).\n- memstick: core: wait for request completion before freeing card (git-fixes).\n- memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes).\n- mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes).\n- mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes).\n- mmc: mtk-sd: Cancel request timeout work on remove (git-fixes).\n- mmc: sdhci-sprd: disable runtime PM on remove (git-fixes).\n- net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes).\n- net: usb: ax88179_178a: fix rx frame length for non-last packets (git-fixes).\n- net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes).\n- PCI: hv: Probe vPCI buses asynchronously (git-fixes).\n- PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes).\n- pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes).\n- pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes).\n- pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes).\n- power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git-fixes).\n- power: supply: Fix maintenance charge table kernel-doc (git-fixes).\n- power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes).\n- powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645).\n- powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199).\n- printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989).\n- pseries/plpks: clear SED key data after use (bsc#1215199).\n- pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199).\n- pseries/plpks: clear signed update authentication buffer (bsc#1215199).\n- pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199).\n- pseries/plpks: make narrowing conversions explicit (bsc#1215199).\n- pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199).\n- regulator: ltc3676: don\u0027t read the write-only HRST and CLIRQ registers (git-fixes).\n- regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git-fixes).\n- sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance\n  backports SL-16.1) bsc#1282005).\n- sched/eevdf: Update se-\u003evprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports\n  SL-16.1) bsc#1282005).\n- sched/fair: Revert 6d71a9c61604 (\"sched/fair: Fix EEVDF entity placement bug causing scheduling lag\") (bsc#1234634\n  (Scheduler functional and performance backports SL-16.1) bsc#1282005).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- smb: client: use kzalloc to zero-initialize security descriptor buffer (git-fixes).\n- smb: common: change the data type of num_aces to le16 (git-fixes).\n- thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes).\n- tools/hv: fix typo \"retrive\" in comment (git-fixes).\n- tools: gpio: fix building from the top level with O= (git-fixes).\n- tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes).\n- usb: f81604: fix struct f81604_int_data size mismatch (git-fixes).\n- usb: ohci-spear: disable controller wakeup on removal (git-fixes).\n- usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes).\n- USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes).\n- USB: serial: option: add Compal EXC-T1 support (stable-fixes).\n- USB: serial: option: add Compal EXM-G1x support (stable-fixes).\n- USB: serial: option: add Quectel EG060W (stable-fixes).\n- USB: serial: option: add Quectel RG660QB (stable-fixes).\n- USB: serial: option: add support for SIMCom SIM8260C (stable-fixes).\n- wifi: ath9k: reject short WMI command responses (git-fixes).\n- wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes).\n- wifi: ath11k: reset ar-\u003enum_stations on hardware start (git-fixes).\n- wifi: atk9k: Revert \"wifi: ath9k: reject short WMI command responses\" (stable-fixes).\n- wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes).\n- wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes).\n- wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes).\n- wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes).\n- wifi: mac80211: account proxy paths against the mesh path limit (git-fixes).\n- wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes).\n- wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes).\n- wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes).\n- wifi: mac80211: drain PS delivery work during station teardown (git-fixes).\n- wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes).\n- wifi: mac80211: handle empty FILS association request payload (git-fixes).\n- wifi: mac80211: keep fallback association elements alive (git-fixes).\n- wifi: mac80211: keep paired old chanctx alive (git-fixes).\n- wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes).\n- wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes).\n- wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes).\n- wifi: mac80211: release mesh path quota on failed additions (git-fixes).\n- wifi: mac80211: set info-\u003eband for 802.3 encap offload frames (git-fixes).\n- wifi: mt76: mt792x: pick the SAR table layout from the table itself (git-fixes).\n- wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes).\n- wifi: mt76: mt7915: disable rx napi when removing device (git-fixes).\n- wifi: mt76: mt7925: don\u0027t put the band auto marker in TGID (git-fixes).\n- wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes).\n- wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes).\n- wifi: wfx: validate MIB read length before copying to caller (git-fixes).\n- wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes).\n- x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615).\n- x86/bugs: Add attack vector controls for VMSCAPE (git-fixes).\n- x86/bugs: Remove dead code which might prevent from building (git-fixes).\n- x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes).\n- x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes).\n- x86/bugs: Simplify SSB cmdline parsing (git-fixes).\n- x86/bugs: Use early_param() for spectre_v2 (git-fixes).\n- x86/bugs: Use early_param() for spectre_v2_user (git-fixes).\n- x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git-fixes).\n- x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLES-HA-16.0-1973",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24437-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:24437-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202624437-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:24437-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202624437-1/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1215199",
        "url": "https://bugzilla.suse.com/1215199"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1234634",
        "url": "https://bugzilla.suse.com/1234634"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264042",
        "url": "https://bugzilla.suse.com/1264042"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267430",
        "url": "https://bugzilla.suse.com/1267430"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268315",
        "url": "https://bugzilla.suse.com/1268315"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269561",
        "url": "https://bugzilla.suse.com/1269561"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272178",
        "url": "https://bugzilla.suse.com/1272178"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272509",
        "url": "https://bugzilla.suse.com/1272509"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272898",
        "url": "https://bugzilla.suse.com/1272898"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272901",
        "url": "https://bugzilla.suse.com/1272901"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272952",
        "url": "https://bugzilla.suse.com/1272952"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272955",
        "url": "https://bugzilla.suse.com/1272955"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272956",
        "url": "https://bugzilla.suse.com/1272956"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273599",
        "url": "https://bugzilla.suse.com/1273599"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273751",
        "url": "https://bugzilla.suse.com/1273751"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273764",
        "url": "https://bugzilla.suse.com/1273764"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273865",
        "url": "https://bugzilla.suse.com/1273865"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274039",
        "url": "https://bugzilla.suse.com/1274039"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274080",
        "url": "https://bugzilla.suse.com/1274080"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274256",
        "url": "https://bugzilla.suse.com/1274256"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274653",
        "url": "https://bugzilla.suse.com/1274653"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275510",
        "url": "https://bugzilla.suse.com/1275510"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275564",
        "url": "https://bugzilla.suse.com/1275564"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275644",
        "url": "https://bugzilla.suse.com/1275644"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275785",
        "url": "https://bugzilla.suse.com/1275785"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275786",
        "url": "https://bugzilla.suse.com/1275786"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275964",
        "url": "https://bugzilla.suse.com/1275964"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276330",
        "url": "https://bugzilla.suse.com/1276330"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276791",
        "url": "https://bugzilla.suse.com/1276791"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276836",
        "url": "https://bugzilla.suse.com/1276836"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276873",
        "url": "https://bugzilla.suse.com/1276873"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276907",
        "url": "https://bugzilla.suse.com/1276907"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276951",
        "url": "https://bugzilla.suse.com/1276951"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277103",
        "url": "https://bugzilla.suse.com/1277103"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277174",
        "url": "https://bugzilla.suse.com/1277174"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277260",
        "url": "https://bugzilla.suse.com/1277260"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277338",
        "url": "https://bugzilla.suse.com/1277338"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277357",
        "url": "https://bugzilla.suse.com/1277357"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277599",
        "url": "https://bugzilla.suse.com/1277599"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277602",
        "url": "https://bugzilla.suse.com/1277602"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277603",
        "url": "https://bugzilla.suse.com/1277603"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277614",
        "url": "https://bugzilla.suse.com/1277614"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277663",
        "url": "https://bugzilla.suse.com/1277663"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277665",
        "url": "https://bugzilla.suse.com/1277665"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277691",
        "url": "https://bugzilla.suse.com/1277691"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277695",
        "url": "https://bugzilla.suse.com/1277695"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277747",
        "url": "https://bugzilla.suse.com/1277747"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277804",
        "url": "https://bugzilla.suse.com/1277804"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277821",
        "url": "https://bugzilla.suse.com/1277821"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277889",
        "url": "https://bugzilla.suse.com/1277889"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277890",
        "url": "https://bugzilla.suse.com/1277890"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277894",
        "url": "https://bugzilla.suse.com/1277894"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277931",
        "url": "https://bugzilla.suse.com/1277931"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278033",
        "url": "https://bugzilla.suse.com/1278033"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278232",
        "url": "https://bugzilla.suse.com/1278232"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279706",
        "url": "https://bugzilla.suse.com/1279706"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280229",
        "url": "https://bugzilla.suse.com/1280229"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280259",
        "url": "https://bugzilla.suse.com/1280259"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280496",
        "url": "https://bugzilla.suse.com/1280496"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280552",
        "url": "https://bugzilla.suse.com/1280552"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280743",
        "url": "https://bugzilla.suse.com/1280743"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280769",
        "url": "https://bugzilla.suse.com/1280769"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280770",
        "url": "https://bugzilla.suse.com/1280770"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280950",
        "url": "https://bugzilla.suse.com/1280950"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280966",
        "url": "https://bugzilla.suse.com/1280966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281042",
        "url": "https://bugzilla.suse.com/1281042"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281144",
        "url": "https://bugzilla.suse.com/1281144"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281162",
        "url": "https://bugzilla.suse.com/1281162"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281280",
        "url": "https://bugzilla.suse.com/1281280"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281726",
        "url": "https://bugzilla.suse.com/1281726"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281771",
        "url": "https://bugzilla.suse.com/1281771"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281819",
        "url": "https://bugzilla.suse.com/1281819"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282005",
        "url": "https://bugzilla.suse.com/1282005"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282274",
        "url": "https://bugzilla.suse.com/1282274"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282615",
        "url": "https://bugzilla.suse.com/1282615"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282742",
        "url": "https://bugzilla.suse.com/1282742"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282768",
        "url": "https://bugzilla.suse.com/1282768"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282769",
        "url": "https://bugzilla.suse.com/1282769"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282770",
        "url": "https://bugzilla.suse.com/1282770"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282784",
        "url": "https://bugzilla.suse.com/1282784"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282869",
        "url": "https://bugzilla.suse.com/1282869"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282932",
        "url": "https://bugzilla.suse.com/1282932"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283037",
        "url": "https://bugzilla.suse.com/1283037"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283142",
        "url": "https://bugzilla.suse.com/1283142"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283144",
        "url": "https://bugzilla.suse.com/1283144"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283153",
        "url": "https://bugzilla.suse.com/1283153"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283158",
        "url": "https://bugzilla.suse.com/1283158"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283454",
        "url": "https://bugzilla.suse.com/1283454"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283812",
        "url": "https://bugzilla.suse.com/1283812"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283823",
        "url": "https://bugzilla.suse.com/1283823"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283835",
        "url": "https://bugzilla.suse.com/1283835"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283850",
        "url": "https://bugzilla.suse.com/1283850"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283851",
        "url": "https://bugzilla.suse.com/1283851"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283853",
        "url": "https://bugzilla.suse.com/1283853"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283855",
        "url": "https://bugzilla.suse.com/1283855"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283856",
        "url": "https://bugzilla.suse.com/1283856"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283858",
        "url": "https://bugzilla.suse.com/1283858"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283859",
        "url": "https://bugzilla.suse.com/1283859"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283862",
        "url": "https://bugzilla.suse.com/1283862"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283873",
        "url": "https://bugzilla.suse.com/1283873"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283877",
        "url": "https://bugzilla.suse.com/1283877"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283894",
        "url": "https://bugzilla.suse.com/1283894"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283936",
        "url": "https://bugzilla.suse.com/1283936"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283946",
        "url": "https://bugzilla.suse.com/1283946"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283963",
        "url": "https://bugzilla.suse.com/1283963"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1283979",
        "url": "https://bugzilla.suse.com/1283979"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284064",
        "url": "https://bugzilla.suse.com/1284064"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284288",
        "url": "https://bugzilla.suse.com/1284288"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284289",
        "url": "https://bugzilla.suse.com/1284289"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284291",
        "url": "https://bugzilla.suse.com/1284291"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284295",
        "url": "https://bugzilla.suse.com/1284295"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284298",
        "url": "https://bugzilla.suse.com/1284298"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284310",
        "url": "https://bugzilla.suse.com/1284310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284312",
        "url": "https://bugzilla.suse.com/1284312"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284408",
        "url": "https://bugzilla.suse.com/1284408"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284412",
        "url": "https://bugzilla.suse.com/1284412"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284415",
        "url": "https://bugzilla.suse.com/1284415"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284419",
        "url": "https://bugzilla.suse.com/1284419"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284422",
        "url": "https://bugzilla.suse.com/1284422"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284424",
        "url": "https://bugzilla.suse.com/1284424"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284462",
        "url": "https://bugzilla.suse.com/1284462"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284559",
        "url": "https://bugzilla.suse.com/1284559"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284581",
        "url": "https://bugzilla.suse.com/1284581"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284605",
        "url": "https://bugzilla.suse.com/1284605"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284606",
        "url": "https://bugzilla.suse.com/1284606"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284647",
        "url": "https://bugzilla.suse.com/1284647"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284649",
        "url": "https://bugzilla.suse.com/1284649"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284655",
        "url": "https://bugzilla.suse.com/1284655"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284713",
        "url": "https://bugzilla.suse.com/1284713"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284746",
        "url": "https://bugzilla.suse.com/1284746"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284790",
        "url": "https://bugzilla.suse.com/1284790"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284791",
        "url": "https://bugzilla.suse.com/1284791"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1285684",
        "url": "https://bugzilla.suse.com/1285684"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1285685",
        "url": "https://bugzilla.suse.com/1285685"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1285989",
        "url": "https://bugzilla.suse.com/1285989"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31731 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31731/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46028 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46028/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53108 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53108/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63830 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63830/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64012 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64012/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64058 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64058/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64060 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64060/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64062 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64062/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64063 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64063/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64064 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64064/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64068 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64068/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64116 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64116/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64280 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64280/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64424 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64424/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64428 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64428/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64435 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64435/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64461 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64461/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68233 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68233/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68241 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68241/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68242 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68242/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68323 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68323/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72015 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72015/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72040 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72040/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72041 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72081 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72110 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72110/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72172 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72172/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72174 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72174/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72212 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72212/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72213 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72213/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72236 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72236/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72250 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72250/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72253 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72253/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72305 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72305/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72319 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72319/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72355 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72355/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72405 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72405/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72493 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72493/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74306 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74306/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74312 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74312/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74368 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74368/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74379 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74379/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74544 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74544/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74578 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74578/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74583 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74583/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74587 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74587/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74611 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74611/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74614 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74614/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74624 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74624/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74715 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74715/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80572 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80572/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80579 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80579/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80893 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80893/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80977 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80977/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89528 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89528/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89558 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89558/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89593 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89593/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89631 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89631/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89636 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89636/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89640 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89640/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89754 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89754/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89755 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89755/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89778 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89778/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89811 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89811/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89987 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89987/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90011 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90011/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90283 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90283/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90289 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90289/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93066 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93066/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93134 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93134/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93222 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93222/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93252 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93252/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93785 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93785/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93787 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93787/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93798 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93798/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93806 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93806/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97415 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97415/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97416 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97416/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97491 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97491/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97533 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97533/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97554 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97554/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97555 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97555/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97556 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97556/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97558 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97558/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97559 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97559/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97561 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97561/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97562 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97562/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97563 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97563/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97564 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97564/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97942 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97942/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97943 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97943/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-97945 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-97945/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98010 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98010/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98015 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98015/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98016 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98016/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98041 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98077 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98089 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98089/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98125 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98125/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98126 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98126/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98127 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98127/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98130 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98130/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98167 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98167/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98169 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98169/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98170 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98170/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98171 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98171/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98173 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98173/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98174 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98174/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98175 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98175/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98216 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98216/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98252 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98252/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98253 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98253/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98260 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98260/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98261 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98261/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98269 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98269/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98273 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98273/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98323 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98323/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98347 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98347/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98352 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98352/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98354 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98354/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98357 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98357/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98358 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98358/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98359 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98359/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98360 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98360/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98365 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98365/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98366 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98366/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98367 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98367/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-98432 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-98432/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-99999 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-99999/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2026-10-31T17:15:50Z",
      "generator": {
        "date": "2026-10-24T11:15:59Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:24437-1",
      "initial_release_date": "2026-10-24T11:15:59Z",
      "revision_history": [
        {
          "date": "2026-10-24T11:15:59Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-30T11:38:28Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-10-31T17:15:50Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
                "product": {
                  "name": "cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
                  "product_id": "cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/cluster-md-kmp-default@6.12.0-160000.40.1?arch=ppc64le\u0026upstream=kernel-source-0:6.12.0-160000.40.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
                "product": {
                  "name": "dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
                  "product_id": "dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dlm-kmp-default@6.12.0-160000.40.1?arch=ppc64le\u0026upstream=kernel-source-0:6.12.0-160000.40.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
                "product": {
                  "name": "gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
                  "product_id": "gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gfs2-kmp-default@6.12.0-160000.40.1?arch=ppc64le\u0026upstream=kernel-source-0:6.12.0-160000.40.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
                "product": {
                  "name": "cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
                  "product_id": "cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/cluster-md-kmp-default@6.12.0-160000.40.1?arch=s390x\u0026upstream=kernel-source-0:6.12.0-160000.40.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
                "product": {
                  "name": "dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
                  "product_id": "dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dlm-kmp-default@6.12.0-160000.40.1?arch=s390x\u0026upstream=kernel-source-0:6.12.0-160000.40.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
                "product": {
                  "name": "gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
                  "product_id": "gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gfs2-kmp-default@6.12.0-160000.40.1?arch=s390x\u0026upstream=kernel-source-0:6.12.0-160000.40.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
                "product": {
                  "name": "cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
                  "product_id": "cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/cluster-md-kmp-default@6.12.0-160000.40.1?arch=x86_64\u0026upstream=kernel-source-0:6.12.0-160000.40.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
                "product": {
                  "name": "dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
                  "product_id": "dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dlm-kmp-default@6.12.0-160000.40.1?arch=x86_64\u0026upstream=kernel-source-0:6.12.0-160000.40.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64",
                "product": {
                  "name": "gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64",
                  "product_id": "gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gfs2-kmp-default@6.12.0-160000.40.1?arch=x86_64\u0026upstream=kernel-source-0:6.12.0-160000.40.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Availability Extension 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise High Availability Extension 16.0",
                  "product_id": "SUSE Linux Enterprise High Availability Extension 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-ha:16:16.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 16.0",
          "product_id": "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le"
        },
        "product_reference": "cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x as component of SUSE Linux Enterprise High Availability Extension 16.0",
          "product_id": "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x"
        },
        "product_reference": "cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 16.0",
          "product_id": "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64"
        },
        "product_reference": "cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 16.0",
          "product_id": "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le"
        },
        "product_reference": "dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dlm-kmp-default-0:6.12.0-160000.40.1.s390x as component of SUSE Linux Enterprise High Availability Extension 16.0",
          "product_id": "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x"
        },
        "product_reference": "dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dlm-kmp-default-0:6.12.0-160000.40.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 16.0",
          "product_id": "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64"
        },
        "product_reference": "dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 16.0",
          "product_id": "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le"
        },
        "product_reference": "gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gfs2-kmp-default-0:6.12.0-160000.40.1.s390x as component of SUSE Linux Enterprise High Availability Extension 16.0",
          "product_id": "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x"
        },
        "product_reference": "gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 16.0",
          "product_id": "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        },
        "product_reference": "gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-31731",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31731"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: core: Address thermal zone removal races with resume\n\nSince thermal_zone_pm_complete() and thermal_zone_device_resume()\nre-initialize the poll_queue delayed work for the given thermal zone,\nthe cancel_delayed_work_sync() in thermal_zone_device_unregister()\nmay miss some already running work items and the thermal zone may\nbe freed prematurely [1].\n\nThere are two failing scenarios that both start with\nrunning thermal_pm_notify_complete() right before invoking\nthermal_zone_device_unregister() for one of the thermal zones.\n\nIn the first scenario, there is a work item already running for\nthe given thermal zone when thermal_pm_notify_complete() calls\nthermal_zone_pm_complete() for that thermal zone and it continues to\nrun when thermal_zone_device_unregister() starts.  Since the poll_queue\ndelayed work has been re-initialized by thermal_pm_notify_complete(), the\nrunning work item will be missed by the cancel_delayed_work_sync() in\nthermal_zone_device_unregister() and if it continues to run past the\nfreeing of the thermal zone object, a use-after-free will occur.\n\nIn the second scenario, thermal_zone_device_resume() queued up by\nthermal_pm_notify_complete() runs right after the thermal_zone_exit()\ncalled by thermal_zone_device_unregister() has returned.  The poll_queue\ndelayed work is re-initialized by it before cancel_delayed_work_sync() is\ncalled by thermal_zone_device_unregister(), so it may continue to run\nafter the freeing of the thermal zone object, which also leads to a\nuse-after-free.\n\nAddress the first failing scenario by ensuring that no thermal work\nitems will be running when thermal_pm_notify_complete() is called.\nFor this purpose, first move the cancel_delayed_work() call from\nthermal_zone_pm_complete() to thermal_zone_pm_prepare() to prevent\nnew work from entering the workqueue going forward.  Next, switch\nover to using a dedicated workqueue for thermal events and update\nthe code in thermal_pm_notify() to flush that workqueue after\nthermal_pm_notify_prepare() has returned which will take care of\nall leftover thermal work already on the workqueue (that leftover\nwork would do nothing useful anyway because all of the thermal zones\nhave been flagged as suspended).\n\nThe second failing scenario is addressed by adding a tz-\u003estate check\nto thermal_zone_device_resume() to prevent it from re-initializing\nthe poll_queue delayed work if the thermal zone is going away.\n\nNote that the above changes will also facilitate relocating the suspend\nand resume of thermal zones closer to the suspend and resume of devices,\nrespectively.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31731",
          "url": "https://www.suse.com/security/cve/CVE-2026-31731"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264042 for CVE-2026-31731",
          "url": "https://bugzilla.suse.com/1264042"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264043 for CVE-2026-31731",
          "url": "https://bugzilla.suse.com/1264043"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-31731"
    },
    {
      "cve": "CVE-2026-46028",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46028"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - snapshot IV for async AEAD requests\n\nAF_ALG AEAD AIO requests currently use the socket-wide IV buffer during\nrequest processing.  For async requests, later socket activity can\nupdate that shared state before the original request has fully\ncompleted, which can lead to inconsistent IV handling.\n\nSnapshot the IV into per-request storage when preparing the AEAD\nrequest, so in-flight operations no longer depend on mutable socket\nstate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46028",
          "url": "https://www.suse.com/security/cve/CVE-2026-46028"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267430 for CVE-2026-46028",
          "url": "https://bugzilla.suse.com/1267430"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46028"
    },
    {
      "cve": "CVE-2026-53108",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53108"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/64s: Fix unmap race with PMD migration entries\n\nThe following race is possible with migration swap entries or\ndevice-private THP entries. e.g. when move_pages is called on a PMD THP\npage, then there maybe an intermediate state, where PMD entry acts as\na migration swap entry (pmd_present() is true). Then if an munmap\nhappens at the same time, then this VM_BUG_ON() can happen in\npmdp_huge_get_and_clear_full().\n\nThis patch fixes that.\n\nThread A: move_pages() syscall\n  add_folio_for_migration()\n    mmap_read_lock(mm)\n    folio_isolate_lru(folio)\n    mmap_read_unlock(mm)\n\n  do_move_pages_to_node()\n    migrate_pages()\n      try_to_migrate_one()\n        spin_lock(ptl)\n        set_pmd_migration_entry()\n          pmdp_invalidate()     # PMD: _PAGE_INVALID | _PAGE_PTE | pfn\n          set_pmd_at()          # PMD: migration swap entry (pmd_present=0)\n        spin_unlock(ptl)\n        [page copy phase]       # \u003c--- RACE WINDOW --\u003e\n\nThread B: munmap()\n  mmap_write_downgrade(mm)\n  unmap_vmas() -\u003e zap_pmd_range()\n    zap_huge_pmd()\n      __pmd_trans_huge_lock()\n        pmd_is_huge():          # !pmd_present \u0026\u0026 !pmd_none -\u003e TRUE (swap entry)\n        pmd_lock() -\u003e \t\t# spin_lock(ptl), waits for Thread A to release ptl\n      pmdp_huge_get_and_clear_full()\n        VM_BUG_ON(!pmd_present(*pmdp))  # HITS!\n\n[  287.738700][ T1867] ------------[ cut here ]------------\n[  287.743843][ T1867] kernel BUG at arch/powerpc/mm/book3s64/pgtable.c:187!\ncpu 0x0: Vector: 700 (Program Check) at [c00000044037f4f0]\n    pc: c000000000094ca4: pmdp_huge_get_and_clear_full+0x6c/0x23c\n    lr: c000000000645dec: zap_huge_pmd+0xb0/0x868\n    sp: c00000044037f790\n   msr: 800000000282b033\n  current = 0xc0000004032c1a00\n  paca    = 0xc000000004fe0000   irqmask: 0x03   irq_happened: 0x09\n    pid   = 1867, comm = a.out\nkernel BUG at :187!\nLinux version 6.19.0-12136-g14360d4f917c-dirty (powerpc64le-linux-gnu-gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #27 SMP PREEMPT Sun Feb 22 10:38:56 IST 2026\nenter ? for help\n[link register   ] c000000000645dec zap_huge_pmd+0xb0/0x868\n[c00000044037f790] c00000044037f7d0 (unreliable)\n[c00000044037f7d0] c000000000645dcc zap_huge_pmd+0x90/0x868\n[c00000044037f840] c0000000005724cc unmap_page_range+0x176c/0x1f40\n[c00000044037fa00] c000000000572ea0 unmap_vmas+0xb0/0x1d8\n[c00000044037fa90] c0000000005af254 unmap_region+0xb4/0x128\n[c00000044037fb50] c0000000005af400 vms_complete_munmap_vmas+0x138/0x310\n[c00000044037fbe0] c0000000005b0f1c do_vmi_align_munmap+0x1ec/0x238\n[c00000044037fd30] c0000000005b3688 __vm_munmap+0x170/0x1f8\n[c00000044037fdf0] c000000000587f74 sys_munmap+0x2c/0x40\n[c00000044037fe10] c000000000032668 system_call_exception+0x128/0x350\n[c00000044037fe50] c00000000000d05c system_call_vectored_common+0x15c/0x2ec\n---- Exception: 3000 (System Call Vectored) at 0000000010064a2c\nSP (7fff9b1ee9c0) is in userspace\n0:mon\u003e zh\n\ncommit a30b48bf1b24 (\"mm/migrate_device: implement THP migration of zone device pages\"),\nenabled migration for device-private PMD entries. Hence this is one\nother path where this warning could get trigger from.\n\n ------------[ cut here ]------------\n WARNING: arch/powerpc/mm/book3s64/hash_pgtable.c:199 at hash__pmd_hugepage_update+0x48/0x284, CPU#3: hmm-tests/1905\n Modules linked in: test_hmm\n CPU: 3 UID: 0 PID: 1905 Comm: hmm-tests Tainted: G    B   W    L   N  7.0.0-rc1-01438-g7e2f0ee7581c #21 PREEMPT\n Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP, [N]=TEST\n Hardware name: IBM pSeries (emulated by qemu) POWER10 (architected) 0x801200 0xf000006 of:SLOF,git-ee03ae pSeries\n NIP [c000000000096b70] hash__pmd_hugepage_update+0x48/0x284\n LR [c000000000096e7c] hash__pmdp_huge_get_and_clear+0xd0/0xd4\n Call Trace:\n [c000000604707670] [c000000004e102b8] 0xc000000004e102b8 (unreliable)\n [c000000604707700] [c00000000064ec3c] set_pmd_migration_entry+0x414/0x498\n [c000000604707760] [c00000000063e5a4] migrate_vma_col\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53108",
          "url": "https://www.suse.com/security/cve/CVE-2026-53108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269561 for CVE-2026-53108",
          "url": "https://bugzilla.suse.com/1269561"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53108"
    },
    {
      "cve": "CVE-2026-63830",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63830"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skmsg: preserve sg.copy across SG transforms\n\nThe sk_msg sg.copy bitmap is part of the scatterlist entry ownership\nstate. A set bit tells sk_msg_compute_data_pointers() not to expose the\nentry through writable BPF ctx-\u003edata. This protects entries backed by\npages that are not private to the sk_msg, such as splice-backed file\npage-cache pages.\n\nSeveral sk_msg transform paths move, copy, split, or compact\nmsg-\u003esg.data[] entries without moving the matching sg.copy bit. This can\nmake an externally backed entry arrive at a new slot with a clear copy\nbit. A later SK_MSG verdict can then expose sg_virt(sge) as writable\nctx-\u003edata and BPF stores can modify the original page cache.\n\nKeep sg.copy synchronized with sg.data[] whenever entries are\ntransferred, shifted, split, or copied into a new sk_msg. Clear the bit\nwhen an entry is replaced by a newly allocated private page or freed.\nThis covers the BPF pull/push/pop helpers, sk_msg_shift_left/right(),\nsk_msg_xfer(), and tls_split_open_record(), including the partial tail\nentry created during TLS open-record splitting.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63830",
          "url": "https://www.suse.com/security/cve/CVE-2026-63830"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272178 for CVE-2026-63830",
          "url": "https://bugzilla.suse.com/1272178"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272265 for CVE-2026-63830",
          "url": "https://bugzilla.suse.com/1272265"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-63830"
    },
    {
      "cve": "CVE-2026-64012",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64012"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked\n\nWhen sfb has children (eg qfq qdisc) whose peek() callback is\nqdisc_peek_dequeued(), we could get a kernel panic. When the parent of such\nqdiscs (eg illustrated in patch #3 as tbf) wants to retrieve an skb from\nits child (sfb in this case), it will do the following:\n 1a. do a peek() - and when sensing there\u0027s an skb the child can offer, then\n     - the child in this case(sfb) calls its child\u0027s (qfq) peek.\n        qfq does the right thing and will return the gso_skb queue packet.\n        Note: if there wasnt a gso_skb entry then qfq will store it there.\n 1b. invoke a dequeue() on the child (sfb). And herein lies the problem.\n     - sfb will call the child\u0027s dequeue() which will essentially just\n       try to grab something of qfq\u0027s queue.\n\n[  127.594489][  T453] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f]\n[  127.594741][  T453] CPU: 2 UID: 0 PID: 453 Comm: ping Not tainted 7.1.0-rc1-00035-gac961974495b-dirty #793 PREEMPT(full)\n[  127.595059][  T453] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011\n[  127.595254][  T453] RIP: 0010:qfq_dequeue+0x35c/0x1650 [sch_qfq]\n[  127.595461][  T453] Code: 00 fc ff df 80 3c 02 00 0f 85 17 0e 00 00 4c 8d 73 48 48 89 9d b8 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 76 0c 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b\n[  127.596081][  T453] RSP: 0018:ffff88810e5af440 EFLAGS: 00010216\n[  127.596337][  T453] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: dffffc0000000000\n[  127.596623][  T453] RDX: 0000000000000009 RSI: 0000001880000000 RDI: ffff888104fd82b0\n[  127.596917][  T453] RBP: ffff888104fd8000 R08: ffff888104fd8280 R09: 1ffff110211893a3\n[  127.597165][  T453] R10: 1ffff110211893a6 R11: 1ffff110211893a7 R12: 0000001880000000\n[  127.597404][  T453] R13: ffff888104fd82b8 R14: 0000000000000048 R15: 0000000040000000\n[  127.597644][  T453] FS:  00007fc380cbfc40(0000) GS:ffff88816f2a8000(0000) knlGS:0000000000000000\n[  127.597956][  T453] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  127.598160][  T453] CR2: 00005610aa9890a8 CR3: 000000010369e000 CR4: 0000000000750ef0\n[  127.598390][  T453] PKRU: 55555554\n[  127.598509][  T453] Call Trace:\n[  127.598629][  T453]  \u003cTASK\u003e\n[  127.598718][  T453]  ? mark_held_locks+0x40/0x70\n[  127.598890][  T453]  ? srso_alias_return_thunk+0x5/0xfbef5\n[  127.599053][  T453]  sfb_dequeue+0x88/0x4d0\n[  127.599174][  T453]  ? ktime_get+0x137/0x230\n[  127.599328][  T453]  ? srso_alias_return_thunk+0x5/0xfbef5\n[  127.599480][  T453]  ? qdisc_peek_dequeued+0x7b/0x350 [sch_qfq]\n[  127.599670][  T453]  ? srso_alias_return_thunk+0x5/0xfbef5\n[  127.599831][  T453]  tbf_dequeue+0x6b1/0x1098 [sch_tbf]\n[  127.599988][  T453]  __qdisc_run+0x169/0x1900\n\nThe right thing to do in #1b is to grab the skb off gso_skb queue.\nThis patchset fixes that issue by changing #1b to use qdisc_dequeue_peeked()\nmethod instead.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64012",
          "url": "https://www.suse.com/security/cve/CVE-2026-64012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273764 for CVE-2026-64012",
          "url": "https://bugzilla.suse.com/1273764"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64012"
    },
    {
      "cve": "CVE-2026-64058",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64058"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix netfs_read_folio() to wait on writeback\n\nFix netfs_read_folio() to wait for an ongoing writeback to complete so that\nit can trust the dirty flag and whatever is attached to folio-\u003eprivate\n(folio-\u003eprivate may get cleaned up by the collector before it clears the\nwriteback flag).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64058",
          "url": "https://www.suse.com/security/cve/CVE-2026-64058"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272898 for CVE-2026-64058",
          "url": "https://bugzilla.suse.com/1272898"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64058"
    },
    {
      "cve": "CVE-2026-64060",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64060"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix leak of request in netfs_write_begin() error handling\n\nFix netfs_write_begin() to not leak our ref on the request in the event\nthat we get an error from netfs_wait_for_read().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64060",
          "url": "https://www.suse.com/security/cve/CVE-2026-64060"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272901 for CVE-2026-64060",
          "url": "https://bugzilla.suse.com/1272901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64060"
    },
    {
      "cve": "CVE-2026-64062",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64062"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix potential deadlock in write-through mode\n\nFix netfs_advance_writethrough() to always unlock the supplied folio and to\nmark it dirty if it isn\u0027t yet written to the end.  Unfortunately, it can\u0027t\nbe marked for writeback until the folio is done with as that may cause a\ndeadlock against mmapped reads and writes.\n\nEven though it has been marked dirty, premature writeback can\u0027t occur as\nthe caller is holding both inode-\u003ei_rwsem (which will prevent concurrent\ntruncation, fallocation, DIO and other writes) and ictx-\u003ewb_lock (which\nwill cause flushing to wait and writeback to skip or wait).\n\nNote that this may be easier to deal with once the queuing of folios is\nsplit from the generation of subrequests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64062",
          "url": "https://www.suse.com/security/cve/CVE-2026-64062"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272952 for CVE-2026-64062",
          "url": "https://bugzilla.suse.com/1272952"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64062"
    },
    {
      "cve": "CVE-2026-64063",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64063"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix streaming write being overwritten\n\nIn order to avoid reading whilst writing, netfslib will allow \"streaming\nwrites\" in which dirty data is stored directly into folios without reading\nthem first.  Such folios are marked dirty but may not be marked uptodate.\nIf a folio is entirely written by a streaming write, uptodate will be set,\notherwise it will have a netfs_folio struct attached to -\u003eprivate recording\nthe dirty region.\n\nIn the event that a partially written streaming write page is to be\noverwritten entirely by a single write(), netfs_perform_write() will try to\ncopy over it, but doesn\u0027t discard the netfs_folio if it succeeds; further,\nit doesn\u0027t correctly handle a partial copy that overwrites some of the\ndirty data.\n\nFix this by the following:\n\n (1) If the folio is successfully overwritten, free the netfs_folio struct\n     before marking the page uptodate.\n\n (2) If the copy to the folio partially fails, but short of the dirty data,\n     just ignore the copy.\n\n (3) If the copy partially fails and overwrites some of the dirty data,\n     accept the copy, update the netfs_folio struct to record the new data.\n     If the folio is now filled, free the netfs_folio and set uptodate,\n     otherwise return a partial write.\n\nFound with:\n\n\tfsx -q -N 1000000 -p 10000 -o 128000 -l 600000 \\\n\t  /xfstest.test/junk --replay-ops=junk.fsxops\n\nusing the following as junk.fsxops:\n\n\ttruncate 0x0 0 0x927c0\n\twrite 0x63fb8 0x53c8 0\n\tcopy_range 0xb704 0x19b9 0x24429 0x79380\n\twrite 0x2402b 0x144a2 0x90660 *\n\twrite 0x204d5 0x140a0 0x927c0 *\n\tcopy_range 0x1f72c 0x137d0 0x7a906 0x927c0 *\n\tread 0x00000 0x20000 0x9157c\n\tread 0x20000 0x20000 0x9157c\n\tread 0x40000 0x20000 0x9157c\n\tread 0x60000 0x20000 0x9157c\n\tread 0x7e1a0 0xcfb9 0x9157c\n\non cifs with the default cache option.\n\nIt shows folio 0x24 misbehaving if the FMODE_READ check is commented out in\nnetfs_perform_write():\n\n\t\tif (//(file-\u003ef_mode \u0026 FMODE_READ) ||\n\t\t    netfs_is_cache_enabled(ctx)) {\n\nand no fscache.  This was initially found with the generic/522 xfstest.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64063",
          "url": "https://www.suse.com/security/cve/CVE-2026-64063"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272955 for CVE-2026-64063",
          "url": "https://bugzilla.suse.com/1272955"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64063"
    },
    {
      "cve": "CVE-2026-64064",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64064"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone\n\nIf a streaming write is made, this will leave the relevant modified folio\nin a not-uptodate, but dirty state with a netfs_folio struct hung off of\nfolio-\u003eprivate indicating the dirty range.  Subsequently truncating the\nfile such that the dirty data in the folio is removed, but the first part\nof the folio theoretically remains will cause the netfs_folio struct to be\ndiscarded... but will leave the dirty flag set.\n\nIf the folio is then read via mmap(), netfs_read_folio() will see that the\npage is dirty and jump to netfs_read_gaps() to fill in the missing bits.\nnetfs_read_gaps(), however, expects there to be a netfs_folio struct\npresent and can oops because truncate removed it.\n\nFix this by calling folio_cancel_dirty() in netfs_invalidate_folio() in the\nevent that all the dirty data in the folio is erased (as nfs does).\n\nAlso add some tracepoints to log modifications to a dirty page.\n\nThis can be reproduced with something like:\n\n    dd if=/dev/zero of=/xfstest.test/foo bs=1M count=1\n    umount /xfstest.test\n    mount /xfstest.test\n    xfs_io -c \"w 0xbbbf 0xf96c\" \\\n           -c \"truncate 0xbbbf\" \\\n           -c \"mmap -r 0xb000 0x11000\" \\\n           -c \"mr 0xb000 0x11000\" \\\n           /xfstest.test/foo\n\nwith fscaching disabled (otherwise streaming writes are suppressed) and a\nchange to netfs_perform_write() to disallow streaming writes if the fd is\nopen O_RDWR:\n\n\tif (//(file-\u003ef_mode \u0026 FMODE_READ) || \u003c--- comment this out\n\t    netfs_is_cache_enabled(ctx)) {\n\nIt should be reproducible even without this change, but if prevents the\nabove trivial xfs_io command from reproducing it.\n\nNote that the initial dd is important: the file must start out sufficiently\nlarge that the zero-point logic doesn\u0027t just clear the gaps because it\nknows there\u0027s nothing in the file to read yet.  Unmounting and mounting is\nneeded to clear the pagecache (there are other ways to do that that may\nalso work).\n\nThis was initially reproduced with the generic/522 xfstest on some patches\nthat remove the FMODE_READ restriction.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64064",
          "url": "https://www.suse.com/security/cve/CVE-2026-64064"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272956 for CVE-2026-64064",
          "url": "https://bugzilla.suse.com/1272956"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64064"
    },
    {
      "cve": "CVE-2026-64068",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64068"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix missing locking around retry adding new subreqs\n\nFix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take\nthe appropriate lock when adding extra subrequests into\nstream-\u003esubrequests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64068",
          "url": "https://www.suse.com/security/cve/CVE-2026-64068"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272509 for CVE-2026-64068",
          "url": "https://bugzilla.suse.com/1272509"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64068"
    },
    {
      "cve": "CVE-2026-64116",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64116"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: ioam: add NULL check for idev in ipv6_hop_ioam()\n\nReported by Sashiko:\n\nThe function ipv6_hop_ioam() accesses\n__in6_dev_get(skb-\u003edev)-\u003ecnf.ioam6_enabled without validating the returned\nidev pointer. Because addrconf_ifdown() can concurrently clear dev-\u003eip6_ptr\nvia RCU, __in6_dev_get() can return NULL during interface teardown, which\ncould cause a NULL pointer dereference when processing an IOAM Hop-by-Hop\noption.\n\nLet\u0027s add a check and use SKB_DROP_REASON_IPV6DISABLED accordingly.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64116",
          "url": "https://www.suse.com/security/cve/CVE-2026-64116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273751 for CVE-2026-64116",
          "url": "https://bugzilla.suse.com/1273751"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64116"
    },
    {
      "cve": "CVE-2026-64280",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64280"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()\n\nafu_ioctl_dma_map() accepts a 64-bit length from userspace via\nDFL_FPGA_PORT_DMA_MAP ioctl without an upper bound check. The value\nis passed to afu_dma_pin_pages() where npages is derived as\nlength \u003e\u003e PAGE_SHIFT and passed to pin_user_pages_fast() which takes\nint nr_pages, causing implicit truncation if length is very large.\n\nValidate map.length at the ioctl entry point before calling\nafu_dma_map_region(), rejecting values whose page count exceeds\nINT_MAX.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64280",
          "url": "https://www.suse.com/security/cve/CVE-2026-64280"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273599 for CVE-2026-64280",
          "url": "https://bugzilla.suse.com/1273599"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64280"
    },
    {
      "cve": "CVE-2026-64424",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64424"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetpoll: fix a use-after-free on shutdown path\n\nThere is a use-after-free error on netpoll, which is clearly detected by\nKASAN.\n\n      BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3b/0x80\n      Read of size 1 at addr ... by task kworker/9:1\n      Workqueue: events queue_process\n      Call Trace:\n       skb_dequeue+0x1e/0xb0\n       queue_process+0x2c/0x600\n       process_scheduled_works+0x4b6/0x850\n       worker_thread+0x414/0x5a0\n      Allocated by task 242:\n       __netpoll_setup+0x201/0x4a0\n       netpoll_setup+0x249/0x550\n       enabled_store+0x32f/0x380\n      Freed by task 0:\n       kfree+0x1b7/0x540\n       rcu_core+0x3f8/0x7a0\n\nThe problem happens when there is a pending TX worker running in\nparallel with the cleanup path.\n\nThis is what happens on netpoll shutdown path:\n\n1) __netpoll_cleanup() is called\n2) set dev-\u003enpinfo to NULL\n3) call_rcu() with rcu_cleanup_netpoll_info()\n  3.1) rcu_cleanup_netpoll_info() tries to cancel all workers with\n       cancel_delayed_work(), but doesn\u0027t wait for the worker to finish\n4) and kfree(npinfo);\n\nBecause 3.1) doesn\u0027t really cancel the work, as the comment says \"we\ncan\u0027t call cancel_delayed_work_sync here, as we are in softirq\", the TX\nworker can run after 4).\n\nTl;DR: queue_process() is not an RCU reader, it reaches npinfo through\nthe work item via container_of().\n\nUse disable_delayed_work_sync() to ensure the worker is completely\nstopped and prevent any future re-arming attempts. Once npinfo is set\nto NULL, senders will bail out and not queue new work. The disable flag\nensures any in-flight re-arming attempts also fail silently.\n\nIn the future, we can do the cleanup inline here without needing the\nnpinfo-\u003ercu rcu_head, but that is net-next material.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64424",
          "url": "https://www.suse.com/security/cve/CVE-2026-64424"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274256 for CVE-2026-64424",
          "url": "https://bugzilla.suse.com/1274256"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64424"
    },
    {
      "cve": "CVE-2026-64428",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64428"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: sch: use raw_spinlock_t in the irq startup path\n\nsch_irq_unmask() enables the GPIO IRQ and then updates the controller\nstate through sch_irq_mask_unmask(), which takes sch-\u003elock with\nspin_lock_irqsave().  The callback can be reached from irq_startup()\nwhile setting up a requested IRQ.  That path is not sleepable, but on\nPREEMPT_RT a regular spinlock_t becomes a sleeping lock.\n\nThis issue was found by our static analysis tool and then manually\nreviewed against the current tree.\n\nThe grounded PoC kept the request_threaded_irq() -\u003e __setup_irq() -\u003e\nirq_startup() -\u003e sch_irq_unmask() -\u003e sch_irq_mask_unmask() carrier and\nused the original spin_lock_irqsave(\u0026sch-\u003elock) edge.  Lockdep reported:\n\n  BUG: sleeping function called from invalid context\n  hardirqs last disabled at ... __setup_irq.constprop.0 ... [vuln_msv]\n  sch_rt_spin_lock_irqsave+0x1c/0x30 [vuln_msv]\n  sch_irq_mask_unmask.constprop.0+0x31/0x70 [vuln_msv]\n  __setup_irq.constprop.0+0xd/0x30 [vuln_msv]\n\nConvert the SCH controller lock to raw_spinlock_t.  The same lock is\nalso used by the GPIO direction and value callbacks, but those critical\nsections only update MMIO-backed GPIO registers and do not contain\nsleepable operations.  Keeping this register lock non-sleeping is\ntherefore appropriate for the irqchip callbacks and does not change the\nGPIO-side locking contract.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64428",
          "url": "https://www.suse.com/security/cve/CVE-2026-64428"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274039 for CVE-2026-64428",
          "url": "https://bugzilla.suse.com/1274039"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64428"
    },
    {
      "cve": "CVE-2026-64435",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64435"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\naudit: Fix data races of skb_queue_len() readers on audit_queue\n\nMultiple readers access audit_queue.qlen via skb_queue_len() without\nholding the queue lock or using READ_ONCE(), while kauditd writes to\nthis field via the skb_dequeue() -\u003e __skb_unlink() path with WRITE_ONCE()\nprotected by a spinlock. This constitutes data races.\n\nAll affected skb_queue_len(\u0026audit_queue) call sites:\n  - kauditd_thread() wait_event_freezable() condition\n  - audit_receive_msg() AUDIT_GET handler (s.backlog assignment)\n  - audit_receive() backlog check\n  - audit_log_start() backlog check and pr_warn()\n\nKCSAN reports the following conflicting access pattern (one example):\n==================================================================\nBUG: KCSAN: data-race in audit_log_start / skb_dequeue\n\nwrite (marked) to 0xffffffff8512ee20 of 4 bytes by task 661 on cpu 57:\n skb_dequeue+0x70/0xf0\n kauditd_send_queue+0x71/0x220\n kauditd_thread+0x1cb/0x430\n kthread+0x1c2/0x210\n ret_from_fork+0x162/0x1a0\n ret_from_fork_asm+0x1a/0x30\n\nread to 0xffffffff8512ee20 of 4 bytes by task 36586 on cpu 1:\n audit_log_start+0x2a0/0x6b0\n audit_core_dumps+0x64/0xa0\n do_coredump+0x14b/0x1260\n get_signal+0xeb2/0xf70\n arch_do_signal_or_restart+0x41/0x170\n exit_to_user_mode_loop+0xa2/0x1c0\n do_syscall_64+0x1a3/0x1c0\n entry_SYSCALL_64_after_hwframe+0x76/0xe0\n\nvalue changed: 0x00000001 -\u003e 0x00000000\n==================================================================\n\nResolve the race by switching to lockless helper skb_queue_len_lockless(),\nwhich internally uses READ_ONCE() and properly pairs with the WRITE_ONCE()\nwrite accesses already present on the writer side.\n\n[PM: line length tweak]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64435",
          "url": "https://www.suse.com/security/cve/CVE-2026-64435"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274080 for CVE-2026-64435",
          "url": "https://bugzilla.suse.com/1274080"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64435"
    },
    {
      "cve": "CVE-2026-64461",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64461"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: mediatek: Fix IRQ domain leak when port fails to enable\n\nWhen mtk_pcie_enable_port() fails, mtk_pcie_port_free() removes the port\nfrom pcie-\u003eports and frees the port structure. However, the IRQ domains set\nup earlier by mtk_pcie_init_irq_domain() are never freed.\n\nFix this by refactoring mtk_pcie_irq_teardown() into a per-port helper,\nmtk_pcie_irq_teardown_port(), and calling it from mtk_pcie_setup() when\nmtk_pcie_enable_port() fails. Since the IRQ teardown must only happen in\nthe probe error path (during resume, child devices may have active MSI\nmappings and the NOIRQ context prohibits sleeping locks),\nmtk_pcie_enable_port() is changed to return an error code so callers can\ndistinguish the two paths and act accordingly.\n\nThis issue was reported by Sashiko while reviewing the EcoNet EN7528 SoC\nsupport series.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64461",
          "url": "https://www.suse.com/security/cve/CVE-2026-64461"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273865 for CVE-2026-64461",
          "url": "https://bugzilla.suse.com/1273865"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64461"
    },
    {
      "cve": "CVE-2026-68233",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68233"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Shut down BO cache timer before teardown\n\nThe BO cache timer callback schedules time_work, and time_work can rearm\nthe timer through vc4_bo_cache_free_old().\n\nvc4_bo_cache_destroy() deletes the timer and then cancels the work, which\ndoes not break that cycle: the work being cancelled can rearm the timer,\nand the timer then queues work again after teardown.\n\nUse timer_shutdown_sync() instead, so the timer cannot be rearmed and the\ncycle ends with cancel_work_sync().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68233",
          "url": "https://www.suse.com/security/cve/CVE-2026-68233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275644 for CVE-2026-68233",
          "url": "https://bugzilla.suse.com/1275644"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-68233"
    },
    {
      "cve": "CVE-2026-68241",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68241"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/mst: limit DP MST ESI service loop\n\nThe loop in intel_dp_check_mst_status() keeps servicing interrupts\noriginating from the sink without bound. Add an upper bound to the new\ninterrupts occurring during interrupt processing to not get stuck on\npotentially stuck sink devices. Use arbitrary 32 tries to clear incoming\ninterrupts in one go.\n\nDiscovered using AI-assisted static analysis confirmed by Intel Product\nSecurity.\n\nNote: The condition likely pre-dates the commit in the Fixes: tag, but\nthis is about as far back as a backport has any chance of\nsucceeding. Before that, the retry had a goto.\n\n(cherry picked from commit b4ea5272133059acb493cc36599071a9e852ec2e)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68241",
          "url": "https://www.suse.com/security/cve/CVE-2026-68241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275785 for CVE-2026-68241",
          "url": "https://bugzilla.suse.com/1275785"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-68241"
    },
    {
      "cve": "CVE-2026-68242",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68242"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gt: Fix NULL deref on sched_engine alloc failure\n\nAvoid using intel_context_put() before intel_context_init() in\nexeclists_create_virtual() as the kref_put() inside would lead\nto NULL deref on the IOCTL path when sched_engine allocation fails.\n\nDiscovered using AI-assisted static analysis confirmed by\nIntel Product Security.\n\n(cherry picked from commit 4f2a12f2d50e9f48227656e4dcbd6423506be31d)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68242",
          "url": "https://www.suse.com/security/cve/CVE-2026-68242"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275786 for CVE-2026-68242",
          "url": "https://bugzilla.suse.com/1275786"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-68242"
    },
    {
      "cve": "CVE-2026-68323",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68323"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: serialize udp bearer replicast list updates\n\ntipc_udp_rcast_add() and cleanup_bearer() both update ub-\u003ercast.list with\nlist_add_rcu() / list_del_rcu(), but nothing serializes them. The add runs\nfrom the encap receive softirq (via tipc_udp_rcast_disc()) without\nrtnl_lock(), so it can race the cleanup delete and corrupt the list:\n\n  list_del corruption. prev-\u003enext should be ffff8880298d7ab8,\n    but was ffff88802449ad38. (prev=ffff888027e3ec98)\n  kernel BUG at lib/list_debug.c:62!\n  RIP: __list_del_entry_valid_or_report+0x17a/0x200\n  Workqueue: events cleanup_bearer\n  Call Trace:\n   cleanup_bearer (net/tipc/udp_media.c:811)\n   process_one_work (kernel/workqueue.c:3302)\n   worker_thread (kernel/workqueue.c:3466)\n\nThe bearer can be enabled from an unprivileged user namespace, as the\nTIPCv2 generic-netlink ops carry no GENL_ADMIN_PERM.\n\nAdd a spinlock to struct udp_bearer and take it around the list_add_rcu()\nin tipc_udp_rcast_add() and the list_del_rcu() loop in cleanup_bearer() so\nthe two writers can no longer corrupt the list.\n\nReject a duplicate peer under the same lock before allocating, and remove\ntipc_udp_is_known_peer(). The old lockless pre-check in\ntipc_udp_rcast_disc() was racy: two softirqs discovering the same peer\ncould both find it absent and add it twice.\n\ncleanup_bearer() runs from a workqueue after tipc_udp_disable() clears the\nbearer\u0027s up bit, so an encap softirq can still reach tipc_udp_rcast_add()\nand add a peer after cleanup_bearer() has already emptied the list, leaking\nthat entry when the bearer is freed. Mark the bearer disabled under\nrcast_lock once the list is emptied and refuse further additions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68323",
          "url": "https://www.suse.com/security/cve/CVE-2026-68323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274653 for CVE-2026-68323",
          "url": "https://bugzilla.suse.com/1274653"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-68323"
    },
    {
      "cve": "CVE-2026-72015",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72015"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/resctrl: Fix double-add of pseudo-locked region\u0027s RMID to free list\n\nA pseudo-locked group\u0027s RMID is freed when it is created. On unmount\nrmdir_all_sub() unconditionally frees all RMID of all groups, resulting\nin a double-free of the pseudo-locked group\u0027s RMID. The consequence of this\nis that the original free results in the pseudo-locked group\u0027s RMID being\nadded to the rmid_free_lru linked list and the second free then attempts\nto add the same RMID entry to the rmid_free_lru again.\n\nDo not double-free a pseudo-locked group\u0027s RMID.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72015",
          "url": "https://www.suse.com/security/cve/CVE-2026-72015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276791 for CVE-2026-72015",
          "url": "https://bugzilla.suse.com/1276791"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72015"
    },
    {
      "cve": "CVE-2026-72040",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72040"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: fix refcount leak in i_ipmi_request()\n\nWhen a caller provides a `supplied_recv` message to i_ipmi_request(),\nthe function increments the user\u0027s `nr_msgs` reference count. If an\nerror occurs later, the out_err cleanup path only frees the recv_msg\nif the function allocated it itself (i.e., !supplied_recv). In the\nsupplied_recv case the cleanup is skipped, leaving the reference count\nelevated. The caller ipmi_request_supply_msgs() does not release the\nsupplied_recv on error, so the reference is permanently leaked.\n\nFix this by explicitly reverting the reference count operations when a\nsupplied recv_msg with a valid user pointer is present in the error\npath: decrement nr_msgs and drop the user\u0027s kref.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72040",
          "url": "https://www.suse.com/security/cve/CVE-2026-72040"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276836 for CVE-2026-72040",
          "url": "https://bugzilla.suse.com/1276836"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72040"
    },
    {
      "cve": "CVE-2026-72041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nespintcp: use sk_msg_free_partial to fix partial send\n\nsk_msg_free_partial() ensures consistency of the skmsg at every\niteration, without having to manually handle uncharges and offsets.\nThis simplifies the code, and fixes some bugs in skmsg accounting when\nwe don\u0027t send the full contents.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72041",
          "url": "https://www.suse.com/security/cve/CVE-2026-72041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275510 for CVE-2026-72041",
          "url": "https://bugzilla.suse.com/1275510"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72041"
    },
    {
      "cve": "CVE-2026-72081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: elx: efct: Fix I/O leak on unsupported additional CDB\n\nefct_dispatch_fcp_cmd() allocates an efct_io before dispatching an\nunsolicited FCP command. If the command has an unsupported additional\nCDB, the function returns -EIO before handing the IO to the SCSI layer.\n\nFree the allocated IO before returning from this error path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72081",
          "url": "https://www.suse.com/security/cve/CVE-2026-72081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277174 for CVE-2026-72081",
          "url": "https://bugzilla.suse.com/1277174"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72081"
    },
    {
      "cve": "CVE-2026-72110",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72110"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf,fork: wipe -\u003ebpf_storage before bailouts that access it\n\nCurrently, copy_process() can bail out to free_task() before p-\u003ebpf_storage\nhas been initialized, with this call graph (shown here for the\n!CONFIG_MEMCG case):\n\ncopy_process\n  dup_task_struct\n    arch_dup_task_struct\n      [copies the entire task_struct, including -\u003ebpf_storage member]\n  [RLIMIT_NPROC check fails]\n  delayed_free_task\n    free_task\n      bpf_task_storage_free\n        rcu_dereference(task-\u003ebpf_storage)\n        bpf_local_storage_destroy\n\nIn this case, the nascent task\u0027s -\u003ebpf_storage member that\nbpf_local_storage_destroy() operates on is a plain copy of the parent\u0027s\n-\u003ebpf_storage pointer, not a real initialized pointer.\nThis leads to badness (kernel hangs, UAF).\n\nThis is reachable as long as the process calling fork() has been inserted\ninto a task storage map.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72110",
          "url": "https://www.suse.com/security/cve/CVE-2026-72110"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277357 for CVE-2026-72110",
          "url": "https://bugzilla.suse.com/1277357"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277363 for CVE-2026-72110",
          "url": "https://bugzilla.suse.com/1277363"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72110"
    },
    {
      "cve": "CVE-2026-72172",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72172"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mm_init: fix uninitialized struct pages for ZONE_DEVICE\n\nIf DAX memory is hotplugged into an unoccupied subsection of an early\nsection, section_activate() reuses the unoptimized boot memmap.  However,\ncompound_nr_pages() still assumes that vmemmap optimization is in effect\nand initializes only the reduced number of struct pages.  As a result, the\nremaining tail struct pages are left uninitialized, which can later lead\nto unexpected behavior or crashes.\n\nFix this by treating early sections as unoptimized when calculating how\nmany struct pages to initialize.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72172",
          "url": "https://www.suse.com/security/cve/CVE-2026-72172"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277691 for CVE-2026-72172",
          "url": "https://bugzilla.suse.com/1277691"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72172"
    },
    {
      "cve": "CVE-2026-72174",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72174"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole()\n\nA PAGEMAP_SCAN ioctl requesting PM_SCAN_WP_MATCHING on a hugetlb VMA hangs\nthe calling thread, unkillably, as soon as the scan reaches an unpopulated\npart of the range:\n\n  do_pagemap_scan()\n    walk_page_range()\n      walk_hugetlb_range()\n        hugetlb_vma_lock_read()           # take the vma lock for read ...\n        pagemap_scan_pte_hole()           # ... -\u003epte_hole() for a hole\n          uffd_wp_range()\n            change_protection()\n              hugetlb_change_protection()\n                hugetlb_vma_lock_write()  # ... and block taking it for write\n\nwalk_hugetlb_range() holds the hugetlb vma lock for read across the whole\nwalk.  A present entry goes to -\u003ehugetlb_entry(); an unpopulated one goes\nto -\u003epte_hole(), i.e.  pagemap_scan_pte_hole().  To write-protect the hole\nthat handler calls uffd_wp_range(), which on a hugetlb VMA reaches\nhugetlb_change_protection() and takes the same vma lock for write.  The\nthread then blocks in down_write() waiting for the read lock it is itself\nholding.\n\nThe populated path avoids this: pagemap_scan_hugetlb_entry()\nwrite-protects the entry inline under the page-table lock and never enters\nhugetlb_change_protection().\n\nDo the same for holes.  Fault in the page table and install the uffd-wp\nmarker directly with make_uffd_wp_huge_pte() under the page-table lock,\nrather than routing through uffd_wp_range().  That is the same sequence\nhugetlb_change_protection() runs for an unpopulated entry, minus the vma\nwrite lock -- which is safe to skip because PMD sharing is disabled on\nuffd-wp VMAs (hugetlb_unshare_all_pmds() runs at registration), leaving\nnothing for that lock to serialise against.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72174",
          "url": "https://www.suse.com/security/cve/CVE-2026-72174"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277695 for CVE-2026-72174",
          "url": "https://bugzilla.suse.com/1277695"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72174"
    },
    {
      "cve": "CVE-2026-72212",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72212"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/memory_hotplug: fix incorrect altmap passing in error path\n\nIn create_altmaps_and_memory_blocks(), when arch_add_memory() succeeds\nwith memmap_on_memory enabled, the vmemmap pages are allocated from\nparams.altmap.  If create_memory_block_devices() subsequently fails, the\nerror path calls arch_remove_memory() with a NULL altmap instead of\nparams.altmap.\n\nThis is a bug that could lead to memory corruption.  Since altmap is NULL,\nvmemmap_free() falls back to freeing the vmemmap pages into the system\nbuddy allocator via free_pages() instead of the altmap. \narch_remove_memory() then immediately destroys the physical linear mapping\nfor this memory.  This injects unowned pages into the buddy allocator,\ncausing machine checks or memory corruption if the system later attempts\nto allocate and use those freed pages.\n\nFix this by passing params.altmap to arch_remove_memory() in the error\npath.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72212",
          "url": "https://www.suse.com/security/cve/CVE-2026-72212"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277602 for CVE-2026-72212",
          "url": "https://bugzilla.suse.com/1277602"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72212"
    },
    {
      "cve": "CVE-2026-72213",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72213"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch\n\nIn alloc_hugetlb_folio(), a single h_cg pointer is used for both the rsvd\nand non-rsvd hugetlb cgroup charges.  When map_chg is set,\nhugetlb_cgroup_charge_cgroup_rsvd() stores the charged cgroup in h_cg, but\nthe immediately following hugetlb_cgroup_charge_cgroup() overwrites h_cg\nwith the non-rsvd cgroup pointer.\n\nAs a result, hugetlb_cgroup_commit_charge_rsvd() stores the wrong\n(non-rsvd) cgroup pointer into the folio\u0027s rsvd slot.\n\nWhen the folio is later freed, free_huge_folio() unconditionally calls\nboth hugetlb_cgroup_uncharge_folio() and\nhugetlb_cgroup_uncharge_folio_rsvd().  The rsvd uncharge reads back the\nwrong cgroup from the folio and decrements a counter that was never\ncharged for that cgroup, causing a page_counter underflow:\n\n  page_counter underflow: -512 nr_pages=512\n  WARNING: mm/page_counter.c:61 at page_counter_cancel\n\nFix this by introducing a separate h_cg_rsvd pointer exclusively for the\nrsvd charge path, keeping the rsvd and non-rsvd charges fully independent\nthrough their charge, commit, and error uncharge paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72213",
          "url": "https://www.suse.com/security/cve/CVE-2026-72213"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277603 for CVE-2026-72213",
          "url": "https://bugzilla.suse.com/1277603"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72213"
    },
    {
      "cve": "CVE-2026-72236",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72236"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()\n\nev variable is userspace controlled via event-\u003eattr.config and used\nas an array index after bounds checking, but without speculation\nbarriers.\n\nAdd the missing array_index_nospec() call to prevent speculative\nexecution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72236",
          "url": "https://www.suse.com/security/cve/CVE-2026-72236"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277614 for CVE-2026-72236",
          "url": "https://bugzilla.suse.com/1277614"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72236"
    },
    {
      "cve": "CVE-2026-72250",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72250"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag\n\nnf_ct_frag6_reasm() slides the packet head forward to drop the IPv6\nfragment header and then unconditionally advances skb-\u003emac_header:\n\n\tskb-\u003emac_header += sizeof(struct frag_hdr);\n\nOn the NF_INET_LOCAL_OUT defrag path the skb has no link-layer header\nyet, so skb-\u003emac_header is still the \"not set\" sentinel (u16)~0U. Adding\nsizeof(struct frag_hdr) wraps it to a small value (0xffff + 8 == 7),\nafter which skb_mac_header_was_set() wrongly reports a MAC header is\npresent and skb_mac_header() points into the headroom.\n\nThe reassembler has done this unconditional add since it was introduced;\nit was harmless while mac_header was a bare pointer, but wrong once\nmac_header became a u16 offset whose unset state is the ~0U sentinel\ntested by skb_mac_header_was_set(). The sibling net/ipv6/reassembly.c\ndoes the same relocation and does guard the adjustment; mirror the\nguard here.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72250",
          "url": "https://www.suse.com/security/cve/CVE-2026-72250"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277663 for CVE-2026-72250",
          "url": "https://bugzilla.suse.com/1277663"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72250"
    },
    {
      "cve": "CVE-2026-72253",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72253"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_sip: validate skb_dst() before accessing it\n\ntc ingress and openvswitch do not guarantee routing information to be\navailable. These subsystems use the conntrack helper infrastructure, and\nthe SIP helper relies on the skb_dst() to be present if\nsip_external_media is set to 1 (which is disabled by default as a module\nparameter).\n\nThis effectively disables the sip_external_media toggle for these\nsubsystems without resulting in a crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72253",
          "url": "https://www.suse.com/security/cve/CVE-2026-72253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277665 for CVE-2026-72253",
          "url": "https://bugzilla.suse.com/1277665"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72253"
    },
    {
      "cve": "CVE-2026-72305",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72305"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nVDUSE: avoid leaking information to userspace\n\nThe bounceing is not necessarily page aligned, so current VDUSE can\nleak kernel information through mapping bounce pages to\nuserspace. Allocate bounce pages with __GFP_ZERO to avoid leaking\ninformation to userspace.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72305",
          "url": "https://www.suse.com/security/cve/CVE-2026-72305"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277747 for CVE-2026-72305",
          "url": "https://bugzilla.suse.com/1277747"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-72305"
    },
    {
      "cve": "CVE-2026-72319",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72319"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: ensure inner headers in ICMP errors are in headroom\n\nSashiko points out that after stripping the outer headers\nwith pskb_pull() we should ensure the inner IP headers\nin ICMP errors from tunnels are present in the skb headroom\nfor functions like ipv4_update_pmtu(), icmp_send() and\nIP_VS_DBG().\n\nAlso, add more checks for the length of the inner headers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72319",
          "url": "https://www.suse.com/security/cve/CVE-2026-72319"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275964 for CVE-2026-72319",
          "url": "https://bugzilla.suse.com/1275964"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72319"
    },
    {
      "cve": "CVE-2026-72355",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72355"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix barriering when walking subrequest list\n\nFix the barriering used when walking the subrequest list in retry as\nthere\u0027s a possibility of seeing a subreq that\u0027s just been added by the\napplication thread.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72355",
          "url": "https://www.suse.com/security/cve/CVE-2026-72355"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276330 for CVE-2026-72355",
          "url": "https://bugzilla.suse.com/1276330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72355"
    },
    {
      "cve": "CVE-2026-72405",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72405"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync\n\nYue Sun reported a use-after-free and debugobjects warning in\nudp_tunnel_nic_device_sync_work() during concurrent device operations.\n\nThe workqueue core clears the internal pending bit before invoking the\nworker. At that point, a concurrent thread can queue the work again.\nWhen the already running worker eventually clears the work_pending flag\nto 0, it mistakenly clears the flag for the newly queued instance.\nudp_tunnel_nic_unregister() then observes work_pending as 0 and frees\nthe structure while the second work item is still active in the queue,\nleading to UAF.\n\nFix this by returning early in udp_tunnel_nic_device_sync() if\nwork_pending is already set, preventing redundant work queueing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72405",
          "url": "https://www.suse.com/security/cve/CVE-2026-72405"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278033 for CVE-2026-72405",
          "url": "https://bugzilla.suse.com/1278033"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72405"
    },
    {
      "cve": "CVE-2026-72493",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72493"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: serialize netif_running() check in enqueue_to_backlog()\n\nSyzbot reported a KASAN slab-use-after-free in fib_rules_lookup().\n\nThe root cause is a race condition where packets can escape the backlog\nflushing during device unregistration (e.g., during netns exit).\n\nCommit e9e4dd3267d0 (\"net: do not process device backlog during unregistration\")\nintroduced a lockless netif_running() check in enqueue_to_backlog() to\nprevent queuing packets to an unregistering device.\n\nHowever, this creates a TOCTOU race window.\n\nA lockless transmitter (like veth_xmit) can pass\nthe check before dev_close() clears IFF_UP. If the transmitter is then\ndelayed, flush_all_backlogs() can run and finish before the transmitter\ngrabs the backlog lock and queues the packet. The packet then escapes\nthe flush and triggers UAF later when processed.\n\nFix this by moving the netif_running() check inside the backlog lock.\nThis serializes the check with the flush work (which also grabs the lock).\nWe then either queue the packet before the flush runs (so it gets flushed),\nor check netif_running() after the flush/close completes (so it gets dropped).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72493",
          "url": "https://www.suse.com/security/cve/CVE-2026-72493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276951 for CVE-2026-72493",
          "url": "https://bugzilla.suse.com/1276951"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276959 for CVE-2026-72493",
          "url": "https://bugzilla.suse.com/1276959"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72493"
    },
    {
      "cve": "CVE-2026-74306",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74306"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/qat: fix f_pos race in qat_vf_resume_write()\n\nqat_vf_resume_write() checks filp-\u003ef_pos before taking migf-\u003elock, but\ncopies into the migration-state buffer after taking the lock and\nre-reading the shared file position.\n\nTwo concurrent writers could therefore pass the bounds check with the\nold offset, then have the second writer copy after the first advanced\nf_pos, writing past the end of the migration-state buffer.\n\nTake migf-\u003elock before doing the boundary checks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74306",
          "url": "https://www.suse.com/security/cve/CVE-2026-74306"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276907 for CVE-2026-74306",
          "url": "https://bugzilla.suse.com/1276907"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74306"
    },
    {
      "cve": "CVE-2026-74312",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74312"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvhost/vdpa: validate virtqueue index in mmap and fault paths\n\nvhost_vdpa_mmap() and vhost_vdpa_fault() use vma-\u003evm_pgoff as a\nvirtqueue index for get_vq_notification(), but they do not validate\nthat the index is smaller than v-\u003envqs.\n\nThe ioctl path already performs both a bounds check and\narray_index_nospec(), but the mmap/fault path only checks that the\nindex fits in u16. This allows an out-of-range queue index to reach\ndriver-specific get_vq_notification() callbacks.\n\nFix this by extracting a unified vhost_vdpa_get_vq_notification()\nhelper that validates the queue index against v-\u003envqs and applies\narray_index_nospec() before calling the driver callback. Both the\nmmap and fault paths use this helper, and the bounds checking is\nconsolidated into a single location.\n\nFrom source inspection, the most defensible impact is out-of-bounds\naccess in the callback path, potentially leading to invalid PFN\nremaps and crash/DoS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74312",
          "url": "https://www.suse.com/security/cve/CVE-2026-74312"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276873 for CVE-2026-74312",
          "url": "https://bugzilla.suse.com/1276873"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74312"
    },
    {
      "cve": "CVE-2026-74368",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74368"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic()\n\nIn ath12k_wifi7_dp_rx_h_verify_tkip_mic(), the call to\nath12k_dp_rx_check_nwifi_hdr_len_valid() may return false when the\nNWIFI header length is invalid, causing the function to abort early with\n-EINVAL.\n\nWhen this happens, the error propagates to\nath12k_wifi7_dp_rx_h_defrag(), which clears first_frag by setting it\nto NULL. As a result, the corresponding MSDU is no longer referenced\nby the defragmentation path and is never freed.\n\nThis leads to a memory leak for the affected MSDU on this error path.\nProper cleanup is required to ensure the MSDU is released when header\nvalidation fails during TKIP MIC verification.\n\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74368",
          "url": "https://www.suse.com/security/cve/CVE-2026-74368"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277103 for CVE-2026-74368",
          "url": "https://bugzilla.suse.com/1277103"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74368"
    },
    {
      "cve": "CVE-2026-74379",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74379"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndax/kmem: account for partial discontiguous resource upon removal\n\nWhen dev_dax_kmem_probe() partially succeeds (at least one range is\nmapped) but a subsequent range fails request_mem_region() or\nadd_memory_driver_managed(), the probe silently continues, ultimately\nreturning success, but with the corresponding range resource NULL\u0027ed out.\n\ndev_dax_kmem_remove() iterates over all dax_device ranges regardless of if\nthe underlying resource exists.  When remove_memory() is called later, it\nreturns 0 because the memory was never added which causes\ndev_dax_kmem_remove() to incorrectly assume the (nonexistent) resource can\nbe removed and attempts cleanup on a NULL pointer.\n\nFix this by skipping these ranges altogether, noting that these cases are\nconsidered success, such that the cleanup is still reached when all\nactually-added ranges are successfully removed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74379",
          "url": "https://www.suse.com/security/cve/CVE-2026-74379"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278232 for CVE-2026-74379",
          "url": "https://bugzilla.suse.com/1278232"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74379"
    },
    {
      "cve": "CVE-2026-74544",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74544"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_u32: validate offshift to prevent shift-out-of-bounds\n\nu32_change() copies the user-provided tc_u32_sel.offshift (unsigned char,\n0-255) into the kernel knode object without bounds validation. When a\npacket later hits u32_classify() with TC_U32_VAROFFSET set, it evaluates\n`ntohs(offmask \u0026 *data) \u003e\u003e offshift` where the left operand is a 16-bit\nvalue promoted to a 32-bit int. Any offshift \u003e= 32 is undefined behavior\nper C11 6.5.7p3, triggerable by an unprivileged user via user/network\nnamespaces.\n\nUBSAN: shift-out-of-bounds in net/sched/cls_u32.c:236:43\nshift exponent 32 is too large for 32-bit type int\n\nFix this by rejecting offshift \u003e= 16 during filter creation in\nu32_change().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74544",
          "url": "https://www.suse.com/security/cve/CVE-2026-74544"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277894 for CVE-2026-74544",
          "url": "https://bugzilla.suse.com/1277894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74544"
    },
    {
      "cve": "CVE-2026-74578",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74578"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_skcipher - force synchronous processing on trees without ctx-\u003estate\n\nThe AIO/async path in skcipher_recvmsg() passes the socket-wide ctx-\u003eiv\ndirectly into the skcipher request. After io_submit() the socket lock is\ndropped and the request is processed asynchronously, so a concurrent\nsendmsg(ALG_SET_IV) can overwrite ctx-\u003eiv and make the in-flight request\nrun under an attacker-controlled IV. For CTR/stream modes this is\nIV/keystream reuse and lets an unprivileged user recover the plaintext of\na concurrent operation.\n\nSnapshotting ctx-\u003eiv into per-request storage for the async path is not\nsufficient. For ciphers with statesize == 0 - which includes cbc and ctr -\nthe MSG_MORE inter-chunk IV chaining is carried solely by the in-place\nreq-\u003eiv writeback, which a snapshot redirects into per-request memory that\naf_alg_free_resources() releases on completion, silently producing wrong\noutput. Writing the IV back from the completion callback instead is not\npossible either: that would require lock_sock() there, but the callback can\nrun in softirq/atomic context, so it must not sleep.\n\nMake the operation synchronous instead, which removes both the IV race and\nany writeback race. This is equivalent to the upstream resolution, commit\nfcc77d33a34c (\"net: Remove support for AIO on sockets\"), which removed the\nAIO socket path across net/ entirely and so produces the same end state for\nthis file. This patch deviates from that commit deliberately: rather than\nremoving AIO socket support tree-wide, which would be far too invasive for\nstable, it removes only the AIO branch in crypto/algif_skcipher.c.\nio_submit() now completes synchronously; AF_ALG async is rarely used in\npractice.\n\nThe -EIOCBQUEUED check in skcipher_recvmsg() is now dead but harmless,\nand is left alone to keep the fix minimal.\n\nTested on 6.6.y: attacker IV injection dropped from 2296/200000 to 0/200000\nafter the change; MSG_MORE chunked CTR output bit-identical to single-shot.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74578",
          "url": "https://www.suse.com/security/cve/CVE-2026-74578"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275564 for CVE-2026-74578",
          "url": "https://bugzilla.suse.com/1275564"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74578"
    },
    {
      "cve": "CVE-2026-74583",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74583"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_route: fix fastmap use-after-free on filter\n\nThe route4 classifier maintains a 16-slot fastmap cache that stores raw\nstruct route4_filter pointers indexed by (id, iif). The reader\n(route4_classify) populates this cache via route4_set_fastmap() for every\nclassified packet that hits a filter. The writer (route4_delete,\nroute4_change) clears the cache via route4_reset_fastmap() before\nRCU-deferred kfree of the filter.\n\nThis creates a UAF race:\n 1. Reader walks the RCU-protected bucket chain, finds filter f\n 2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work()\n 3. Reader calls route4_set_fastmap() and writes f into the cache\n    *after* the writer\u0027s reset, caching a pointer about to be freed\n 4. After the RCU grace period, kfree(f) executes\n 5. Next classified packet on the same (id, iif) tuple hits the stale\n    fastmap entry and reads f-\u003eres from freed memory\n\nReproduced with an mdelay(100) accelerator in route4_set_fastmap() and a\nconcurrent add/delete stress test (provided by both zdi and Santosh).\nBoth triggered KASAN slab-use-after-free reports in the route4 fastmap\npaths.\n\nFix:\nIntroduce a per-filter boolean dying flag to suppress stale fastmap\nrepublishing by in-flight readers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74583",
          "url": "https://www.suse.com/security/cve/CVE-2026-74583"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277889 for CVE-2026-74583",
          "url": "https://bugzilla.suse.com/1277889"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74583"
    },
    {
      "cve": "CVE-2026-74587",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74587"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix use-after-free of cached ASCONF chunk\n\naddip_last_asconf caches the outstanding outbound ASCONF chunk. The normal\nASCONF-ACK completion path releases the chunk and clears the pointer.\n\nHowever, sctp_asconf_queue_teardown() releases the cached chunk without\nclearing addip_last_asconf. During peer restart handling,\nsctp_sf_do_dupcook_a() queues SCTP_CMD_PURGE_ASCONF_QUEUE, which invokes\nsctp_asconf_queue_teardown() while the association remains alive and leaves\nthe pointer dangling.\n\nA delayed authenticated ASCONF-ACK can then reach sctp_sf_do_asconf_ack(),\nwhich accesses the stale chunk and passes it to sctp_process_asconf_ack(),\ncausing a use-after-free and a second release.\n\nClearing the pointer exposes a race with T4 expiry. Peer restart handling\nqueues the timer stop before the purge, but SCTP_CMD_TIMER_STOP uses\ntimer_delete(), which does not wait for a callback already running on\nanother CPU. Such a callback can reach sctp_sf_t4_timer_expire() after\nthe purge and dereference NULL.\n\nClear addip_last_asconf after releasing the cached chunk, and make\nsctp_sf_t4_timer_expire() consume a stale T4 expiry if no outstanding\nASCONF remains.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74587",
          "url": "https://www.suse.com/security/cve/CVE-2026-74587"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277821 for CVE-2026-74587",
          "url": "https://bugzilla.suse.com/1277821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282644 for CVE-2026-74587",
          "url": "https://bugzilla.suse.com/1282644"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74587"
    },
    {
      "cve": "CVE-2026-74611",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74611"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: rx: restore msg_iter before TLS 1.3 optimistic retry\n\ntls_decrypt_sg() advances msg-\u003emsg_iter when it maps user pages for\nthe optimistic TLS 1.3 zero-copy path. If the decrypted record turns\nout not to be unpadded application data, tls_decrypt_sw() retries into\na kernel skb, but leaves the iterator advanced.\n\nThe subsequent copy from the skb then writes decrypted bytes again at\na later point in the caller iovecs while recvmsg() reports only the\npost-retry length. A TLS peer can trigger this after the receiver\nenables TLS_RX_EXPECT_NO_PAD.\n\nRevert the iterator by the number of bytes consumed by the optimistic\nmapping before retrying without zero-copy.\n\nAdd a selftest which sends a TLS 1.3 control record with\nTLS_RX_EXPECT_NO_PAD enabled and verifies that recvmsg() does not\noverwrite later iovecs beyond the returned length.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74611",
          "url": "https://www.suse.com/security/cve/CVE-2026-74611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277804 for CVE-2026-74611",
          "url": "https://bugzilla.suse.com/1277804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277807 for CVE-2026-74611",
          "url": "https://bugzilla.suse.com/1277807"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74611"
    },
    {
      "cve": "CVE-2026-74614",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74614"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: read virtqueues under worker locks\n\nCommit bd50c5dc182b (\"vsock/virtio: add support for device\nsuspend/resume\") made the *_run flags transition from false to true when\nrestore installs replacement virtqueues.  The RX, TX and event workers\nread their virtqueue before locking and checking the corresponding flag,\nso a worker delayed across freeze and restore can observe the replacement\nqueue\u0027s running state while retaining a pointer to the deleted queue.\n\nRead each virtqueue under its mutex after checking the run flag, keeping\nthe pointer and state in the same queue generation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74614",
          "url": "https://www.suse.com/security/cve/CVE-2026-74614"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277931 for CVE-2026-74614",
          "url": "https://bugzilla.suse.com/1277931"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74614"
    },
    {
      "cve": "CVE-2026-74624",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74624"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack: defer invalid log until after unlock\n\nTCP and SCTP conntrack paths can emit invalid-packet logs while ct-\u003elock\nis still held.\n\nWhen invalid logging is routed to nfnetlink_log and conntrack export is\nenabled, the log path can re-enter conntrack netlink glue and dump the\nsame conntrack again. Protocol attribute dumping may take ct-\u003elock, so\nlogging while holding that lock can deadlock.\n\nDefer the TCP invalid logs by storing only the minimal log context while\nct-\u003elock is held and emitting the log after unlocking. Also make the TCP\ntimeout-lowering invalid path return whether a log is needed, then emit\nthat log after unlocking.\n\nDo the same for the SCTP invalid state-transition log that can be reached\nwhile ct-\u003elock is held.\n\nAdd a lockdep assertion to nf_ct_l4proto_log_invalid() so future callers\nthat log invalid conntracks while holding ct-\u003elock are caught outside TCP\nand SCTP as well.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74624",
          "url": "https://www.suse.com/security/cve/CVE-2026-74624"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277599 for CVE-2026-74624",
          "url": "https://bugzilla.suse.com/1277599"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285756 for CVE-2026-74624",
          "url": "https://bugzilla.suse.com/1285756"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74624"
    },
    {
      "cve": "CVE-2026-74715",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74715"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix netns reference imbalance in conntrack kfuncs\n\nThe opts argument of the BPF conntrack kfuncs can point to a shared\nmap value.  __bpf_nf_ct_lookup() and __bpf_nf_ct_alloc_entry() read\nopts-\u003enetns_id separately when acquiring and releasing the network\nnamespace reference.\n\nThe reference imbalance can occur as follows:\n\n  CPU 0                                  CPU 1\n  read opts-\u003enetns_id (-1)\n  skip get_net_ns_by_id()\n                                         write opts-\u003enetns_id (id)\n  read opts-\u003enetns_id (id)\n  put_net(net) /* no matching get */\n\nThe reverse transition leaks the reference.  Repeating the unmatched put\ncan destroy a live namespace and crash later users.\n\nThe kernel reported:\n\n  Oops: general protection fault, probably for non-canonical address\n  KASAN: null-ptr-deref in range [0x00000000000000e8-0x00000000000000ef]\n  RIP: 0010:bpf_prog_test_run_xdp+0x52c/0x1700\n  Call Trace:\n   __sys_bpf+0x1662/0x50c0\n   __x64_sys_bpf+0x73/0xb0\n   do_syscall_64+0xf9/0x540\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n  Kernel panic - not syncing: Fatal exception\n\nSnapshot every input field of opts with READ_ONCE() before validating or\nusing it.  The netns_id snapshot keeps the namespace get/put pair\nbalanced, while the other snapshots keep the remaining options from\nchanging partway through an invocation.  The individual reads can still\nobserve an inconsistent combination during a concurrent update, but each\nselected field value remains stable for that invocation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74715",
          "url": "https://www.suse.com/security/cve/CVE-2026-74715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277890 for CVE-2026-74715",
          "url": "https://bugzilla.suse.com/1277890"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74715"
    },
    {
      "cve": "CVE-2026-80572",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80572"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: byd - synchronize timer deletion before freeing private data\n\nbyd_disconnect() uses timer_delete() before freeing the driver\u0027s private\ndata.  This does not wait for a running byd_clear_touch() callback, which\ndereferences the private data and its psmouse pointer.  A callback racing\nwith disconnect can therefore access the private data after it has been\nfreed.  The timer can also still be re-armed by byd_process_byte() while\nthe disconnect is in progress.\n\nUse timer_shutdown_sync() before freeing the private data: it waits for\na running callback and turns any later re-arm attempt into a no-op.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80572",
          "url": "https://www.suse.com/security/cve/CVE-2026-80572"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277338 for CVE-2026-80572",
          "url": "https://bugzilla.suse.com/1277338"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80572"
    },
    {
      "cve": "CVE-2026-80579",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80579"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: clear fb_info-\u003emode before deleting a videomode\n\nfb_set_var() can delete a mode from info-\u003emodelist when userspace\npasses FB_ACTIVATE_INV_MODE through FBIOPUT_VSCREENINFO. The code\nchecks that the mode being deleted is not the current info-\u003evar and\nthat fbcon is not using it, but it does not check fb_info-\u003emode.\n\nfb_info-\u003emode may still point into the modelist entry being deleted.\nIf the entry is freed, later mode sysfs reads through show_mode() can\ndereference a stale pointer.\n\nClear fb_info-\u003emode before calling fb_delete_videomode() when it\nmatches the mode being removed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80579",
          "url": "https://www.suse.com/security/cve/CVE-2026-80579"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277260 for CVE-2026-80579",
          "url": "https://bugzilla.suse.com/1277260"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80579"
    },
    {
      "cve": "CVE-2026-80893",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80893"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()\n\ncopy_hugetlb_page_range() clears the uffd-wp bit of migration and hwpoison\nentries with huge_pte_clear_uffd_wp(), which operates on the present-PTE\nbit position.  Swap entries keep the uffd-wp state elsewhere -- the\nmigration branch reads and sets it with pte_swp_uffd_wp() and\npte_swp_mkuffd_wp() -- and the present-PTE position falls into the swap\npayload.  On x86-64 it lands in the inverted swap offset, where a\nnaturally-aligned hugetlb PFN always has the affected bit set, so the\nclear advances the encoded PFN by two pages.\n\nNo userfaultfd needs to be involved: the clear is guarded only by the\nchild VMA not being uffd-wp registered, so a plain fork() with an\nin-flight hugetlb migration entry (or a poisoned hugetlb page) corrupts\nthe entry copied into the child.  Instrumenting the clear and forking\nafter MADV_HWPOISON on a 2MB anon hugetlb page shows:\n\n  offset before=120e00\n  offset after =120e02\n\nThe fallout is mostly latent: rmap walks match migration entries by folio\nrange and remove_migration_pte() rebuilds the PTE from the folio, so a\nwithin-folio PFN skew heals once migration completes.  But any path that\nre-encodes the corrupted offset -- e.g.  hugetlb_change_protection()\nrewriting a writable migration entry via\nmake_readable_migration_entry(swp_offset(entry)) -- propagates it.\n\nMigration entries legitimately carry uffd-wp, so clear it with\npte_swp_clear_uffd_wp(), matching copy_nonpresent_pte() and\nmove_huge_pte().\n\nA hwpoison entry, on the other hand, never carries the uffd-wp bit: it is\ninstalled fresh by make_hwpoison_entry() (try_to_unmap_one() does not\npreserve uffd-wp on the hwpoison path) and hugetlb_change_protection()\nleaves hwpoison entries untouched.  There was nothing to clear there, only\nthe corruption, so drop the clear entirely.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80893",
          "url": "https://www.suse.com/security/cve/CVE-2026-80893"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279706 for CVE-2026-80893",
          "url": "https://bugzilla.suse.com/1279706"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80893"
    },
    {
      "cve": "CVE-2026-80977",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80977"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error()\n\nskb_tx_error() completes the zerocopy uarg and clears\nSKBFL_ALL_ZEROCOPY, and skb_zcopy_downgrade_managed() clears\nSKBFL_MANAGED_FRAG_REFS. Both live in skb_shinfo(), which every clone\nshares, while the caller only owns the reference it is about to drop.\nThrough a clone it tells the producer its pages are free and drops\nSKBFL_SHARED_FRAG for an skb that is still in flight.\n\nOpen vSwitch reaches this with a non-last OVS_ACTION_ATTR_RECIRC:\nclone_execute() sends a skb_clone() into ovs_dp_process_packet() while\ndo_execute_actions() keeps forwarding the original, and skb_clone()\ndoes not privatise the frags here -- skb_orphan_frags() returns early\non SKBFL_DONT_ORPHAN. A flow miss on the clone then strips the marker\nfrom the packet still being forwarded, and a later local ESP delivery\ndecrypts in place over frags it does not own privately.\n\nSkip it for a cloned skb. Nothing is lost: skb_release_data() clears\nthe zerocopy state once the last reference to the shared data goes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80977",
          "url": "https://www.suse.com/security/cve/CVE-2026-80977"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280259 for CVE-2026-80977",
          "url": "https://bugzilla.suse.com/1280259"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280462 for CVE-2026-80977",
          "url": "https://bugzilla.suse.com/1280462"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80977"
    },
    {
      "cve": "CVE-2026-89528",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89528"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Reject Read lists that exceed the page budget\n\nIndividual Read segment lengths are validated at decode time, but\nnothing prevents a requester from sending multiple segments whose\ncumulative length exceeds the rq_pages array budget. When one\nsegment fills the page array exactly, the runtime guard in\nsvc_rdma_build_read_segment() is bypassed because len reaches zero.\nA subsequent segment then accesses the NULL sentinel slot at\nrq_pages[rq_maxpages], resulting in a NULL pointer dereference during\nDMA mapping.\n\nAccumulate pages across all Read segments and reject the message at\ndecode time when the total would overflow the page budget.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89528",
          "url": "https://www.suse.com/security/cve/CVE-2026-89528"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280743 for CVE-2026-89528",
          "url": "https://bugzilla.suse.com/1280743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280744 for CVE-2026-89528",
          "url": "https://bugzilla.suse.com/1280744"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89528"
    },
    {
      "cve": "CVE-2026-89558",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89558"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid10: fix still_degraded being inverted in raid10_sync_request()\n\nCommit fe6a19d40ceb (\"md/md-bitmap: merge md_bitmap_start_sync() into\nbitmap_operations\") converted still_degraded from int to bool, but\ninverted the assignment in the loop that checks whether the array will\nstill be degraded after the current device is recovered:\n\"still_degraded = 1\" became \"still_degraded = false\".\n\nAs a result, recovering a device while another mirror is still missing\ncalls md_bitmap_start_sync() with degraded == false, which clears bitmap\nbits that the still-missing device needs.  When that device is re-added,\nits bitmap-based recovery finds the bits already cleared and skips every\nregion written while the array was degraded, so it is marked In_sync\nwhile holding stale data: silent corruption.\n\nReproducer (raid10 near=2, 4 disks, internal bitmap):\n - fail and remove one disk of each mirror pair\n - write to the degraded array\n - re-add both disks and let recovery finish\n - \"check\" reports mismatch_cnt=262272 after 256 MiB of degraded\n   writes and file contents differ; the second disk\u0027s \"recovery\"\n   completes in milliseconds because everything is skipped\n\nThe same conversion in raid1 got it right (still_degraded = true).\nRestore the correct value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89558",
          "url": "https://www.suse.com/security/cve/CVE-2026-89558"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280552 for CVE-2026-89558",
          "url": "https://bugzilla.suse.com/1280552"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89558"
    },
    {
      "cve": "CVE-2026-89593",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89593"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhugetlb: only adjust reservation during unmapping if mapcount is 0\n\nSince df7a6d1f6405, __unmap_hugepage_range can adjust reservations.  In\nthe case of folio mapped in both a parent and a child, if the parent\nunmaps the range first, the reservation adjustment will result in an\nunderflow of the reserved count.  Once the child unmaps the range, the\ncount is restored.  Change __unmap_hugepage_range() to check the mapcount\nbefore adjusting the reservation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89593",
          "url": "https://www.suse.com/security/cve/CVE-2026-89593"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280229 for CVE-2026-89593",
          "url": "https://bugzilla.suse.com/1280229"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89593"
    },
    {
      "cve": "CVE-2026-89631",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89631"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject a tree connect response whose byte count is too small\n\nCIFSTCon() bounds its strnlen() over the byte area with the server\u0027s\nByteCount minus two, which for ByteCount 0 or 1 goes negative as an int\nand converts to a huge size_t.  The later subtraction wraps the __u16\nbytes_left, and that is what bounds cifs_strndup_from_utf16(): a bound of\nup to 65535 against a ~16 KB cifs_req_poolp object runs off the end of the\nslab object, and the bytes reach userspace through tcon-\u003enativeFileSystem\nin /proc/fs/cifs/DebugData.\n\nReject a byte area too small for what the parser consumes.  Two bytes is\nthe least it can consume, and no conformant response carries fewer.  The\nnew trace point is the 129th smb_eio_trace entry, which __mode(byte)\ncannot represent, so the attribute goes with it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89631",
          "url": "https://www.suse.com/security/cve/CVE-2026-89631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280496 for CVE-2026-89631",
          "url": "https://bugzilla.suse.com/1280496"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280498 for CVE-2026-89631",
          "url": "https://bugzilla.suse.com/1280498"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89631"
    },
    {
      "cve": "CVE-2026-89636",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89636"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: clear ce-\u003etgthint in free_tgts()\n\nWhen free_tgts() frees all structures in ce-\u003etlist, ce-\u003etgthint\nis left pointing to one of the freed cache_dfs_tgt structures.\n\nIf ce-\u003etgthint is not reset before it is used later, it results\nin a use-after-free.\n\nSet ce-\u003etgthint to NULL in free_tgts() after the elements are\nfreed to reflect that no elements remain.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89636",
          "url": "https://www.suse.com/security/cve/CVE-2026-89636"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281042 for CVE-2026-89636",
          "url": "https://bugzilla.suse.com/1281042"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281043 for CVE-2026-89636",
          "url": "https://bugzilla.suse.com/1281043"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89636"
    },
    {
      "cve": "CVE-2026-89640",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89640"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix loff_t underflow in cifs_remap_file_range() when len == 0\n\nWith len == 0 (clone to EOF), the effective length is computed as:\n\n    len = src_inode-\u003ei_size - off;\n\nIf off \u003e i_size, this is a negative loff_t, corrupting the ByteCount\nin the FSCTL_DUPLICATE_EXTENTS_TO_FILE request and inverting the range\nin filemap_write_and_wait_range().  The existing off \u003e= i_size check\nfires only after the ioctl has already been sent.\n\nSnapshot i_size_read() once for both the bounds check and the length\ncalculation, eliminating the TOCTOU and 32-bit torn-read risk.  Reject\noff \u003e src_size with -EINVAL.  Treat off == src_size as a no-op,\nconsistent with __generic_remap_file_range_prep().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89640",
          "url": "https://www.suse.com/security/cve/CVE-2026-89640"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280950 for CVE-2026-89640",
          "url": "https://bugzilla.suse.com/1280950"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89640"
    },
    {
      "cve": "CVE-2026-89754",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89754"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/pagewalk: fix stale walk-\u003eaction escaping walk_pmd_range()\n\nIf -\u003epmd_entry() sets walk-\u003eaction = ACTION_AGAIN, the pmd_none() check is\nretried.  The PMD entry may be cleared at the point of retry.\n\nIn this case, if walk-\u003eops-\u003einstall_pte is not specified, the code\ncontinues to the next PMD entry in the range without resetting\nwalk-\u003eaction to ACTION_SUBTREE.\n\nThis leaves walk-\u003eaction erroneously set to ACTION_AGAIN, which is\nincorrect.\n\nThis was incorrect but not problematic up until commit 3b89863c3fa4\n(\"mm/pagewalk: fix race between concurrent split and refault\") which\nupdated walk_pud_range() to check for walk-\u003eaction == ACTION_AGAIN upon\nwalk_pmd_range()\u0027s return, causing the PUD walk to be retried.\n\nIn this case this results in duplicate walk callbacks being invoked,\nwhich is erroneous and will break any caller that is not idempotent\nwith respect to this (and waste time for those which are).  The result\nis an out-of-bounds write, triggered by a local fuzzer:\n\n[    2.272695] ==================================================================\n[    2.273471] BUG: KASAN: slab-out-of-bounds in __mincore_unmapped_range+0x14f/0x190\n[    2.274302] Write of size 1 at addr ffff888008d9b000 by task poc/106\n[    2.274966]\n[    2.275154] CPU: 0 UID: 1000 PID: 106 Comm: poc Not tainted 7.2.0-rc6-00429-ga7c7074b58d2 #55 PREEMPT(lazy)\n[    2.275159] Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[    2.275164] Call Trace:\n[    2.275170]  \u003cTASK\u003e\n[    2.275172]  dump_stack_lvl+0x53/0x70\n[    2.275200]  print_report+0xd0/0x630\n[    2.275210]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n[    2.275219]  ? irqentry_exit+0xd2/0x670\n[    2.275224]  ? irqentry_exit+0xd2/0x670\n[    2.275226]  ? __virt_addr_valid+0xef/0x1a0\n[    2.275239]  ? __mincore_unmapped_range+0x14f/0x190\n[    2.275242]  kasan_report+0xce/0x100\n[    2.275245]  ? __mincore_unmapped_range+0x14f/0x190\n[    2.275248]  __mincore_unmapped_range+0x14f/0x190\n[    2.275252]  mincore_unmapped_range+0x45/0x70\n[    2.275254]  walk_pgd_range+0xafc/0xfc0\n[    2.275261]  ? __pfx_walk_pgd_range+0x10/0x10\n[    2.275264]  ? __update_load_avg_se+0x3d1/0x670\n[    2.275275]  __walk_page_range+0xc0/0x310\n[    2.275278]  ? __pfx_find_vma+0x10/0x10\n[    2.275281]  ? finish_task_switch.isra.0+0x16d/0x4f0\n[    2.275290]  walk_page_range_mm_unsafe+0x26f/0x3a0\n[    2.275293]  ? __pfx_mtree_load+0x10/0x10\n[    2.275298]  ? __pfx_walk_page_range_mm_unsafe+0x10/0x10\n[    2.275302]  ? __free_frozen_pages+0x54d/0x7e0\n[    2.275308]  __do_sys_mincore+0x132/0x380\n[    2.275311]  do_syscall_64+0xf9/0x540\n[    2.275316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f\n[    2.275322] RIP: 0033:0x422ccd\n[    2.275326] Code: b3 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\n[    2.275329] RSP: 002b:00007fffffffec18 EFLAGS: 00000287 ORIG_RAX: 000000000000001b\n[    2.275337] RAX: ffffffffffffffda RBX: 0000000000000066 RCX: 0000000000422ccd\n[    2.275339] RDX: 00000000004d0940 RSI: 0000000001000000 RDI: 00007ffff4000000\n[    2.275340] RBP: 00000000004d0940 R08: 0000000000000100 R09: 0000000000000100\n[    2.275342] R10: 0000000000000100 R11: 0000000000000287 R12: 20c49ba5e353f7cf\n[    2.275343] R13: 00000000004990d3 R14: 0000000000000000 R15: 0000000000000001\n[    2.275346]  \u003c/TASK\u003e\n[    2.275347]\n[    2.296904] The buggy address belongs to the object at ffff888008d9b000\n[    2.296904]  which belongs to the cache sigqueue of size 80\n[    2.298151] The buggy address is located 0 bytes inside of\n[    2.298151]  allocated 80-byte region [ffff888008d9b000, ffff888008d9b050)\n[    2.299408]\n[    2.299601] The buggy address belongs to the physical page:\n[    2.300191] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8d9b\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89754",
          "url": "https://www.suse.com/security/cve/CVE-2026-89754"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280769 for CVE-2026-89754",
          "url": "https://bugzilla.suse.com/1280769"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285051 for CVE-2026-89754",
          "url": "https://bugzilla.suse.com/1285051"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89754"
    },
    {
      "cve": "CVE-2026-89755",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89755"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/migrate_device: clear stale mapping after freeing swapcache\n\n__migrate_device_pages() reads the folio mapping before calling\nfolio_free_swap().  When folio_free_swap() succeeds, the folio is removed\nfrom the swap cache, but the saved mapping still points to swap_space.\n\nPassing the stale mapping to folio_migrate_mapping() makes it use the\nmapped-folio path for a folio that is no longer in swapcache.  It can then\noperate on swap_space.i_pages with invalid reference accounting,\neventually triggering a folio reference count BUG.\n\nAfter a successful split, nr still contains the number of pages in the\noriginal large folio, although each resulting page is now a separate\norder-0 folio.  Reset nr to 1 so each split folio is processed separately,\nincluding its own swapcache removal and mapping lookup.\n\nRefresh the saved mapping after folio_free_swap() so the current folio\nstate is used during migration.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89755",
          "url": "https://www.suse.com/security/cve/CVE-2026-89755"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280770 for CVE-2026-89755",
          "url": "https://bugzilla.suse.com/1280770"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89755"
    },
    {
      "cve": "CVE-2026-89778",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89778"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nisofs: fix out-of-bounds page array access on empty zisofs block\n\nzisofs_uncompress_block()\u0027s empty-block fast path returns\npcount \u003c\u003c PAGE_SHIFT, ignoring the incoming poffset, unlike the\ndecompression path which returns bytes produced relative to poffset.\nzisofs_fill_pages() uses that return to advance its page cursor, so when\nthe zisofs block size is below PAGE_SIZE and a sub-page block leaves\npoffset partway into a page, a following empty block over-counts and\nadvances pages[] one element past its end, after which\n\"if (poffset \u0026\u0026 *pages)\" reads pages[1] out of bounds.  rock.c only\nrejects a block-size shift \u003e 17, so a crafted \"ZF\" Rock Ridge record can\nset it below PAGE_SHIFT; the bug is reached by an ordinary read() of a\ncompressed file on such a mounted ISO9660 image.\n\nReturn the byte count relative to poffset and zero only\n[poffset, PAGE_SIZE) of the first page, matching the decompression path.\nThe page-aligned case (poffset == 0) is unaffected.\n\n  BUG: KASAN: slab-out-of-bounds in zisofs_read_folio (fs/isofs/compress.c:290)\n  Read of size 8 at addr ffff88800f5eac48 by task exploit/142\n   zisofs_read_folio (fs/isofs/compress.c:290)\n   read_pages (mm/readahead.c:184)\n   ...\n   filemap_read (mm/filemap.c:2814)\n   vfs_read (fs/read_write.c:574)\n   __x64_sys_pread64 (fs/read_write.c:769)\n   do_syscall_64 (arch/x86/entry/syscall_64.c:94)\n   entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)\n  The buggy address is located 0 bytes to the right of the\n  allocated 8-byte region in the kmalloc-8 cache",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89778",
          "url": "https://www.suse.com/security/cve/CVE-2026-89778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280966 for CVE-2026-89778",
          "url": "https://bugzilla.suse.com/1280966"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89778"
    },
    {
      "cve": "CVE-2026-89811",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89811"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Add TLB flush after MES queue eviction/suspension\n\nMES (Micro Engine Scheduler) does not perform heavy-weight TLB\ninvalidation after unmapping queues, unlike HWS which does this\nautomatically. This causes a race condition where in-flight DMA\ndescriptors can access memory that has been unmapped, leading to page\nfaults and GPU queue hangs during SVM page migration.\n\nThe issue manifests as KFDSVMRangeTest.MultiThreadMigrationTest\nfailures on gfx1151 (Strix Point) with XNACK mode 1 enabled - the GPU\ncompute queue hangs with packets submitted but never consumed.\n\nAdd kfd_flush_tlb() calls after MES queue removal in two locations:\n- evict_process_queues_cpsch(): after all queues removed during eviction\n- suspend_queues(): after debug/criu queue suspension (with mem_fence barrier)\n\nThis ensures all in-flight memory accesses from unmapped queues are\nflushed before memory is freed or migrated.\n\n(cherry picked from commit f5c4f88e0f9c45a8fb9dfac0c1df726c95e41b77)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89811",
          "url": "https://www.suse.com/security/cve/CVE-2026-89811"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281144 for CVE-2026-89811",
          "url": "https://bugzilla.suse.com/1281144"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89811"
    },
    {
      "cve": "CVE-2026-89987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: transfer the pmd dirty bit to the folio on zap\n\nzap_huge_pmd_folio() propagates the pmd young bit to the folio for the\nfile case, but not the dirty bit.  The pte path does propagate it, in\nzap_present_folio_ptes() and so does the pmd split path, in\n__split_huge_pmd_locked().\n\nFor most file mappings the omission is harmless, because writing to a\nshared file mapping goes through page_mkwrite(), which dirties the folio. \ntmpfs is different: it has no page_mkwrite(), and vma_wants_writenotify()\nis false for it, so a *read* fault on a MAP_SHARED tmpfs mapping installs\na writable pmd via do_read_fault().  do_read_fault() does not call\nfault_dirty_shared_page(), so subsequent stores through that mapping set\nonly the hardware dirty bit in the pmd and never call folio_mark_dirty(). \nA shmem folio allocated by a fault is marked uptodate but not dirty (see\nthe clear: block in shmem_get_folio_gfp()), so PG_dirty is never set at\nall.\n\nUnmapping such a folio - munmap(), or exit_mmap() when the process dies -\nthen loses the only record that it was written, because zap_huge_pmd()\ndrops the pmd without transferring the dirty bit.  Reclaim afterwards sees\na clean shmem folio: the whole swap-out block in shrink_folio_list() is\ninside \"if (folio_test_dirty(folio))\", so pageout() is skipped and the\nfolio falls into __remove_mapping().  There, folio_is_file_lru() is false\nfor a swapbacked folio, so no shadow entry is created and\n__filemap_remove_folio(folio, NULL) simply empties the i_pages slot.  The\ndata is freed without ever being written to swap, and the next fault on\nthat index returns a freshly zeroed folio.\n\nThis is silent data loss for any process that keeps state in a MAP_SHARED\ntmpfs segment across an unmap - for example a cache handed from one\nprocess generation to the next through /dev/shm.  It requires the folio to\nbe PMD-mapped, so it only shows up once shmem THP is enabled (which is\nwhat we did in Meta fleet and started noticing crashes); with THP off the\npte path transfers the dirty bit correctly.  It also only becomes visible\nwhen swap is enabled, because with no swap device shmem folios (which are\non the anon LRU) are not scanned by reclaim at all, so the clean folio is\nnever dropped.\n\nReproduced on x86_64 with a tmpfs mounted huge=within_size: read-fault a\n2MB-backed region, write a known pattern through the resulting mapping,\nmunmap, force reclaim of the cgroup, then re-map and read back.  Without\nthis patch the region reads back as zeros and vmstat shows zswpout 0 - the\ndata was discarded rather than swapped.  With this patch the region reads\nback correctly and the pages are swapped out as expected.  With\nhuge=never, or when the first touch is a write, the test passes either\nway.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89987",
          "url": "https://www.suse.com/security/cve/CVE-2026-89987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281819 for CVE-2026-89987",
          "url": "https://bugzilla.suse.com/1281819"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-89987"
    },
    {
      "cve": "CVE-2026-90011",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90011"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Reserve a terminator byte for the login payload\n\niscsi_target_check_login_request() rejects a login PDU whose\nDataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is \u0027\u003e\u0027 and\nlogin-\u003ereq_buf is allocated with exactly MAX_KEY_VALUE_PAIRS\nbytes. Since iscsit_get_login_rx() receives payload_length + padding\nbytes, where\n\n\tpadding = ((-payload_length) \u0026 3);\n\nany payload_length from 8189 to 8192 fills the whole 8192 byte\nbuffer. The write stays in bounds, but no byte is left for a NUL\nterminator.\n\nThe buffer is subsequently consumed as a C string. In the CHAP path\nchap_check_algorithm() calls kstrdup(a_str), and extract_param() calls\nstrstr(in_buf, pattern) followed by strlen_semi(), none of which take a\nlength. convert_null_to_semi() additionally rewrites every embedded NUL\nto \u0027;\u0027, so even a payload made of well formed NUL separated key=value\nrecords is left without a terminator. These walk past the end of the\nobject into adjacent slab memory. It is reachable by an unauthenticated\ninitiator against a portal configured for CHAP; when authentication is\nnot required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and\nthe CHAP path is never entered.\n\nAllocate one extra byte. kzalloc() zeroes it and nothing ever writes to\nit, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS\nbytes, so the buffer is always terminated.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90011",
          "url": "https://www.suse.com/security/cve/CVE-2026-90011"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281280 for CVE-2026-90011",
          "url": "https://bugzilla.suse.com/1281280"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281282 for CVE-2026-90011",
          "url": "https://bugzilla.suse.com/1281282"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90011"
    },
    {
      "cve": "CVE-2026-90283",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90283"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhugetlbfs: release subpool on fill_super failure\n\nhugetlbfs_fill_super() allocates a hugepage subpool when size or min_size\nmount options are specified.  hugepage_new_subpool() may also reserve huge\npages for min_size.\n\nIf root dentry creation fails after the subpool is created, the failure\npath frees the subpool with kfree().  This bypasses hugepage_put_subpool()\nand can leave min_size reservations charged.\n\nUse hugepage_put_subpool() on the failure path, matching the normal\nput_super path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90283",
          "url": "https://www.suse.com/security/cve/CVE-2026-90283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281771 for CVE-2026-90283",
          "url": "https://bugzilla.suse.com/1281771"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 1.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-90283"
    },
    {
      "cve": "CVE-2026-90289",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90289"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Resize MST HDCP per-connector arrays to 32\n\nAMDGPU_DM_MAX_DISPLAY_INDEX is 31. It suggest a maximum number of\n32 connectors. But the way it\u0027s used is like MAX_DISPLAY_COUNT.\nHence we\u0027re off by one with DRM core, which supports a max of 32\nconnectors.\n\nRename AMDGPU_DM_MAX_DISPLAY_INDEX to AMDGPU_DM_MAX_DISPLAY_COUNT\nto match its actual use, and increase the size to 32 to match the\noriginally intended size.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90289",
          "url": "https://www.suse.com/security/cve/CVE-2026-90289"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281726 for CVE-2026-90289",
          "url": "https://bugzilla.suse.com/1281726"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-90289"
    },
    {
      "cve": "CVE-2026-93066",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93066"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mm/pat: Take cpa_lock around large-page collapse\n\nLoading and unloading modules concurrently on several CPUs on a KASAN\nbuild, with a short delay injected at the CPA page-table lookup to\nwiden the window, faults within minutes:\n\n  BUG: KASAN: use-after-free in __change_page_attr+0x7cc/0x7e0\n  Write of size 8 at addr ffff888181139718 by task modprobe\n  ...\n  The buggy address belongs to the physical page:\n   pfn:0x181139 ... page_type: f2(table)\n\ncpa_collapse_large_pages() rebuilds a leaf PMD from its 4K PTEs and\nfrees the old PTE-table pages, while __change_page_attr() fetches a\nPTE pointer from a lockless lookup_address_in_pgd_attr() and writes\nit with set_pte_atomic() only later. When module text is served from\na shared large ROX mapping the two run on the same PMD:\n\n  CPU A (module load)              CPU B (module finalize)\n  -------------------              -----------------------\n  execmem_make_temp_rw\n   set_memory_nx\n    __change_page_attr\n     split 2M -\u003e 4K table P\n     kpte = \u0026P[i]  (lockless)\n                                   execmem_restore_rox\n                                    set_memory_rox (CPA_COLLAPSE)\n                                     cpa_collapse_large_pages\n                                      rebuild leaf PMD\n                                      flush_tlb_all\n                                      pagetable_free(P)\n     set_pte_atomic(kpte, ...)\n       -\u003e writes into freed P\n\nP is a page-table page (page_type: table), reused at once, so the\nwrite corrupts whatever got the page next: a bad-pte or bad-page\nsplat, or a fatal fault once P has been turned into read-only text.\n\nThe flush_tlb_all() before the free does not close this: its IPI only\nserializes against page-table walkers that run with interrupts off\n(e.g. GUP-fast); the walk in __change_page_attr() runs with interrupts\non, so nothing stops it from holding a stale pointer into P.\n\nSerialize the collapse - the PMD rebuild, TLB flush and PTE-table\nfree - under cpa_lock, the same lock __change_page_attr() now takes\nunconditionally since commit (\"x86/mm/pat: stop gating cpa_lock on\ndebug_pagealloc_enabled()\"), so a concurrent walker can no longer\nhold a pointer into a table the collapse is about to free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93066",
          "url": "https://www.suse.com/security/cve/CVE-2026-93066"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282274 for CVE-2026-93066",
          "url": "https://bugzilla.suse.com/1282274"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282275 for CVE-2026-93066",
          "url": "https://bugzilla.suse.com/1282275"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-93066"
    },
    {
      "cve": "CVE-2026-93134",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93134"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nprintk: Fix possible console use-after-free\n\nWhen emitting a record via legacy printing, it is possible that a handover\nto another legacy printing context occurs. When a context has performed a\nhandover, the console SRCU read lock is released and the pointer to the\nconsole struct might now be invalid. Therefore, after calling\nnbcon_legacy_emit_next_record() or console_emit_next_record(), it is\nnecessary to check if a handover occurred _before_ further @con usage.\n\nSashiko pointed out that console_flush_one_record() was not doing this.\n\nIn console_flush_one_record(), after emitting a record, move the further\nusage of @con after the handover check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93134",
          "url": "https://www.suse.com/security/cve/CVE-2026-93134"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281162 for CVE-2026-93134",
          "url": "https://bugzilla.suse.com/1281162"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93134"
    },
    {
      "cve": "CVE-2026-93222",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93222"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsignal: avoid shared siginfo namespace rewrites\n\nsend_signal_locked() rewrites sender ids for the target namespace.  Group\nsends reuse the same siginfo, so one recipient can affect the next.\n\nCopy the siginfo before changing it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93222",
          "url": "https://www.suse.com/security/cve/CVE-2026-93222"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282742 for CVE-2026-93222",
          "url": "https://bugzilla.suse.com/1282742"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93222"
    },
    {
      "cve": "CVE-2026-93252",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93252"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix circular locking dependency in ocfs2_init_acl()\n\nA lockdep warning indicates a circular locking dependency between\n`\u0026oi-\u003eip_xattr_sem` and `\u0026journal-\u003ej_trans_barrier`:\n\nWARNING: possible circular locking dependency detected\nis trying to acquire lock:\n (\u0026oi-\u003eip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2fd/0x7e0\n fs/ocfs2/acl.c:367\n\nbut task is already holding lock:\n (\u0026journal-\u003ej_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700\n fs/ocfs2/journal.c:369\n\nThe deadlock involves two code paths: Path 1 (setxattr) where\n`ocfs2_xattr_set()` acquires `ip_xattr_sem` (write) and then starts a\ntransaction, which acquires `j_trans_barrier` (read); and Path 2\n(mkdir/mknod) where `ocfs2_mknod()` starts a transaction (`j_trans_barrier`\nread) and then calls `ocfs2_init_acl()`, which attempts to acquire\n`ip_xattr_sem` (read) on the parent directory to retrieve the default ACL.\n\nBecause rw_semaphores are subject to writer priority, a pending writer on\n`j_trans_barrier` (e.g., the journal commit thread) can cause Path 1 to\nblock, while Path 2 is blocked waiting for Path 1 to release\n`ip_xattr_sem`.\n\nThe patch fixes the lock ordering by precomputing the ACL state before\nstarting the OCFS2 transaction, while preserving POSIX ACL storage\nsemantics and the existing inode/security initialization order. By reading\nthe parent directory\u0027s default ACL and preparing the new inode\u0027s ACLs\noutside the transaction, `ip_xattr_sem` is always acquired before\n`j_trans_barrier`.\n\n`struct ocfs2_acl_state` encapsulates the prepared ACL state, while\n`ocfs2_acl_init_prepare()` and `ocfs2_acl_init_release()` avoid code\nduplication between `ocfs2_mknod()` and `ocfs2_init_security_and_acl()`.\n`ocfs2_calc_xattr_init()` and `ocfs2_init_acl()` use this precomputed\nstate, removing internal `ip_xattr_sem` acquisition and redundant disk\nreads.\n\nAdditionally, remove the `ip_xattr_sem` acquisition from\n`ocfs2_xattr_set_handle()`. This function is only used while initializing a\nnew inode that has not yet been inserted into the inode hash or attached to\na dentry, meaning there is no risk of concurrent access and the lock is\nunnecessary.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93252",
          "url": "https://www.suse.com/security/cve/CVE-2026-93252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282784 for CVE-2026-93252",
          "url": "https://bugzilla.suse.com/1282784"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93252"
    },
    {
      "cve": "CVE-2026-93785",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93785"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: validate idmap key payload length\n\nThe cifs.idmap key type stores its payload length in key-\u003edatalen, which\nis limited to U16_MAX.  Accepting a larger key payload truncates the\nrecorded length and can make later users interpret the payload using\ninconsistent bounds.\n\nReject oversized preparsed payloads before allocating or copying them.\nThis keeps key-\u003edatalen consistent with the stored data for both inline\nand separately allocated idmap payloads.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93785",
          "url": "https://www.suse.com/security/cve/CVE-2026-93785"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282869 for CVE-2026-93785",
          "url": "https://bugzilla.suse.com/1282869"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93785"
    },
    {
      "cve": "CVE-2026-93787",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93787"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: bound dirent name against end of SMB response in cifs_filldir\n\ncifs_filldir() copies the entry name out of an SMB1 TRANS2_FIND_FIRST /\nFIND_NEXT response using a length (de.namelen) supplied by the server.\nThe kmalloc\u0027d SMB response buffer is bounded, but nothing checks that\nde.name + de.namelen still lies inside that buffer before the eventual\nfilldir64() -\u003e verify_dirent_name() -\u003e memchr() reads namelen bytes.\n\nA hostile SMB1 server that returns an oversized FileNameLength in a\ndirectory entry therefore causes memchr() to read past the end of the\nresponse slab buffer. Reachable from any user who can list a directory\non a CIFS mount served by an attacker-controlled server (getdents64()\non the mounted directory):\n\n  BUG: KASAN: slab-out-of-bounds in memchr+0x71/0x80\n  Read of size 1 at addr ffff88800e0640cc by task poc/115\n  Call Trace:\n   dump_stack_lvl+0x64/0x80\n   print_report+0xce/0x620\n   kasan_report+0xec/0x120\n   memchr+0x71/0x80\n   filldir64+0x4c/0x6a0\n   cifs_filldir.constprop.0+0x9bb/0x1e00\n   cifs_readdir+0x2101/0x3380\n   iterate_dir+0x19c/0x520\n   __x64_sys_getdents64+0x126/0x210\n   do_syscall_64+0x107/0x5a0\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nPass the end-of-response pointer down to cifs_filldir() and reject\nentries whose name would extend past that boundary.\n\nThis bug was discovered by Artiphishell\u0027s vTriage pipeline, which\ngenerated a userspace reproducer (an emulated hostile SMB1 server plus\na getdents64() client) that reliably triggers the KASAN report on an\nunpatched kernel. The fix below was drafted with the Claude coding\nassistant; a userspace reproducer is available on request.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93787",
          "url": "https://www.suse.com/security/cve/CVE-2026-93787"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282932 for CVE-2026-93787",
          "url": "https://bugzilla.suse.com/1282932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282933 for CVE-2026-93787",
          "url": "https://bugzilla.suse.com/1282933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-93787"
    },
    {
      "cve": "CVE-2026-93798",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93798"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix reloc root cleanup in merge_reloc_roots()\n\nIf the root we got has zero root refs in its root item, we are resetting\nthe root\u0027s -\u003ereloc_root without using barriers like we do everywhere else.\nSashiko complained about this while reviewing another patch, and it\u0027s\ncorrect (see the Link tag below).\n\nAlso, we should not clear BTRFS_ROOT_DEAD_RELOC_TREE from the root unless\nthe root points to the reloc root we have.\n\nFix this by using clear_reloc_root(), which issues the memory barrier\nafter setting the root\u0027s -\u003ereloc_root to NULL and before clearing the bit\nBTRFS_ROOT_DEAD_RELOC_TREE from the root.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93798",
          "url": "https://www.suse.com/security/cve/CVE-2026-93798"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282769 for CVE-2026-93798",
          "url": "https://bugzilla.suse.com/1282769"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93798"
    },
    {
      "cve": "CVE-2026-93806",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93806"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: validate assoc response length before status and IE access\n\ncfg80211_rx_assoc_resp() initialises the status and response-IE fields\nof cfg80211_connect_resp_params from the management frame before\nproving that the frame is long enough for those offsets. S1G and\nregular association responses also have different IE offsets, but the\nS1G path only patched resp_ie after the unsafe initialiser had already\nrun.\n\nDefer resp_ie, resp_ie_len, and status to after the link-iteration\nloop. Use a bool to remember whether the frame is S1G, then validate\nthe appropriate minimum length and set all three fields in a single\nif/else block. Funnel short-frame and SME-reject cleanup through a\nshared free_bss label for the abandon paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93806",
          "url": "https://www.suse.com/security/cve/CVE-2026-93806"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283037 for CVE-2026-93806",
          "url": "https://bugzilla.suse.com/1283037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93806"
    },
    {
      "cve": "CVE-2026-97415",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97415"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF\n\nROOT_REF and ROOT_BACKREF items contain a struct btrfs_root_ref followed\nby the subvolume name. Several readers assume that this layout is already\nvalid and then use the on-disk name length directly. A corrupted item can\ntherefore make those readers address bytes outside the item, and\nBTRFS_IOC_GET_SUBVOL_INFO can copy too many bytes into its fixed-size UAPI\nname buffer.\n\nValidate ROOT_REF and ROOT_BACKREF items in tree-checker before any reader\nuses them. Reject records that do not contain a non-empty name, whose\nname_len does not exactly describe the remaining item payload, or whose\nname exceeds BTRFS_NAME_LEN.\n\nFor BTRFS_IOC_GET_SUBVOL_INFO, copy only the validated on-disk name_len\ninstead of deriving the copy length from the item size. The ioctl result is\nzeroed when allocated. That leaves the existing trailing zero byte\nuntouched.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97415",
          "url": "https://www.suse.com/security/cve/CVE-2026-97415"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282768 for CVE-2026-97415",
          "url": "https://bugzilla.suse.com/1282768"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97415"
    },
    {
      "cve": "CVE-2026-97416",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97416"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()\n\n[BUG]\nRunning btrfs balance can trigger a null-ptr-deref before relocating a\ndata chunk when metadata corruption leaves a chunk in the chunk tree\nwithout a corresponding block group in the in-memory cache:\n\n  KASAN: null-ptr-deref in range [0x0000000000000088-0x000000000000008f]\n  RIP: 0010:btrfs_may_alloc_data_chunk+0x40/0x1c0 fs/btrfs/volumes.c:3601\n  Call Trace:\n    __btrfs_balance fs/btrfs/volumes.c:4217 [inline]\n    btrfs_balance+0x2516/0x42b0 fs/btrfs/volumes.c:4604\n    btrfs_ioctl_balance fs/btrfs/ioctl.c:3577 [inline]\n    btrfs_ioctl+0x25cf/0x5b90 fs/btrfs/ioctl.c:5313\n    ...\n\n[CAUSE]\n__btrfs_balance() iterates the on-disk chunk tree and passes the chunk\nlogical bytenr to btrfs_may_alloc_data_chunk() before relocating a data\nchunk. That helper then queries the in-memory block group cache:\n\n  cache = btrfs_lookup_block_group(fs_info, chunk_offset);\n  chunk_type = cache-\u003eflags;   /* cache may be NULL */\n\nA corrupt image can contain a chunk item whose matching block group\nitem is missing, so no block group is ever inserted into the cache. In\nthat case btrfs_lookup_block_group() returns NULL.\n\nThe code only guards this with ASSERT(cache), which becomes a no-op when\nCONFIG_BTRFS_ASSERT is disabled. The subsequent dereference of\ncache-\u003eflags therefore crashes the kernel.\n\n[FIX]\nAdd a NULL check after btrfs_lookup_block_group() in\nbtrfs_may_alloc_data_chunk() and print and error message for clarity.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97416",
          "url": "https://www.suse.com/security/cve/CVE-2026-97416"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282770 for CVE-2026-97416",
          "url": "https://bugzilla.suse.com/1282770"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97416"
    },
    {
      "cve": "CVE-2026-97491",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97491"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: Don\u0027t sleep inside rds_ib_conn_path_shutdown\n\nNew rds rdma self tests exposed a hang when tearing down\nthe ib network configs.  This is caused by the shutdown worker\nthread sleeping on the wait_event call, which blocks other work\nitems in the queue. Fix this by changing wait_event to\nwait_event timeout, and looping until the wait check succeeds.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97491",
          "url": "https://www.suse.com/security/cve/CVE-2026-97491"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283142 for CVE-2026-97491",
          "url": "https://bugzilla.suse.com/1283142"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97491"
    },
    {
      "cve": "CVE-2026-97533",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97533"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF\n\nA previous commit protected against races between ptdump and CPA collapse,\nhowever one still exists between attribute changes and collapse as reported\nby Denis V. Lunev (linked).\n\nWhen an attribute change arises, a lockless page table walker obtains a PTE\nentry, which is later written to via set_pte_atomic():\n\n  ...\n  -\u003e change_page_attr_set_clr()\n  -\u003e __change_page_attr_set_clr()\n  -\u003e __change_page_attr()\n\t-\u003e _lookup_address_cpa()\n\t-\u003e lookup_address_in_pgd_attr()\n\t-\u003e [ lockless page table walker ]\n  -\u003e set_pte_atomic()\n\nThere is nothing preventing a concurrent CPA collapse which can free the\nPTE that was retrieved here, resulting in a use-after-free.\n\nWith the mmap write lock taken on init_mm over CPA collapse, resolve this\nrace by acquiring an mmap read lock on init_mm over\n__change_page_attr_set_clr().\n\nThis locks across the whole operation over which the walk and the PTE\nentry write occurs, solving the race.\n\nIt is safe to do this here, as no spinlocks are held upon entry to\n__change_page_attr_set_clr().\n\nHowever, the lock must not be held over an allocation, as allocation can\ntrigger reclaim and shrinkers may call into CPA recursively, making\ndeadlocks possible (init_mm -\u003e ... -\u003e fs_reclaim -\u003e init_mm).\n\nA page table is allocated when a huge page needs to be split:\n\n  -\u003e change_page_attr_set_clr()\n  -\u003e __change_page_attr_set_clr()\n  -\u003e __change_page_attr()\n  -\u003e split_large_page()\n  [ pagetable_alloc() ]\n  -\u003e __split_large_page()\n\nAvoid deadlocks by dropping the mmap lock across pagetable_alloc() in\nsplit_large_page() and track whether this is needed by adding a new\n\u0027init_mm_read_locked\u0027 flag to struct cpa_data.\n\nThis is safe as __split_large_page() (called with locks re-established)\nrevalidates that the page table entry is the same as it was prior to the\nlocks being dropped and __change_page_attr() repeats the entire page table\nwalk whenever a split occurs, so concurrent split and collapse are\naccounted for.\n\nConcurrent ptdump is also safe as the lock is only dropped over page table\nallocation during which time the page table has not yet been modified.\n\nThe CPA_COLLAPSE flag is only set by set_memory_rox(), which exclusively\noperates upon vmalloc ranges, and on x86 only within the module mapping\nspace.\n\nThis is important, because some callers directly invoke\n__change_page_attr_set_clr(), bypassing this lock. However, none of these\noperate within the module mapping space.\n\n  * cpa_process_alias() - a recursive helper called by\n    __change_page_attr_set_clr().\n  * __set_memory_enc_pgtable() - operates on the direct mapping and (via\n    __vmbus_establish_gpadl()) the vmalloc mapping space.\n  * __set_pages_[n]p() - called by set_direct_map_[invalid, default,\n    valid]_noflush(), __kernel_map_pages() - operates on the direct map.\n  * kernel_[un]map_pages_in_pgd() - operates on EFI ranges.\n\nThis work is based upon Denis V. Lunev\u0027s excellent analysis of the bug\nwith gratitude.\n\n[ dhansen: move to imperative voice in changelog ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97533",
          "url": "https://www.suse.com/security/cve/CVE-2026-97533"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283454 for CVE-2026-97533",
          "url": "https://bugzilla.suse.com/1283454"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283455 for CVE-2026-97533",
          "url": "https://bugzilla.suse.com/1283455"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-97533"
    },
    {
      "cve": "CVE-2026-97554",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97554"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()\n\ncifs_posix_to_fattr() ignores the return value of posix_info_parse().\nWhen a malformed POSIX directory entry is encountered (e.g. invalid\nSID lengths from an untrusted server), posix_info_parse() returns -1\nwithout populating the \u0027parsed\u0027 struct.  The uninitialized stack\nmemory in parsed.owner and parsed.group is then passed to\nsid_to_id(), which processes the garbage bytes and passes them to\nrequest_key() to construct a SID string, potentially leaking kernel\nstack contents to the userspace idmap daemon.\n\nFix this by checking the return value and skipping the SID-to-id\nmapping when parsing fails.  The remaining fattr fields (timestamps,\nmode, etc.) are populated directly from the \u0027info\u0027 pointer so they\nare unaffected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97554",
          "url": "https://www.suse.com/security/cve/CVE-2026-97554"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283850 for CVE-2026-97554",
          "url": "https://bugzilla.suse.com/1283850"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-97554"
    },
    {
      "cve": "CVE-2026-97555",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97555"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix heap overflow in DACL owner/group rewrite\n\nWhen id_mode_to_cifs_acl rewrites an existing DACL, it allocates a\nbuffer sized according to the on-disk DACL length reported by\ndacl_ptr-\u003esize. However, replace_sids_and_copy_aces may rewrite each\nACE with a new owner/group SID obtained from the cifs.idmap upcall.\nThose SIDs can have up to SID_MAX_SUB_AUTHORITIES (15) sub-authorities,\nmaking each ACE up to 76 bytes (sizeof(struct smb_ace)).\n\nIf the original DACL contains short SIDs (e.g., 1 sub-authority) while\nthe replacement SIDs are long, the rewritten ACEs overflow the\nallocation.\n\nFix this by always budgeting for worst-case SID expansion: allocate\nsizeof(struct smb_acl) plus num_aces * sizeof(struct smb_ace), which\ncovers the smb_acl header and room for every ACE at maximum SID size.\nThis replaces the previous split logic that used dacl_ptr-\u003esize for\ncifsacl mounts but num_aces * sizeof(struct smb_ace) for mode_from_sid\nmounts: both paths can trigger the same rewrite and need the same\nheadroom.\n\nKASAN reports this as:\n  BUG: KASAN: slab-out-of-bounds in build_sec_desc+0x1e8a/0x2680 [cifs]\n  Write of size 4 at addr ffff8881a5e25374 by task chown/5298\n  ...\n  The buggy address is located 0 bytes to the right of\n   allocated 884-byte region [ffff8881a5e25000, ffff8881a5e25374)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97555",
          "url": "https://www.suse.com/security/cve/CVE-2026-97555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283851 for CVE-2026-97555",
          "url": "https://bugzilla.suse.com/1283851"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283852 for CVE-2026-97555",
          "url": "https://bugzilla.suse.com/1283852"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-97555"
    },
    {
      "cve": "CVE-2026-97556",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97556"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: avoid leaking refcount when cifs_sb_tlink() fails\n\ncifs_oplock_break() takes over the reference that\ncifs_queue_oplock_break() acquired when it queued the work, and drops it\nwith _cifsFileInfo_put() once the break has been processed.\n\nOnly in setups with \"-o multiuser\", cifs_sb_tlink() may fail, at which\npoint cifs_oplock_break() returns without putting the file reference,\nmirroring the reference leak we already fixed in the companion patch to\ncifs_queue_oplock_break().\n\nThis would trigger a crash due to busy inodes on the next unmount:\n\n  BUG: Dentry ... still in use (1) [unmount of cifs cifs]\n  VFS: Busy inodes after unmount of cifs (cifs)\n\nDrop the reference on that path as well. Doing so before the out label\nmirrors the normal path, which also puts the reference before\ncifs_done_oplock_break().\n\nFound by Sashiko code review. The failure path was not exercised at\nruntime.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97556",
          "url": "https://www.suse.com/security/cve/CVE-2026-97556"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283853 for CVE-2026-97556",
          "url": "https://bugzilla.suse.com/1283853"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-97556"
    },
    {
      "cve": "CVE-2026-97558",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97558"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix cifsFileInfo reference leak in deferred close\n\nWhen cifs_close() defers a close, it hands the cifsFileInfo reference\nof the closing struct file to the queued work. Each execution of\nsmb2_deferred_work_close() drops one such reference.\n\ndeferred_close_scheduled can be false while the work is pending: the\nworkqueue clears PENDING when the callback starts to run, before the\ncallback clears the flag under deferred_lock. A close in that\ninterval requeues the running work, and the callback then clears the\nflag, leaving the requeued work pending with the flag down. A later\ncifs_open() can reuse the handle and its cifs_close() reaches the\nsame branch: queue_delayed_work() fails because the work is still\npending, but cifs_close() returns without dropping the closing file\u0027s\nreference. The cifsFileInfo count stays pinned and its tlink, dentry\nand server handle are leaked.\n\nCheck the return value and hand off the reference only when work was\nactually queued. Otherwise, use the shared _cifsFileInfo_put(), like\nthe mod_delayed_work() branch above: the pending execution already\nowns its reference.\n\nThis issue was found by an in-house static analysis tool.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97558",
          "url": "https://www.suse.com/security/cve/CVE-2026-97558"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283855 for CVE-2026-97558",
          "url": "https://bugzilla.suse.com/1283855"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-97558"
    },
    {
      "cve": "CVE-2026-97559",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97559"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fail DACL rewrite when the new DACL exceeds 64K\n\nreplace_sids_and_copy_aces() and set_chmod_dacl() accumulate the size of\nthe DACL they build in a u16. That accumulator can wrap.\n\nvalidate_dacl() caps num_aces at (dacl_size - sizeof(struct smb_acl)) /\n20, i.e. 3276 for a maximally sized DACL, while each rewritten ACE can\ngrow to sizeof(struct smb_ace) (76 bytes) once its SID is replaced with\none carrying SID_MAX_SUB_AUTHORITIES sub-authorities. The worst case is\ntherefore sizeof(struct smb_acl) + 3276 * 76 = 248984 bytes, far beyond\nwhat a u16 can hold. A wraparound is reached with 863 ACEs.\n\nAfter the wraparound, ndacl_ptr-\u003esize becomes meaningless and the offset\nwill point anywhere in the ACE array. As a result, we will see\ncorruption of the DACL, which then gets sent to the server. This is not\nan out-of-bounds write as the allocation now covers the worst-case\nexpansion, so writes will always go into the buffer.\n\nAdjust the code to use a u32 internally and return -EOVERFLOW in the\noverflow case. The operation must be refused, because a DACL can only\nhold 2^16-1 bytes on the wire and larger DACLs cannot be represented.\n\nset_chmod_dacl() carries the same pattern and is fixed the same way. It\nonly wraps once the source DACL comes within roughly 380 bytes of the\n64K ceiling, but the failure mode is identical.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97559",
          "url": "https://www.suse.com/security/cve/CVE-2026-97559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283856 for CVE-2026-97559",
          "url": "https://bugzilla.suse.com/1283856"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-97559"
    },
    {
      "cve": "CVE-2026-97561",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97561"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: honor forceuid/forcegid when mapping SIDs to uid/gid\n\nWhen the administrator mounts with forceuid or forcegid (uid=/gid=\nmount options), they expect all files to appear owned by the specified\nuser/group.  However, several code paths unconditionally called\nsid_to_id() to overwrite cf_uid/cf_gid with server-provided values,\nignoring the administrator\u0027s explicit override:\n\n  - smb311_posix_info_to_fattr() (stat via POSIX extensions)\n  - cifs_posix_to_fattr() (readdir via POSIX extensions)\n  - parse_sec_desc() (CIFS ACL ownership mapping)\n\nThis allowed an untrusted server to dictate local file ownership even\nwhen the mount was configured to force specific uid/gid values.\n\nFix all three call sites to check CIFS_MOUNT_OVERR_UID and\nCIFS_MOUNT_OVERR_GID before calling sid_to_id(), following the\nsame pattern already used by cifs_unix_basic_to_fattr() for unix\nextensions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97561",
          "url": "https://www.suse.com/security/cve/CVE-2026-97561"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283858 for CVE-2026-97561",
          "url": "https://bugzilla.suse.com/1283858"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97561"
    },
    {
      "cve": "CVE-2026-97562",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97562"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: pin DFS superblock in iterator callback\n\ntcon_super_cb() stores a raw superblock pointer, but __cifs_get_super()\ntakes its active reference only after iterate_supers_type() has dropped\ns_umount and its passive reference. Concurrent DFS automount expiry can\ntherefore free the superblock before cifs_sb_active() uses it.\n\nA deterministic KASAN test reproduces the race as:\n\n  BUG: KASAN: slab-use-after-free in cifs_sb_active+0x77/0x80\n\nThe same test passes with this change applied.\n\nTake the active reference in the callback while iterate_supers_type()\nstill holds s_umount shared. cifs_put_tcp_super() remains the matching\nrelease.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97562",
          "url": "https://www.suse.com/security/cve/CVE-2026-97562"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283862 for CVE-2026-97562",
          "url": "https://bugzilla.suse.com/1283862"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97562"
    },
    {
      "cve": "CVE-2026-97563",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97563"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject out-of-bounds DataOffset in CIFSSMBRead()\n\nThe SMB1 synchronous read helper CIFSSMBRead() validates the server\u0027s\nDataLength against CIFSMaxBufSize and the caller\u0027s count, but never\nvalidates DataOffset. The copy source is formed as\n\n\t\u0026pSMBr-\u003ehdr.Protocol + le16_to_cpu(pSMBr-\u003eDataOffset)\n\nand memcpy()\u0027d for DataLength bytes with no check that the\n[DataOffset, DataOffset + DataLength) range lies within the response\nactually received from the server.\n\nA malicious or compromised SMB1 server can return a response carrying\nan in-range DataLength and a large DataOffset, driving the source\npointer past the end of the response buffer. The memcpy() then copies\nadjacent kernel heap into the caller\u0027s read buffer (information\ndisclosure), or reads unmapped memory and oopses (denial of service).\nSMB1 is not negotiated by default; reaching this code requires an\nexplicit vers=1.0 mount.\n\nBoth DataOffset and the received response length recorded in\nrsp_iov.iov_len are relative to the start of the SMB header, so reject\nthe response unless DataOffset + DataLength fits within that length,\nusing overflow-safe arithmetic, before forming the source pointer.\nThe response length has been validated by the previous patch, so the\nDataOffset and DataLength fields can be read safely here.\n\nWhile here, make data_length unsigned. It holds a length derived from\nunsigned on-the-wire fields and is only ever compared against unsigned\nquantities; print it with %u accordingly, and add __func__ to the\ncifs_dbg() calls in this function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97563",
          "url": "https://www.suse.com/security/cve/CVE-2026-97563"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283877 for CVE-2026-97563",
          "url": "https://bugzilla.suse.com/1283877"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97563"
    },
    {
      "cve": "CVE-2026-97564",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97564"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject userspace cifs.idmap descriptions\n\ncifs.idmap key descriptions carry authority-bearing fields (owner and\ngroup SIDs and uid/gid values in \"os:\"/\"gs:\"/\"oi:\"/\"gi:\" form) that the\ncifs.idmap upcall helper treats as kernel-originating inputs.  Unlike\nits sibling cifs.spnego, the cifs.idmap key type has no vet_description\nhook, so userspace can create keys of this type through\nrequest_key(2)/add_key(2) and supply those fields without CIFS origin.\nA request_key(2) call with a non-NULL callout then drives a root\nusermodehelper upcall (/sbin/request-key -\u003e cifs.idmap) that consumes\nthe unvetted description in root context.\n\nOnly accept cifs.idmap descriptions while CIFS is using its private\nroot_cred to request the key.  id_to_sid()/sid_to_id() already run\nunder override_creds(root_cred), so the kernel-originated path is\nunaffected.\n\nThis mirrors commit 3da1fdf4efbc (\"smb: client: reject userspace\ncifs.spnego descriptions\"), which applied the same restriction to\ncifs.spnego.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97564",
          "url": "https://www.suse.com/security/cve/CVE-2026-97564"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283946 for CVE-2026-97564",
          "url": "https://bugzilla.suse.com/1283946"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283947 for CVE-2026-97564",
          "url": "https://bugzilla.suse.com/1283947"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-97564"
    },
    {
      "cve": "CVE-2026-97942",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97942"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/alternatives: Exclude text poking against change_page_attr()\n\nFrom time to time, the following BUG can be observed\nin the x86 alternatives patching code [0]:\n\n  \u003e kernel BUG at arch/x86/kernel/alternative.c:2576!\n  \u003e Oops: invalid opcode: 0000 [#1] SMP NOPTI\n  \u003e CPU: 0 UID: 0 PID: 355 Comm: (udev-worker) Not tainted 7.1.3-1-default #1 PREEMPT(full) openSUSE Tumbleweed  8c1795b03ec64f997e57a8ad38b1161e3b98da64\n  \u003e Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS unknown 02/02/2022\n  \u003e RIP: 0010:__text_poke+0x2aa/0x450\n  \u003e Call Trace:\n  \u003e  \u003cTASK\u003e\n  \u003e  smp_text_poke_batch_finish+0x2a7/0x320\n  \u003e  __static_call_transform+0xb7/0x220\n  \u003e  arch_static_call_transform+0x5b/0xb0\n  \u003e  __static_call_init+0xe9/0x270\n  \u003e  static_call_module_notify+0x11f/0x150\n  \u003e  notifier_call_chain+0x61/0xe0\n  \u003e  blocking_notifier_call_chain_robust+0x63/0xc0\n  \u003e  load_module+0x1c92/0x20c0\n  \u003e  init_module_from_file+0xd8/0x140\n  \u003e  idempotent_init_module+0x100/0x2f0\n  \u003e  __x64_sys_finit_module+0x71/0xe0\n  \u003e  do_syscall_64+0xe1/0x610\n  \u003e  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nwhich matches the following BUG_ON() in alternative.c:\n\n\t/*\n\t * If something went wrong, crash and burn since recovery paths are not\n\t * implemented.\n\t */\n\tBUG_ON(!pages[0] || (cross_page_boundary \u0026\u0026 !pages[1]));\n\nThis can happen if vmalloc_to_page() fails, for any reason. Such can happen\nif text poking races with CPA, which can possibly result in the collapsing\nof page tables (or breaking of PMD hugepages). It is not a problem for most\nusers of vmalloc_to_page() (they solely own the vmalloc\u0027d range) but, when\nCONFIG_ARCH_HAS_EXECMEM_ROX=y, various modules own a single execmem vmalloc\nrange, and can call set_memory_*() in parallel on it. This can happen to\nrace against __text_poke and cause havoc in vmalloc_to_page().\n\nFix it by excluding against CPA using the init_mm mmap read lock.\n\n[ dhansen: Fix up SoB ordering. The actual code flow here was:\n\t   Pedro=\u003eLorenzo=\u003eMike=\u003eMe which is reflected in the SoB chain\n\t   now. I *believe* Mike simply picked up Lorenzo\u0027s update to\n\t   Pedro\u0027s post from the Link ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97942",
          "url": "https://www.suse.com/security/cve/CVE-2026-97942"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283153 for CVE-2026-97942",
          "url": "https://bugzilla.suse.com/1283153"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97942"
    },
    {
      "cve": "CVE-2026-97943",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97943"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF\n\nx86 implements page attribute modification using its Change Page\nAttributes (CPA) mechanism.\n\nThis tracks properties of ranges such as cache mode through x86 page\nattributes, and as part of that logic manipulates kernel page tables.\n\nSince commit:\n\n  41d88484c71c (\"x86/mm/pat: restore large ROX pages after fragmentation\")\n\nranges of kernel page table entries can be collapsed into\nhuge page table entries as part of this logic.\n\nAs part of this collapse, it frees the page tables which the collapsed\nentries previously pointed to, and it does so without any relevant locks\nbeing held to preclude concurrent kernel page table walkers.\n\nThe only way this code can be reached is if CPA_COLLAPSE is specified, and\nthis is only set in set_memory_rox() via:\n\nset_memory_rox()\n-\u003e change_page_attr_set_clr()\n-\u003e cpa_flush()\n-\u003e cpa_collapse_large_pages()\n\nNotable users of this are execmem and BPF when manipulating executable\nmappings.\n\nHowever, this is problematic for ptdump as it walks ranges it does not own\nand thus runs the risk of a use-after-free on page tables freed underneath\nit.\n\nIn addition, concurrent CPA collapse operations are possible which can also\ncause races.\n\nResolve the issue by acquiring the mmap write lock on init_mm across the\nwhole operation.\n\nIt is safe to acquire a sleeping lock as all the callers invoke\nset_memory_rox() from process context and in any case,\nchange_page_attr_set_clr() calls vm_unmap_alias() which ultimately takes a\nmutex, disallowing atomic context here.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97943",
          "url": "https://www.suse.com/security/cve/CVE-2026-97943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283158 for CVE-2026-97943",
          "url": "https://bugzilla.suse.com/1283158"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97943"
    },
    {
      "cve": "CVE-2026-97945",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-97945"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mm: Fix user-space data loss with MADV_FREE and THP\n\nSome of users of Polars (a data analytics library) have lost production\ndata from this bug. They seem to have just the right combination of\nhuge pages, MADV_FREE and heavy reclaim pressure.\n\npmd_modify() masks the old value with (_HPAGE_CHG_MASK \u0026 ~_PAGE_DIRTY),\nsilently discarding the hardware dirty bit.  The subsequent\npmd_mksaveddirty() call is supposed to transfer _PAGE_DIRTY into\n_PAGE_SAVED_DIRTY when write-protecting, but the dirty bit was already\nstripped from the value, so there is nothing left to transfer.\n\nContrast with pte_modify(), which keeps _PAGE_DIRTY_BITS in its mask,\nand pud_modify(), which keeps _HPAGE_CHG_MASK untouched: pmd_modify()\nis the odd one out.  Any pmd_modify() on a writable, dirty PMD loses\nthe dirty state.\n\nOne visible consequence is data loss with MADV_FREE on PMD-mapped THP:\n\n    memset(buf, 0x5A, size);          // PMD-mapped THP, PMD dirty\n    madvise(buf, size, MADV_FREE);    // PMD cleaned but left writable,\n                                      // folio marked lazyfree\n    memset(buf, 0x5A, size);          // hardware sets _PAGE_DIRTY again\n    mprotect(buf, size, PROT_READ);   // pmd_modify() drops the dirty bit\n    mprotect(buf, size, PROT_READ|PROT_WRITE);\n    // ... memory pressure ...\n\nReclaim (e.g. under memcg pressure) then finds the lazyfree folio with\nno dirty bit set anywhere and frees it in\n__discard_anon_folio_pmd_locked(), even though the data was rewritten\nafter MADV_FREE; subsequent reads fault in fresh zero pages.  NUMA\nhinting alone can trigger the same loss, as do_huge_pmd_numa_page()\nrestores the PMD through pmd_modify() as well.\n\nPMD-mapped file THPs are affected too: mprotect()/NUMA hinting dropping\nthe dirty bit means rewritten data is never written back.\n\nFix it by keeping _PAGE_DIRTY in the preserved mask, exactly like\npte_modify() and pud_modify() do.  The existing\npmd_mksaveddirty()/pmd_clear_saveddirty() pair then performs the\nhardware-dirty \u003c-\u003e saved-dirty transition based on the write bit,\npreserving the shadow-stack encoding rules.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-97945",
          "url": "https://www.suse.com/security/cve/CVE-2026-97945"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283144 for CVE-2026-97945",
          "url": "https://bugzilla.suse.com/1283144"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-97945"
    },
    {
      "cve": "CVE-2026-98010",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98010"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: drr: clamp quantum in change class\n\ndrr_change_class() rejects explicit quantum==0 but falls back to\npsched_mtu() with no floor. With a crafted size table qdisc_pkt_len\nreaches ~2 GiB, so quantum=1 (or a zero psched_mtu on a headerless\ndevice) makes the deficit-refill loop spin under the qdisc lock.\n\nAdd clamp_t(u32, quantum, 256, 1\u003c\u003c20) after the zero reject and on the\nfallback path. The explicit-zero reject is preserved.\n\nConditions to recreate the bug:\n  CONFIG_NET_SCH_DRR=y. Requires CAP_NET_ADMIN (namespace-local via\n  unshare -Urn suffices).\n\n  tc qdisc add dev dummy0 root drr\n  tc class add dev dummy0 parent 1: classid 1:1 drr quantum 1",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98010",
          "url": "https://www.suse.com/security/cve/CVE-2026-98010"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283823 for CVE-2026-98010",
          "url": "https://bugzilla.suse.com/1283823"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98010"
    },
    {
      "cve": "CVE-2026-98015",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98015"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put\n\nIn mlx5_eswitch_termtbl_put(), the zero-ref cleanup check reads\ntt-\u003eref_count after termtbl_mutex has been released.  Two concurrent\ncallers on the same mlx5_termtbl_handle race: one decrements ref_count\nto zero, removes the hash entry, and calls kfree(tt) while the other\nhas already dropped the mutex and is about to evaluate\nif (!tt-\u003eref_count), producing a use-after-free.\n\nFix this by capturing the result of the decrement into a stack-local\nlast variable before dropping the mutex.  The cleanup decision is now\nmade entirely under termtbl_mutex, and tt is not touched after\nkfree.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98015",
          "url": "https://www.suse.com/security/cve/CVE-2026-98015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283963 for CVE-2026-98015",
          "url": "https://bugzilla.suse.com/1283963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283964 for CVE-2026-98015",
          "url": "https://bugzilla.suse.com/1283964"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98015"
    },
    {
      "cve": "CVE-2026-98016",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98016"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix use-after-free race in sample_restore_put()\n\nConcurrent teardown of TC sample rules sharing the same restore\ncontext may re-read restore-\u003ecount after dropping restore_lock.\nAt that point another thread may already have completed cleanup and\nfreed the restore object.\n\nUse the result of the refcount decrement while holding restore_lock to\ndetermine whether cleanup is needed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98016",
          "url": "https://www.suse.com/security/cve/CVE-2026-98016"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283894 for CVE-2026-98016",
          "url": "https://bugzilla.suse.com/1283894"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283895 for CVE-2026-98016",
          "url": "https://bugzilla.suse.com/1283895"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98016"
    },
    {
      "cve": "CVE-2026-98041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Don\u0027t predict JMP32 pointer vs zero comparisons\n\nConsider the following program:\n\n        r1 = map_value;      /* low 32 bits are zero at runtime */\n        r6 = 0xdead000000000000;\n        if w1 != 0 goto l1;\n    l0: r1 += r6;\n        r2 = *(u64 *)(r1 + 0);\n        exit;\n    l1: r6 = 0;\n        goto l0;\n\nAt the moment is_branch_taken() reports the jump as always taken,\nbecause it does not distinguish between BPF_JMP and BPF_JMP32\ncomparisons when processing \u0027if w1 != 0 ...\u0027.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98041",
          "url": "https://www.suse.com/security/cve/CVE-2026-98041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284064 for CVE-2026-98041",
          "url": "https://bugzilla.suse.com/1284064"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284070 for CVE-2026-98041",
          "url": "https://bugzilla.suse.com/1284070"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98041"
    },
    {
      "cve": "CVE-2026-98077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()\n\nsip_skip_whitespace() returns dptr unchanged when its own loop\nexhausts the buffer (dptr == limit), instead of NULL like its sibling\nsip_follow_continuation() returns on its own \"no more data\" path.\n\nct_sip_get_header() only checks for NULL after calling it:\n\n  dptr = sip_skip_whitespace(dptr, limit);\n  if (dptr == NULL)\n          break;\n  if (*dptr != \u0027:\u0027 || ++dptr \u003e= limit)\n          break;\n\nso a recognized header name followed only by spaces/tabs running to\nthe exact end of the SIP payload, with no colon, makes the very next\nstatement read one byte past the buffer.\n\nMake both \"no more data\" outcomes return NULL, matching the\nconvention sip_follow_continuation() already uses and that both\nexisting callers already check for.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98077",
          "url": "https://www.suse.com/security/cve/CVE-2026-98077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283979 for CVE-2026-98077",
          "url": "https://bugzilla.suse.com/1283979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98077"
    },
    {
      "cve": "CVE-2026-98089",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98089"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: alb: fix uninitialized transport header access in alb_determine_nd()\n\nalb_determine_nd() uses icmp6_hdr(skb) to inspect ICMPv6 headers.\nHowever, in xmit paths (e.g. packets sent via AF_PACKET / raw sockets\nor forwarded packets), skb-\u003etransport_header is not guaranteed to be\ninitialized. While pskb_network_may_pull() ensures the packet data is\nlinear starting from the network header, it does not set or adjust the\ntransport header offset.\n\nDereferencing icmp6_hdr(skb) can therefore access out-of-bounds memory.\n\nFetch the icmp6hdr directly after ipv6hdr following pskb_network_may_pull(),\nand reload ipv6hdr in case pskb_may_pull() reallocated skb-\u003ehead.\nAlso remove the unused bond argument from alb_determine_nd().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98089",
          "url": "https://www.suse.com/security/cve/CVE-2026-98089"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283936 for CVE-2026-98089",
          "url": "https://bugzilla.suse.com/1283936"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98089"
    },
    {
      "cve": "CVE-2026-98125",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98125"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix stale page cache in insert/collapse range\n\nsmb3_insert_range() and smb3_collapse_range() use\ntruncate_pagecache_range() to invalidate the affected page cache.\nHowever, if off or old_eof is not page-aligned, the boundary pages are\nonly partially zeroed and remain uptodate. As a result, the client may\nreturn stale data after a successful insert/collapse range operation.\n\nFor example, with 4K pages:\n\n    page 0          page 1          page 2\n    0------4K       4K------8K      8K------12K\n       ^                                ^\n    off=2K                       old_eof=10K\n\nPage 1 is removed from the page cache, while the boundary pages are\nonly partially zeroed. After COPYCHUNK moves the data on the server,\nthese cached pages may still return stale data.\n\nThis can be reproduced on a CIFS mount:\n\n    bash -c \u0027\n            FILE=/mnt/scratch/repro\n\n            # Use a 6 KiB file so EOF is not page-aligned.\n            dd if=/dev/urandom of=/tmp/src bs=1K count=6 status=none\n\n            # Expected: a 4 KiB hole followed by the original data.\n            rm -f /tmp/expected\n            truncate -s 4K /tmp/expected\n            cat /tmp/src \u003e\u003e /tmp/expected\n\n            cp /tmp/src \"$FILE\"\n\n            # Prime the page cache before moving data on the server.\n            cat \"$FILE\" \u003e /dev/null\n\n            fallocate --insert-range -o 0 -l 4K \"$FILE\"\n\n            if cmp -s /tmp/expected \"$FILE\"; then\n                    echo \"readback: OK\"\n            else\n                    echo \"readback: STALE DATA\"\n            fi\n    \u0027\n\nFix this by writing back dirty data and discarding the page cache from\nthe start of the page containing off to EOF before moving data on the\nserver.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98125",
          "url": "https://www.suse.com/security/cve/CVE-2026-98125"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283812 for CVE-2026-98125",
          "url": "https://bugzilla.suse.com/1283812"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98125"
    },
    {
      "cve": "CVE-2026-98126",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98126"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: validate new EOF for zero range\n\nWhen FALLOC_FL_ZERO_RANGE is used without FALLOC_FL_KEEP_SIZE,\nsmb3_zero_range() may extend EOF without checking RLIMIT_FSIZE, allowing\nthe file to grow beyond the caller\u0027s file-size limit.\n\nFix this by calling inode_newsize_ok() before sending the zero-range\nrequest when the operation would extend EOF.\n\nReproducer, using a file on a CIFS mount:\n\n\tbash -c \u0027\n\t        FILE=/mnt/cifs/repro\n\n\t        trap \"\" SIGXFSZ\n\t        ulimit -f 3072\n\n\t        truncate -s 2M \"$FILE\"\n\t        fallocate --zero-range -o 0 -l 4M \"$FILE\"\n\t        echo \"fallocate rc=$?\"\n\t        stat -c \"file size=%s\" \"$FILE\"\n\t\u0027\n\nBefore this change, the operation succeeds despite the 3 MiB limit:\n\n\tfallocate rc=0\n\tfile size=4194304\n\nAfter this change, fallocate fails and leaves the file at 2 MiB.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98126",
          "url": "https://www.suse.com/security/cve/CVE-2026-98126"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283859 for CVE-2026-98126",
          "url": "https://bugzilla.suse.com/1283859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98126"
    },
    {
      "cve": "CVE-2026-98127",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98127"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: validate new EOF for insert range\n\nsmb3_insert_range() does not check if the new file size\n(i_size + len) is valid. This allows FALLOC_FL_INSERT_RANGE to bypass\nRLIMIT_FSIZE, exceed s_maxbytes, or produce a size outside the loff_t\nrange.\n\nUse check_add_overflow() to calculate the new EOF. Validate it with\ninode_newsize_ok() before modifying the file.\n\nReproducer, using a file on a CIFS mount:\n\n\tbash -c \u0027\n\t\tFILE=/mnt/cifs/repro\n\n\t\ttrap \"\" SIGXFSZ\n\t\tulimit -f 3072\t\t# RLIMIT_FSIZE = 3 MiB\n\n\t\t# A regular write is stopped at 3 MiB.\n\t\tdd if=/dev/zero of=\"$FILE\" bs=1M count=4 status=none\n\t\tstat -c \"size after write: %s\" \"$FILE\"\n\n\t\t# Insert 2 MiB into a 2 MiB file.\n\t\ttruncate -s 2M \"$FILE\"\n\t\tfallocate -i -o 0 -l 2M \"$FILE\"\n\t\tstat -c \"size after insert: %s\" \"$FILE\"\n\t\u0027\n\nBefore this change, the regular write stops at the 3 MiB limit, but\ninsert range grows the file to 4 MiB:\n\n\tdd: error writing \u0027/mnt/cifs/repro\u0027: File too large\n\tsize after write: 3145728\n\tsize after insert: 4194304\n\nAfter this change, insert range also fails at the limit and leaves the\n2 MiB file unchanged:\n\n\tdd: error writing \u0027/mnt/cifs/repro\u0027: File too large\n\tsize after write: 3145728\n\tfallocate: fallocate failed: File too large\n\tsize after insert: 2097152",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98127",
          "url": "https://www.suse.com/security/cve/CVE-2026-98127"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283873 for CVE-2026-98127",
          "url": "https://bugzilla.suse.com/1283873"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98127"
    },
    {
      "cve": "CVE-2026-98130",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98130"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix a TOCTOU race in SCTP_CMD_TIMER_START\n\nThe SCTP_CMD_TIMER_START handler checks timer_pending() before calling\ntimer_reduce(). The timer can expire and detach between these operations,\ncausing timer_reduce() to rearm the timer without taking the association\nreference required for the newly armed timer.\n\nThe timer callback later unconditionally drops its association reference,\nwhich can leave the association reference count unbalanced and result in\nuse-after-free during association teardown.\n\nUse the return value of timer_reduce() to determine whether the timer was\nactually armed. Take the association reference only when timer_reduce()\nsuccessfully starts a new timer, closing the race between checking the\ntimer state and rearming it.\n\nThis issue was reported by Nico Yip (@_cyeaa_) working with TrendAI Zero\nDay Initiative.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98130",
          "url": "https://www.suse.com/security/cve/CVE-2026-98130"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283835 for CVE-2026-98130",
          "url": "https://bugzilla.suse.com/1283835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285041 for CVE-2026-98130",
          "url": "https://bugzilla.suse.com/1285041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98130"
    },
    {
      "cve": "CVE-2026-98167",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98167"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix server-\u003etotal_read for compound encrypted PDUs\n\nIn receive_encrypted_standard(), server-\u003etotal_read is left at the\nfull decrypted frame size when walking sub-PDUs of a compound encrypted\nframe. As a result, cifs_handle_standard() passes this full size\nto smb2_check_message(), causing the PDU length guards to incorrectly\nvalidate the entire compound frame instead of the current sub-PDU.\n\nThis allows truncated non-last sub-PDUs to bypass length validation,\nleading to out-of-bounds reads in smb2_get_data_area_len().\n\nFix this by setting server-\u003etotal_read to the true length of the\ncurrent sub-PDU: next_cmd for non-last sub-PDUs, and the remaining\npdu_length for the last one.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98167",
          "url": "https://www.suse.com/security/cve/CVE-2026-98167"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284422 for CVE-2026-98167",
          "url": "https://bugzilla.suse.com/1284422"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98167"
    },
    {
      "cve": "CVE-2026-98169",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98169"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential OOB read in smb3_enum_snapshots()\n\nIf snapshot_array_size is smaller than GMT_TOKEN_SIZE,\nsmb3_enum_snapshots() sets ret_data_len to\nsizeof(struct smb_snapshot_array) without verifying the actual length\nof the server\u0027s reply.\n\nBecause SMB2_ioctl() places no lower bound on the server-supplied\nOutputCount and allocates retbuf to exactly that length, a short reply\nresults in ret_data_len exceeding the size of retbuf. The subsequent\ncopy_to_user() then reads past the end of retbuf, leaking adjacent slab\nmemory to userspace.  The subsequent clamp check is ineffective as it\nonly reduces ret_data_len.\n\nFix this by rejecting replies shorter than\nsizeof(struct smb_snapshot_array) with -EIO. Note that the bound is set\nto the 12-byte struct size rather than the 16-byte\nMIN_SNAPSHOT_ARRAY_SIZE defined in MS-SMB2 3.3.5.15.1, because 12 bytes\nis exactly what copy_to_user() attempts to read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98169",
          "url": "https://www.suse.com/security/cve/CVE-2026-98169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284298 for CVE-2026-98169",
          "url": "https://bugzilla.suse.com/1284298"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-98169"
    },
    {
      "cve": "CVE-2026-98170",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98170"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()\n\nIn move_smb2_ea_to_cifs(), the while (src_size \u003e 0) loop condition is\ninsufficient. It allows iteration to continue even if the remaining\nsrc_size is too small to contain a complete smb2_ea_info structure.\nConsequently, reads of ea_name_length and ea_value_length can occur\nout-of-bounds.\n\nFix this by ensuring src_size \u003e= sizeof(*src) before attempting to read\nany structure fields. Additionally, reject any next_entry_offset that is\nsmaller than sizeof(*src) or that would advance the pointer beyond the\navailable buffer.\n\nNote that for calls where the server returns a malformed EA list, the\nerror returned to userspace changes from -ENODATA (getxattr) or\n-ERANGE (listxattr) to -EIO. This correctly signals a server protocol\nerror rather than misleadingly indicating \"attribute not present\" or\n\"output buffer too small\".",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98170",
          "url": "https://www.suse.com/security/cve/CVE-2026-98170"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284310 for CVE-2026-98170",
          "url": "https://bugzilla.suse.com/1284310"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98170"
    },
    {
      "cve": "CVE-2026-98171",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98171"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs\n\nFix several related bounds checking and pointer lifecycle issues in\nreceive_encrypted_standard()\u0027s handling of compound encrypted frames:\n\n- Clear next_buffer after assigning it to server-\u003ebigbuf. A stale\n  next_buffer pointer can lead to a use-after-free on subsequent\n  error paths.\n- Update pdu_length to the decrypted plaintext size (buf_size). Using\n  the pre-decryption length allows NextCommand to point into stale\n  ciphertext residue.\n- Reject next_cmd values smaller than MID_HEADER_SIZE(server).\n- Fix an integer overflow in the upper bound check by verifying\n  pdu_length - next_cmd \u003c MID_HEADER_SIZE(server), ensuring the\n  trailing slice is large enough for a header.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98171",
          "url": "https://www.suse.com/security/cve/CVE-2026-98171"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284419 for CVE-2026-98171",
          "url": "https://bugzilla.suse.com/1284419"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284421 for CVE-2026-98171",
          "url": "https://bugzilla.suse.com/1284421"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98171"
    },
    {
      "cve": "CVE-2026-98173",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98173"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix use-after-free of iface in cifs_try_adding_channels()\n\ncifs_try_adding_channels() iterates ses-\u003eiface_list with\nlist_for_each_entry_safe_from(), which captures the next entry\n(niface) under iface_lock.  The loop body then drops iface_lock for\nthe whole duration of cifs_ses_add_channel().\n\nA concurrent interface refresh (SMB3_request_interfaces() -\u003e\nparse_server_interfaces()) marks all ifaces inactive and removes and\nfrees any that are not re-advertised via list_del() + kref_put(),\nwhere release_iface() is a bare kfree().  Since niface typically has\nno channel holding a reference, the list reference is its last and it\ncan be freed inside the unlocked window.  On continue, the iterator\nadvance step then dereferences niface-\u003eiface_head.next, and the loop\nbody reads iface-\u003erdma_capable/is_active, both on freed memory.\n\nFix this by never keeping an unreferenced list pointer across the\nunlocked window.  Each channel attempt now re-scans the list from the\nhead under iface_lock, takes a kref on the selected candidate, and\npasses only that referenced candidate to cifs_ses_add_channel().\nweight_fulfilled still tracks selection progress, so restarting the\nscan preserves the original weighted distribution and the\nweight_fulfilled-before-kref_put ordering on the failure path.\n\nAdd a per-pass attempts cap so a flapping interface refresh cannot\nkeep the inner loop spinning within a single tries increment.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98173",
          "url": "https://www.suse.com/security/cve/CVE-2026-98173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284415 for CVE-2026-98173",
          "url": "https://bugzilla.suse.com/1284415"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284418 for CVE-2026-98173",
          "url": "https://bugzilla.suse.com/1284418"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98173"
    },
    {
      "cve": "CVE-2026-98174",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98174"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix rlist race and missing initialization\n\nTCP_Server_Info.rlist is allocated via kzalloc which zeros both -\u003enext\nand -\u003eprev to NULL instead of pointing to itself, making list_empty()\nalways return false and list_add() dereference a NULL -\u003eprev pointer.\n\nAlso, cifs_signal_cifsd_for_reconnect() can be called concurrently\nfrom multiple cifsd threads, allowing the same server\u0027s rlist node to\nbe added twice into the local list, corrupting it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98174",
          "url": "https://www.suse.com/security/cve/CVE-2026-98174"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284412 for CVE-2026-98174",
          "url": "https://bugzilla.suse.com/1284412"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284413 for CVE-2026-98174",
          "url": "https://bugzilla.suse.com/1284413"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98174"
    },
    {
      "cve": "CVE-2026-98175",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98175"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: cancel reconnect work in clean_demultiplex_info()\n\nclean_demultiplex_info() cancels server-\u003eecho delayed work but not\nserver-\u003ereconnect, which can cause a use-after-free when the\ndemultiplex thread exits while a reconnect work is still queued:\n\n  cifs_demultiplex_thread()\n    cifs_readv_from_socket()\n      cifs_reconnect()\n        __cifs_reconnect()\n          cifs_queue_server_reconn()\n            mod_delayed_work(cifsiod_wq, \u0026server-\u003ereconnect, 0)\n    clean_demultiplex_info()\n      cancel_delayed_work_sync(\u0026server-\u003eecho)   // echo canceled\n                                                 // reconnect NOT canceled\n      kfree_sensitive(server)                    // server freed\n\n  ...later, on cifsiod_wq:\n\n  smb2_reconnect_server()\n    server-\u003esrv_count  // UAF read of freed server\n\nFix this by canceling server-\u003ereconnect delayed work in\nclean_demultiplex_info() before the server is freed, the same way\ncifs_put_tcp_session() already does.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98175",
          "url": "https://www.suse.com/security/cve/CVE-2026-98175"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284312 for CVE-2026-98175",
          "url": "https://bugzilla.suse.com/1284312"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98175"
    },
    {
      "cve": "CVE-2026-98216",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98216"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/hfi1: Fix the PIO_CRED credit-return mmap\n\nhfi1_file_mmap()\u0027s PIO_CRED case must hand user space the single\ncredit-return page that holds this context\u0027s entry.  That page is the\nsecond or third page of the per-node credit-return allocation once the\nhardware send context index reaches 64 or 128, so the failure below is\nintermittent: when the entry lands on the first page the offset is zero\nand everything works.\n\nTwo things are wrong.\n\nFirst, cr_page_offset is a byte offset but .va is a struct\ncredit_return *, so adding it is pointer arithmetic and scales the offset\nby sizeof(struct credit_return) == 64.  memvirt then lands 256 KiB or\n512 KiB past a 10240-byte allocation.  With an IOMMU translating, that\naddress is inside the vmalloc range but in no vm_area, so\ndma_mmap_coherent() -\u003e iommu_dma_mmap() finds no pages, vmalloc_to_pfn()\nreturns page_to_pfn(NULL), and remap_pfn_range() installs a frame above\nMAXPHYADDR.  The first user read then takes:\n\n  psm2_ep_open_pr: Corrupted page table at address 7a14d007e000\n  PGD 800000013886a067 P4D 800000013886a067 PUD 13886b067 PMD 13886c067\n                                            PTE 800049168e911235\n  Oops: Bad pagetable: 000d [#1] SMP PTI\n\nSecond, and still wrong once the arithmetic is corrected,\ndma_mmap_coherent() describes a whole coherent buffer and selects the\npage within it with vma-\u003evm_pgoff.  Offsetting cpu_addr has no effect:\nfor a vmap\u0027d allocation iommu_dma_mmap() uses cpu_addr only to locate the\nvm_area and then maps pages[vm_pgoff], which hfi1_file_mmap() has just\nset to 0.  User space therefore always receives the first credit-return\npage, every credit read is for the wrong context, and send PIO stalls\nforever.\n\nUse the DMA API as intended: pass the base of the allocation with its\nfull length and select the page with vm_pgoff.  A separate length is\nneeded because memlen must keep describing the VMA for the existing size\ncheck.  The dma-direct path stays correct as well, since dma_direct_mmap()\nadds the same vm_pgoff to the base pfn.\n\nTested on a Dell T7610 (Xeon E5-2650 v2, Intel IOMMU in DMA-FQ mode)\nagainst a Threadripper PRO 3995WX peer, both Omni-Path 100.  Before this\nchange psm2_ep_open() Oopses the kernel; with only the arithmetic\ncorrected psm2_ep_open() succeeds but any transfer that uses send PIO\nhangs, PSM2_SDMA=2 (send PIO disabled) completing normally while\nPSM2_SDMA=0 (send PIO only) hangs every time.  With this change send PIO,\nsend DMA and the default mixed mode all work.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98216",
          "url": "https://www.suse.com/security/cve/CVE-2026-98216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284559 for CVE-2026-98216",
          "url": "https://bugzilla.suse.com/1284559"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98216"
    },
    {
      "cve": "CVE-2026-98252",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98252"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: fix refcount bug in iwpm_get_nlmsg_request()\n\niwpm_get_nlmsg_request() initializes refcount _after_ list_add_tail()\nmaking it accessible to global list where another CPU can kref_get()\non nlmsg_request causing a refcount \"addition on 0\" bug. Fix this\nby initializing kref _before_ list_add_tail() so refcount for\nnlmsg_request can be incremented/decremented normally. In addition,\nalso initialize every field before list_add_tail().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98252",
          "url": "https://www.suse.com/security/cve/CVE-2026-98252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284581 for CVE-2026-98252",
          "url": "https://bugzilla.suse.com/1284581"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98252"
    },
    {
      "cve": "CVE-2026-98253",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98253"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/ucma: Serialize join and leave on copy_to_user failure\n\nrdma_join_multicast() queues RoCE work that later reads the ucma_multicast\nthrough event-\u003eparam.ud.private_data, then list_add()s the CMA multicast\nat the head of id_priv-\u003emc_list. rdma_leave_multicast() matches only by\nsockaddr and destroys the first hit.\n\nucma_process_join() used to drop ctx-\u003emutex after a successful join and\nretake it only if copy_to_user() failed. Two concurrent JOIN_MCAST calls\nwith the same address can therefore insert a second CMA entry before the\nfirst thread\u0027s leave. leave then cancels the newer work and the older\nworker still dereferences the ucma_multicast that the first thread frees.\n\nKeep ctx-\u003emutex held from rdma_join_multicast() through copy_to_user() and,\non -EFAULT, through rdma_leave_multicast() so leave cannot miss this join.\nDo not leave if join itself failed: that path never published this address\non mc_list, and a leave-by-addr would destroy an earlier successful join.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98253",
          "url": "https://www.suse.com/security/cve/CVE-2026-98253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284790 for CVE-2026-98253",
          "url": "https://bugzilla.suse.com/1284790"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284793 for CVE-2026-98253",
          "url": "https://bugzilla.suse.com/1284793"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98253"
    },
    {
      "cve": "CVE-2026-98260",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98260"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nexec: Cleanup POSIX timers right after de_thread()\n\nA per-thread CPU timer holds a reference to the PID of the thread it is\nattached to and, while it is armed, its node is queued in that thread\u0027s\nposix_cputimers. The task is looked up by that PID.\n\nWhen a non-leader thread exec()s, de_thread() changes which task owns\nthat PID. pid_task(timer-\u003eit.cpu.pid, PIDTYPE_PID) then returns NULL,\nbut the node is still queued on tsk, which is alive. timer_lock_sighand()\ntakes a failed lookup to mean that the node is already dequeued, so it\nhas nothing to undo.\n\nbegin_new_exec() calls posix_cpu_timers_exit(me) right after\nexec_task_namespaces() and that removes the leftover node, so the state\nnormally stays invisible. But bprm-\u003epoint_of_no_return is set before\nde_thread(), so if unshare_files(), set_mm_exe_file(), exec_mmap() or\nexec_task_namespaces() fails, the task dies before it gets there.\nexit_itimers() then frees the k_itimer while its node is still queued,\nand reaping tsk later erases that freed node from the rbtree.\n\nIn short:\n\n      the non-leader thread B           the parent\n\n  timer_create(CLOCK_THREAD_CPUTIME_ID)\n  timer_settime()\n    arm_timer()            // the node is queued on B\n  execve()\n    de_thread(B)\n      exchange_tids(B, leader)  // B\u0027s PID now belongs to the leader\n      release_task(leader)\n        __exit_signal(leader)\n          posix_cpu_timers_exit(leader)  // cleans leader\u0027s queue, not B\u0027s\n          __unhash_process(leader)  // that PID has no task anymore\n    exec_mmap()\n      mmap_read_lock_killable(old_mm)\n                                kill(B, SIGKILL)\n      // -EINTR\n  get_signal()\n    do_exit()\n      exit_itimers()\n        posix_timer_delete()\n          posix_cpu_timer_del()\n        posix_timer_unhash_and_free()  // freed while still queued\n                                wait4()\n                                  release_task(B)\n                                    posix_cpu_timers_exit(B)\n                                      cleanup_timerqueue()\n                                        timerqueue_del()  // use-after-free\n\nMove the POSIX timer cleanup right after de_thread() before any of the\nlater failure conditions brings the task into do_exit().\n\n[ tglx: Move the cleanup right after de_thread() ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98260",
          "url": "https://www.suse.com/security/cve/CVE-2026-98260"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284408 for CVE-2026-98260",
          "url": "https://bugzilla.suse.com/1284408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285052 for CVE-2026-98260",
          "url": "https://bugzilla.suse.com/1285052"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1286032 for CVE-2026-98260",
          "url": "https://bugzilla.suse.com/1286032"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98260"
    },
    {
      "cve": "CVE-2026-98261",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98261"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix server use-after-free in cifs_chan_skip_or_disable()\n\nWhen a secondary channel is no longer supported by the server,\ncifs_chan_skip_or_disable() drops the channel reference with\ncifs_put_tcp_session() and then continues to use the server pointer by\ncalling cifs_signal_cifsd_for_reconnect() on it and reading its\nprimary_server pointer. cifs_put_tcp_session() can drop the last\nreference of the channel and tear it down, so both the channel and the\nprimary server (whose reference is also dropped by\ncifs_put_tcp_session()) can be freed before they are signaled for\nreconnect.\n\nSignal the channel and the primary server and capture the primary\nserver pointer before dropping the channel reference with\ncifs_put_tcp_session().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98261",
          "url": "https://www.suse.com/security/cve/CVE-2026-98261"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284605 for CVE-2026-98261",
          "url": "https://bugzilla.suse.com/1284605"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98261"
    },
    {
      "cve": "CVE-2026-98269",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98269"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: abort transaction on failure to update inode for hole punching and reflinking\n\nIf we fail to update the inode we error out without aborting the\ntransaction, which can result in a persistent inconsistency if after\nthe failure the transaction is committed, as we have dropped file\nextent items from a range and either punched a hole or insert a new file\nextent item for that range (for reflinks).\n\nSo add the missing transaction abort.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98269",
          "url": "https://www.suse.com/security/cve/CVE-2026-98269"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284606 for CVE-2026-98269",
          "url": "https://bugzilla.suse.com/1284606"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-98269"
    },
    {
      "cve": "CVE-2026-98273",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98273"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kprobes: Fix crash when probing CS CALL instructions\n\nWhen using eBPF to probe CS CALL instructions within a function,\na crash can be triggered.\n\nThe eBPF tool probes offset 257 of the __hrtimer_run_queues()\nfunction:\n\n\u003c__hrtimer_run_queues+249\u003e:  nopl   0x0(%rax,%rax,1)\n\u003c__hrtimer_run_queues+254\u003e:  mov    %r14,%rdi\n\u003c__hrtimer_run_queues+257\u003e:  cs call \u003c__x86_indirect_thunk_r12\u003e\n\u003c__hrtimer_run_queues+263\u003e:  mov    %eax,%r12d\n\u003c__hrtimer_run_queues+266\u003e:  xchg   %ax,%ax\n\u003c__hrtimer_run_queues+268\u003e:  mov    %r13,%rdi\n\nWhich triggers this crash:\n\n  BUG: unable to handle page fault for address: 00000000000f41c9\n  #PF: supervisor write access in kernel mode\n  #PF: error_code(0x0002) - not-present page\n  PGD 0 P4D 0\n  Oops: 0002 [#1] SMP NOPTI\n  CPU: 1 PID: 0 Comm: swapper/1 Kdump: loaded Tainted: P\n  RIP: 0010:__hrtimer_run_queues+0x106/0x230\n\nNote that __hrtimer_run_queues+0x106 is __hrtimer_run_queues+262, which is\nat the 6th byte of the above CS CALL instruction. Since the CS CALL\ninstruction occupies 6 bytes, the exception occurred in the middle of that\ncall instruction.\n\nThe root cause is that when using eBPF tools to probe in the middle of a\nfunction, a kprobe with INT3 is used as the underlying implementation.\n\nDuring single-step emulation of the original CALL instruction,\nint3_emulate_call() assumes that the probed CALL instruction is 5 bytes\nlong. However, the actual CS-prefixed CALL instruction occupies 6 bytes,\nso it constructs an incorrect exception return address. When the CPU\nreturns from the kprobe handler, the next instruction to be executed is at\nthe address of the last byte of that CS CALL instruction. Coincidentally,\nstarting from that address, the CPU fetches and decodes a completely\ndifferent instruction, which ultimately triggers a kernel crash.\n\nFix the issue by using the actual instruction length obtained from\nthe instruction decoder when constructing the exception return\naddress, rather than relying on the hardcoded CALL_INSN_SIZE macro.\n\n[ mingo: Refined the changelog ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98273",
          "url": "https://www.suse.com/security/cve/CVE-2026-98273"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284462 for CVE-2026-98273",
          "url": "https://bugzilla.suse.com/1284462"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98273"
    },
    {
      "cve": "CVE-2026-98323",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98323"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Bound fragmented header copies by the remaining length\n\nsiw_get_hdr() can receive an extended DDP/RDMAP header across more than\none TCP callback. The first callback may receive most of the header,\nwhile the next one still limits the copy to hdrlen - MIN_DDP_HDR instead\nof the number of missing bytes. This makes the destination move past the\nend of the header and overwrite the receive state, including\nfpdu_part_rcvd. A later callback can then use a negative fpdu_part_rcvd\nvalue as a copy offset, which creates an OOB write.\n\nUse the number of header bytes already received when calculating the\nnext copy length.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98323",
          "url": "https://www.suse.com/security/cve/CVE-2026-98323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284713 for CVE-2026-98323",
          "url": "https://bugzilla.suse.com/1284713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284714 for CVE-2026-98323",
          "url": "https://bugzilla.suse.com/1284714"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98323"
    },
    {
      "cve": "CVE-2026-98347",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98347"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/IPoIB: Avoid restoring OPER_UP after multicast flush\n\nipoib_ib_dev_flush_light() temporarily clears IPOIB_FLAG_OPER_UP to\nprevent multicast joins while ipoib_mcast_dev_flush() is running, and\nrestores the flag afterwards if it was previously set.\n\nThis restore races with ipoib_ib_dev_down(). If the interface is brought\ndown while the flush is in progress, ipoib_ib_dev_down() clears\nIPOIB_FLAG_OPER_UP, but the flush path may set it again after the device\nhas already gone down.\n\nSince commit 894021a75291 (\"IB/ipoib: Make the carrier_on_task race\naware\"), ipoib_mcast_carrier_on_task() relies on IPOIB_FLAG_OPER_UP\nbeing cleared to terminate its rtnl_trylock() retry loop. If the flag is\nleft set after shutdown, the workqueue retries forever, causing teardown\nto deadlock when ipoib_ndo_uninit() waits in destroy_workqueue() while\nholding RTNL.\n\nInstead of overloading IPOIB_FLAG_OPER_UP to block multicast joins\nduring a light flush, introduce a dedicated IPOIB_FLAG_MCAST_FLUSH flag.\nUse it together with IPOIB_FLAG_OPER_UP to determine whether multicast\njoins are allowed, avoiding the race with device shutdown.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98347",
          "url": "https://www.suse.com/security/cve/CVE-2026-98347"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284295 for CVE-2026-98347",
          "url": "https://bugzilla.suse.com/1284295"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98347"
    },
    {
      "cve": "CVE-2026-98352",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98352"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted\n\nThe client borrows shared CQ credits in the ADDR_RESOLVED handler via\nib_cq_pool_get(), before the peer is connected. create_cm() can return\n-ERESTARTSYS from wait_event_interruptible_timeout() without destroying\nthe CM ID. The init_conns() and stop-and-destroy paths then call\ndestroy_con_cq_qp() while cq is still NULL (no PUT) and only afterwards\nrdma_destroy_id().\n\nCMA serializes the handler against rdma_destroy_id() with handler_mutex,\nbut that does not order the GET against destroy_con_cq_qp(). If\nADDR_RESOLVED has already passed the DESTROYING check, it can take\ncon_mutex, GET credits, and then lose the con to kfree. Device\nunregister later hits WARN_ON(cq-\u003ecqe_used) in ib_cq_pool_cleanup().\n\nSet a per-connection flag under con_mutex before CQ/QP teardown so a\nracing ADDR_RESOLVED cannot borrow credits after teardown has begun.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98352",
          "url": "https://www.suse.com/security/cve/CVE-2026-98352"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284647 for CVE-2026-98352",
          "url": "https://bugzilla.suse.com/1284647"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 1.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-98352"
    },
    {
      "cve": "CVE-2026-98354",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98354"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mad: Fix receive buffer leak when PKey enforcement fails\n\nib_mad_complete_recv() initializes mad_recv_wc-\u003ermpp_list and then runs\nib_mad_enforce_security() before linking recv_buf onto that list.  On\nfailure it calls ib_free_recv_mad(), which only walks rmpp_list and frees\nthe ib_mad_private of every buffer found there.  As the list is still\nempty at that point, nothing is freed at all.\n\nThe caller cannot clean up either: ib_mad_recv_done() sets recv to NULL\nright after ib_mad_complete_recv() returns, assuming the MAD layer took\nownership of the buffer.  Every MAD that fails the PKey check therefore\nleaks one ib_mad_private (about 300 bytes per IB port MAD, ~2K for OPA),\nand a remote node can trigger this repeatedly by sending MADs with a\nwrong PKey.\n\nLink recv_buf onto rmpp_list right after the list is initialized, so the\nerror path has something to free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98354",
          "url": "https://www.suse.com/security/cve/CVE-2026-98354"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284291 for CVE-2026-98354",
          "url": "https://bugzilla.suse.com/1284291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98354"
    },
    {
      "cve": "CVE-2026-98357",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98357"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/isert: wait for deferred control PDU completions before releasing the connection\n\nisert_send_done() hands ISTATE_SEND_TASKMGTRSP, ISTATE_SEND_REJECT and\nISTATE_SEND_TEXTRSP completions off to isert_comp_wq and returns.  The work\nitem then runs isert_completion_put() -\u003e isert_put_cmd(), which reads\nisert_conn-\u003econn and takes conn-\u003ecmd_lock.\n\nNothing orders that work item against teardown.  isert_wait_conn() queues\nisert_release_work, which frees isert_conn, and iscsit_close_connection()\nfrees the iscsit_conn right after it returns, so the queued work can run\nagainst freed memory.\n\nCount the deferred control PDU completions per connection and let\nisert_wait_conn() wait for them before the release work is queued.\n\nISTATE_SEND_LOGOUTRSP is deliberately not counted: that branch runs\niscsit_logout_post_handler(), which ends up waiting for\nconn-\u003econn_wait_comp, and that completion is only sent by\niscsit_close_connection() after it has called iscsit_wait_conn().\nWaiting for it here would deadlock.  Its wait stays the existing\nisert_wait4logout().\n\nThe splat below is from a kernel with tracing printk()s and an msleep(200)\ninjected into isert_do_control_comp() to widen the window:\n\n  BUG: KASAN: slab-use-after-free in isert_put_cmd+0x53d/0x620\n  Read of size 8 at addr ffff8881054f1038 by task kworker/u17:1/182\n\n  CPU: 0 UID: 0 PID: 182 Comm: kworker/u17:1 Tainted: G    B               7.2.0-rc5-TWIDE-gb8babf08acc7 #1 PREEMPT(lazy)\n  Tainted: [B]=BAD_PAGE\n  Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n  Workqueue: isert_comp_wq isert_do_control_comp\n  Call Trace:\n   \u003cTASK\u003e\n   dump_stack_lvl+0x53/0x70\n   print_report+0xd0/0x630\n   ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n   ? _raw_spin_unlock_irqrestore+0x3e/0x70\n   ? isert_put_cmd+0x53d/0x620\n   kasan_report+0xce/0x100\n   ? isert_put_cmd+0x53d/0x620\n   isert_put_cmd+0x53d/0x620\n   ? isert_completion_put+0x305/0x330\n   ? isert_do_control_comp+0x2ef/0x310\n   process_one_work+0x633/0x1030\n   ? assign_work+0x11d/0x370\n   worker_thread+0x45b/0xd10\n   ? __pfx_worker_thread+0x10/0x10\n   ? __pfx_worker_thread+0x10/0x10\n   kthread+0x2c6/0x3b0\n   ? recalc_sigpending+0x15c/0x1e0\n   ? __pfx_kthread+0x10/0x10\n   ret_from_fork+0x36e/0x5a0\n   ? __pfx_ret_from_fork+0x10/0x10\n   ? __switch_to+0x572/0xdd0\n   ? __pfx_kthread+0x10/0x10\n   ret_from_fork_asm+0x1a/0x30\n   \u003c/TASK\u003e\n\n  Allocated by task 48:\n   kasan_save_stack+0x33/0x60\n   kasan_save_track+0x14/0x30\n   __kasan_kmalloc+0x8f/0xa0\n   __kmalloc_cache_noprof+0x158/0x370\n   isert_cma_handler+0x1e3/0x2ae0\n   cma_cm_event_handler+0x3e/0x240\n   cma_ib_req_handler+0x17d9/0x4490\n   cm_process_work+0x41/0x330\n   cm_work_handler+0x5727/0xc160\n   process_one_work+0x633/0x1030\n   worker_thread+0x45b/0xd10\n   kthread+0x2c6/0x3b0\n   ret_from_fork+0x36e/0x5a0\n   ret_from_fork_asm+0x1a/0x30\n\n  Freed by task 184:\n   kasan_save_stack+0x33/0x60\n   kasan_save_track+0x14/0x30\n   kasan_save_free_info+0x3b/0x60\n   __kasan_slab_free+0x43/0x70\n   kfree+0x121/0x380\n   iscsit_close_connection+0x7cf/0x1e60\n   iscsit_take_action_for_connection_exit+0x1b6/0x360\n   iscsi_target_tx_thread+0x472/0x690\n   kthread+0x2c6/0x3b0\n   ret_from_fork+0x36e/0x5a0\n   ret_from_fork_asm+0x1a/0x30",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98357",
          "url": "https://www.suse.com/security/cve/CVE-2026-98357"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284791 for CVE-2026-98357",
          "url": "https://bugzilla.suse.com/1284791"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284794 for CVE-2026-98357",
          "url": "https://bugzilla.suse.com/1284794"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98357"
    },
    {
      "cve": "CVE-2026-98358",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98358"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/iser: reject a remote invalidation of an unregistered direction\n\nA write command whose data is sent entirely as immediate data is not\nregistered.  iser_reg_mem_fastreg() takes the DMA key path and leaves\nrdma_reg[ISER_DIR_OUT].desc at NULL, while iser_dma_map_task_data() has\nalready set dir[ISER_DIR_OUT].\n\niser_check_remote_inv() looks at dir[] alone and hands the descriptor to\niser_inv_desc(), which reads desc-\u003esig_protected.  A target that answers\nsuch a command with IB_WR_SEND_WITH_INV faults the initiator.\nLeaving those commands unregistered is deliberate.\n\nThe same function already terminates the connection when a target sends\na remote invalidation the initiator did not ask for.  A target that\ninvalidates a direction that was never registered is in the same class,\nso give it the same answer.\n\n  Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI\n  KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]\n  CPU: 0 UID: 0 PID: 40 Comm: kworker/u8:2 Not tainted 7.2.0-rc5-ISERHOST-gf5098b6bae76-dirty #3 PREEMPT(lazy)\n  Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n  Workqueue: rxe_wq do_work\n  RIP: 0010:iser_task_rsp+0x6d6/0xec0\n  Code: 48 c1 ea 03 80 3c 02 00 0f 85 ba 06 00 00 48 8b 9b 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 20 48 89 fa 48 c1 ea 03 \u003c0f\u003e b6 04 02 84 c0 74 06 0f 8e 76 06 00 00 80 7b 20 00 0f 84 3d 04\n  RSP: 0018:ffff88811b008db8 EFLAGS: 00010202\n  RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000001848\n  RDX: 0000000000000004 RSI: 1ffff11021587b12 RDI: 0000000000000020\n  RBP: ffff88810adc1ae4 R08: ffff888109b7f860 R09: ffffffff90a922c0\n  R10: ffff88810adc1a1c R11: 000000000000003c R12: ffff888109b7f800\n  R13: ffff88810adc1acc R14: ffff888109b7f820 R15: 0000000000000000\n  FS:  0000000000000000(0000) GS:ffff88818a676000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  CR2: 00000000005afe2b CR3: 000000010af23005 CR4: 0000000000770ef0\n  PKRU: 55555554\n  Call Trace:\n   \u003cIRQ\u003e\n   __ib_process_cq+0xe1/0x390\n   ib_poll_handler+0x6e/0x200\n   irq_poll_softirq+0x1df/0x480\n   ? clockevents_program_event+0x2ba/0x860\n   ? __pfx_irq_poll_softirq+0x10/0x10\n   handle_softirqs+0x18e/0x590\n   ? __pfx_handle_softirqs+0x10/0x10\n   ? __hrtimer_rearm_deferred+0x156/0x450\n   do_softirq+0x3b/0x60\n   \u003c/IRQ\u003e\n   \u003cTASK\u003e\n   __local_bh_enable_ip+0x61/0x70\n   __alloc_skb+0x732/0x890\n   ? _raw_spin_lock_irqsave+0x85/0xe0\n   ? __pfx___alloc_skb+0x10/0x10\n   ? _raw_read_unlock_irqrestore+0x16/0x50\n   rxe_init_packet+0x16b/0x4f0\n   prepare_ack_packet+0xb8/0x830\n   rxe_receiver+0x499/0x9980\n   ? __pfx_rxe_receiver+0x10/0x10\n   ? rxe_completer+0x29e5/0x38c0\n   ? hrtimer_start_range_ns_common+0x75f/0x1730\n   ? hrtimer_start_range_ns+0xa6/0x2c0\n   ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n   ? __pfx_rxe_receiver+0x10/0x10\n   do_work+0x144/0x470\n   process_one_work+0x633/0x1030\n   ? assign_work+0x11d/0x370\n   worker_thread+0x45b/0xd10\n   ? __pfx_worker_thread+0x10/0x10\n   kthread+0x2c6/0x3b0\n   ? recalc_sigpending+0x15c/0x1e0\n   ? __pfx_kthread+0x10/0x10\n   ret_from_fork+0x36e/0x5a0\n   ? __pfx_ret_from_fork+0x10/0x10\n   ? __switch_to+0x572/0xdd0\n   ? __pfx_kthread+0x10/0x10\n   ret_from_fork_asm+0x1a/0x30\n   \u003c/TASK\u003e\n  Modules linked in:\n  ---[ end trace 0000000000000000 ]---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98358",
          "url": "https://www.suse.com/security/cve/CVE-2026-98358"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284289 for CVE-2026-98358",
          "url": "https://bugzilla.suse.com/1284289"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98358"
    },
    {
      "cve": "CVE-2026-98359",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98359"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: Reject unregistering netdevs in ib_get_eth_speed\n\nib_device_get_netdev() intentionally returns a referenced net_device even\nwhen it is unregistering, so matching and cleanup callers can still find\nthe association. The reference keeps struct net_device allocated, but does\nnot guarantee that the device remains operational.\n\nib_get_eth_speed() uses the returned device operationally by invoking its\nethtool callback. Although that call is made under RTNL, the function does\nnot verify the registration state first. An asynchronous RDMA port query\ncan therefore call into a netdev after NETDEV_UNREGISTER and ndo_uninit\nhave completed.\n\nCheck for NETREG_REGISTERED while holding RTNL and return -ENODEV for a\ndevice which is being unregistered. Keeping RTNL across the check and the\nethtool operation prevents unregister from starting between them.\n\nKeep the speed fallback and warning under RTNL as well, so the warning can\nsafely read netdev-\u003ename. Drop the netdev reference before releasing RTNL\nonce all accesses to the device are complete.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98359",
          "url": "https://www.suse.com/security/cve/CVE-2026-98359"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284746 for CVE-2026-98359",
          "url": "https://bugzilla.suse.com/1284746"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284747 for CVE-2026-98359",
          "url": "https://bugzilla.suse.com/1284747"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98359"
    },
    {
      "cve": "CVE-2026-98360",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98360"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds\n\nrxe_get_mcg() publishes a newly allocated multicast group in\nrxe-\u003emcg_tree before programming the backing Ethernet multicast address\nwith rxe_mcast_add(), which runs outside mcg_lock. A local userspace\nRDMA client reaches this path with ATTACH_MCAST on a UD QP; if\nrxe_mcast_add() then returns an error (for example -ENODEV when the\nbacking netdev has been removed, or a propagated dev_mc_add() error),\nthe unwind frees the published group without removing it from the tree.\nA later lookup of the same MGID dereferences the freed struct rxe_mcg\nfrom __rxe_lookup_mcg().\n\nFix this by keeping the new mcg private until rxe_mcast_add() succeeds.\nSplit the tree publication into __rxe_publish_mcg(), call rxe_mcast_add()\nbefore taking the tree reference, and free the still-private mcg on\nfailure. Because the group is never visible in mcg_tree until the\nmulticast address is programmed, no concurrent caller can look it up or\nattach a QP to a group that is about to be torn down, so the error path\nneeds no conditional unwind. If another caller publishes the same MGID\nwhile the address is being programmed, the post-add re-check under\nmcg_lock finds the winner; this caller then drops its private object and\nbalances its own rxe_mcast_add() with rxe_mcast_del() before returning\nthe winner.\n\nReproduced by forcing the rxe_mcast_add() error return under KASAN:\nwithout the change the next attach to the same MGID reports a\nslab-use-after-free in __rxe_lookup_mcg(); with it the forced failure\nreturns cleanly. A no-injection attach/detach regression, including a\ntwo-QP shared join/leave and re-attach, stays KASAN- and leak-clean.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98360",
          "url": "https://www.suse.com/security/cve/CVE-2026-98360"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284649 for CVE-2026-98360",
          "url": "https://bugzilla.suse.com/1284649"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98360"
    },
    {
      "cve": "CVE-2026-98365",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98365"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access\n\nmr_check_range() validates that [iova, iova+length) falls within the\nregistered MR range using wraparound-prone arithmetic:\n\n    if (iova \u003c mr-\u003eibmr.iova ||\n        iova + length \u003e mr-\u003eibmr.iova + mr-\u003eibmr.length)\n\nA remote peer can craft an RDMA-Write/Read RETH so that iova + length\nwraps to 0 (e.g. iova=0xfffffffffffffff8, length=8), bypassing the\ncheck. rxe_mr_iova_to_index() then computes a huge index (int idx, only\nguarded by WARN_ON) and rxe_mr_copy_xarray() dereferences\nmr-\u003epage_info[huge], causing an out-of-bounds read/write and a kernel\noops that is triggerable by an unauthenticated remote peer.\n\nRewrite the check in overflow-safe form; the first two clauses guarantee\nthat the subsequent subtractions do not underflow:\n\n    if (iova \u003c mr-\u003eibmr.iova ||\n        length \u003e mr-\u003eibmr.length ||\n        iova - mr-\u003eibmr.iova \u003e mr-\u003eibmr.length - length)\n\nWith the fix, mr_check_range() returns -EINVAL for the crafted iova and\nthe responder reports REMOTE_ACCESS_ERROR instead of triggering the OOB.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98365",
          "url": "https://www.suse.com/security/cve/CVE-2026-98365"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284288 for CVE-2026-98365",
          "url": "https://bugzilla.suse.com/1284288"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98365"
    },
    {
      "cve": "CVE-2026-98366",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98366"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: validate access flags before swapping the MR\u0027s PD\n\nrxe_rereg_user_mr() reassigns mr-\u003eibmr.pd first and only then\nvalidates the IB_MR_REREG_ACCESS argument:\n\n\tif (flags \u0026 IB_MR_REREG_PD) {\n\t\trxe_put(old_pd);\n\t\trxe_get(pd);\n\t\tmr-\u003eibmr.pd = ibpd;\n\t}\n\n\tif (flags \u0026 IB_MR_REREG_ACCESS) {\n\t\tif (access \u0026 ~RXE_ACCESS_SUPPORTED_MR)\n\t\t\treturn ERR_PTR(-EOPNOTSUPP);\n\t\tmr-\u003eaccess = access;\n\t}\n\nBoth flags pass the entry check because RXE_MR_REREG_SUPPORTED is\nIB_MR_REREG_PD | IB_MR_REREG_ACCESS, so a caller can reach the access\ncheck with mr-\u003eibmr.pd already reassigned.\n\nmr-\u003eibmr.pd is owned by the core, which adjusts pd-\u003eusecnt only on the\nsuccess path: ib_uverbs_rereg_mr() jumps to put_new_uobj on a driver error\nwithout undoing the reassignment, so mr-\u003epd == new_pd while the usecnts\nstill charge the MR to orig_pd. ib_dereg_mr_user() then decrements\nnew_pd, whose count can reach zero while a memory window still references\nit; uverbs_free_pd() frees the PD on that count alone and rxe_mw_cleanup()\nwrites to freed memory:\n\n  BUG: KASAN: slab-use-after-free in __rxe_put+0x31/0xa0\n  Write of size 4 at addr ffff8881301dd690 by task rxe_poc/591\n   __rxe_put+0x31/0xa0\n   rxe_mw_cleanup+0x42/0x200\n   __rxe_cleanup+0x115/0x370\n   rxe_dealloc_mw+0x4c/0x80\n  Allocated by task 591:\n   ib_uverbs_alloc_pd+0x258/0x540\n  Freed by task 591:\n   ib_dealloc_pd_user+0x174/0x210\n   uverbs_free_pd+0x8d/0xc0\n   ib_uverbs_dealloc_pd+0x18e/0x1d0\n\nValidate the access flags before mutating any state so the callback either\napplies every requested change or none.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98366",
          "url": "https://www.suse.com/security/cve/CVE-2026-98366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284655 for CVE-2026-98366",
          "url": "https://bugzilla.suse.com/1284655"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98366"
    },
    {
      "cve": "CVE-2026-98367",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98367"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept\n\nWe need to clear cep before release state_lock as siw_qp_llp_close and\nsiw_qp_modify-\u003esiw_qp_llp_close did.\n\nOtherwise if siw_qp_modify() fails in siw_accept(), the QP\u0027s state_lock\nis released before the error path cleanup. A concurrent ibv_modify_qp()\ntransitioning the QP to ERROR can race in this window:\n\n  siw_accept()                       ibv_modify_qp(ERROR)\n  ----------------------             ----------------------\n  siw_qp_modify() fails\n  up_write(\u0026qp-\u003estate_lock)\n                                     down_write(\u0026qp-\u003estate_lock)\n                                     nextstate_from_idle():\n\t\t\t\t     if (qp-\u003ecep)\n                                       siw_cep_put(qp-\u003ecep) \u003c- frees cep\n                                       qp-\u003ecep = NULL\n  goto error\n    cep-\u003eqp = NULL                   \u003c- UAF\n\nClear qp-\u003ecep and drop the association reference taken by siw_cep_get(),\nall under the write lock held from the initial down_write(\u0026qp-\u003estate_lock).\nThread B therefore sees qp-\u003ecep == NULL, skips its own put, and cannot free\nthe cep before siw_accept() is done with it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98367",
          "url": "https://www.suse.com/security/cve/CVE-2026-98367"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284424 for CVE-2026-98367",
          "url": "https://bugzilla.suse.com/1284424"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-98367"
    },
    {
      "cve": "CVE-2026-98432",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-98432"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: free inet_opt and ireq_opt after an RCU grace period\n\ntcp_v4_syn_recv_sock() transfers ownership of ireq-\u003eireq_opt to the\nchild socket (newinet-\u003einet_opt) without copying it.\n\nAnother cpu can concurrently process a retransmitted SYN for the same\nrequest socket, and send a SYNACK from tcp_check_req().\ntcp_v4_send_synack() and inet_csk_route_req() read ireq-\u003eireq_opt\nunder rcu_read_lock() only, and ip_build_and_send_pkt() and\nip_options_build() then read opt-\u003eoptlen twice.\n\nNote that the SYNACK timer itself is not an issue: it holds a\nreference on its request socket, and inet_csk_reqsk_queue_drop()\ncalls timer_delete_sync() before the child can be freed.\n\nSince commit 079096f103fa (\"tcp/dccp: install syn_recv requests\ninto ehash table\"), request sockets are processed without holding\nthe listener lock, so nothing prevents the child socket from being\nfreed while the SYNACK is still being built. TCP child sockets do\nnot have SOCK_RCU_FREE, and inet_sock_destruct() frees inet_opt\nwith a plain kfree(), leading to a use-after-free in\nip_options_build().\n\nA similar issue exists with request socket migration\n(net.ipv4.tcp_migrate_req=1, or a BPF_SK_REUSEPORT_SELECT_OR_MIGRATE\nprogram). reqsk_timer_handler() clones the request socket with\ninet_reqsk_clone(), so that the old request socket and its clone\nshare the same ireq_opt, then reqsk_migrate_reset() clears the\npointer in the old one. Another cpu holding a reference on the old\nrequest socket can still be using these options (sending a SYNACK,\nor creating a child in tcp_v4_syn_recv_sock()) when the clone is\nfreed, and tcp_v4_reqsk_destructor() also uses a plain kfree().\n\nReaders already use RCU, and other paths replacing inet_opt\n(do_ip_setsockopt(), cipso_v4_sock_setattr()...) already use\nkfree_rcu(). Use kfree_rcu() in inet_sock_destruct() and\ntcp_v4_reqsk_destructor() as well.\n\nIPv6 is not affected by the first issue, because tcp_v6_syn_recv_sock()\nduplicates the options. tcp_v6_reqsk_destructor() has the same\nmigration issue with ipv6_opt, which is only set by CALIPSO. This\nwill be addressed in a separate patch.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-98432",
          "url": "https://www.suse.com/security/cve/CVE-2026-98432"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285685 for CVE-2026-98432",
          "url": "https://bugzilla.suse.com/1285685"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285686 for CVE-2026-98432",
          "url": "https://bugzilla.suse.com/1285686"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1288904 for CVE-2026-98432",
          "url": "https://bugzilla.suse.com/1288904"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1288918 for CVE-2026-98432",
          "url": "https://bugzilla.suse.com/1288918"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-98432"
    },
    {
      "cve": "CVE-2026-99999",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-99999"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: validate checksum_start before completing checksum\n\nIf a packet with bad checksum metadata gets into the ipv4 stack,\nskb_checksum_help can corrupt the network header and cause a bunch of\nmischief.\n\nThis was discovered and reported by Paulos, and has been reporoduced\nby others independently since.\n\nWe really shouldn\u0027t allow such packets in, but as a defence\nin depth measure, let\u0027s also check before we complete the checksum.\n\nA more complete validation at input is forthcoming, but needs more work.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-99999",
          "url": "https://www.suse.com/security/cve/CVE-2026-99999"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285684 for CVE-2026-99999",
          "url": "https://bugzilla.suse.com/1285684"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285687 for CVE-2026-99999",
          "url": "https://bugzilla.suse.com/1285687"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1286031 for CVE-2026-99999",
          "url": "https://bugzilla.suse.com/1286031"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:cluster-md-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:dlm-kmp-default-0:6.12.0-160000.40.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.ppc64le",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 16.0:gfs2-kmp-default-0:6.12.0-160000.40.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-24T11:15:59Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-99999"
    }
  ]
}