Vulnerability-Lookup

SUSE-SU-2026:4282-1

Vulnerability from csaf_suse - Published: 2026-09-22 08:34 - Updated: 2026-09-23 08:31

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894). - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619). - CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541). - CVE-2026-43134: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (bsc#1264308). - CVE-2026-43257: media: cx88: Add missing unmap in snd_cx88_hw_params() (bsc#1264296). - CVE-2026-43277: ACPI / APEI: Make GHES estatus header validation more user friendly (bsc#1264594). - CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068). - CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121). - CVE-2026-45941: tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure (bsc#1266920). - CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501). - CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612). - CVE-2026-46108: ipmi:si: Return state to normal if message allocation fails (bsc#1267615). - CVE-2026-46128: ipmi: Check event message buffer response for bad data (bsc#1267643). - CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). - CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013). - CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987). - CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972). - CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113). - CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114). - CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655). - CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). - CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412). - CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783). - CVE-2026-53091: net: do not use skb_mac_header() in qdisc_pkt_len_init() (bsc#1269530). - CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306). - CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686). - CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381). - CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301). - CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256). - CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774). - CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238). - CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815). - CVE-2026-53403: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in (bsc#1271731). - CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297). - CVE-2026-63823: security: don't use RCU accessors for cred->session_keyring (bsc#1272182). - CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429). - CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385). - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390). - CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). - CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641). - CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877). - CVE-2026-63962: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (bsc#1272482). - CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027). - CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734). - CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774). - CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831). - CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). - CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882). - CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891). - CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762). - CVE-2026-64088: batman-adv: tt: fix negative tt_buff_len (bsc#1273463). - CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). - CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748). - CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262). - CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). - CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). - CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749). - CVE-2026-64178: Bluetooth: bnep: Fix UAF read of dev->name (bsc#1273946). - CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210). - CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944). - CVE-2026-64306: crypto: drbg - Fix returning success on failure in CTR_DRBG (bsc#1273939). - CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968). - CVE-2026-64313: crypto: ecc - Fix carry overflow in vli multiplication (bsc#1273940). - CVE-2026-64315: printk: add print_hex_dump_devel() (bsc#1274028). - CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936). - CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958). - CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305). - CVE-2026-64332: USB: ulpi: fix memory leak on registration failure (bsc#1273285). - CVE-2026-64333: USB: serial: digi_acceleport: fix write buffer corruption (bsc#1273933). - CVE-2026-64334: USB: serial: digi_acceleport: fix hard lockup on disconnect (bsc#1273942). - CVE-2026-64340: USB: legousbtower: fix use-after-free on disconnect race (bsc#1274003). - CVE-2026-64341: USB: iowarrior: fix use-after-free on disconnect race (bsc#1273895). - CVE-2026-64343: USB: ldusb: fix use-after-free on disconnect race (bsc#1273974). - CVE-2026-64344: USB: idmouse: simplify disconnect handling (bsc#1274019). - CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860). - CVE-2026-64408: Bluetooth: bnep: pin L2CAP connection during netdev registration (bsc#1273778). - CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077). - CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780). - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274). - CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277). - CVE-2026-64470: Bluetooth: btusb: fix use-after-free on marvell probe failure (bsc#1273892). - CVE-2026-64471: Bluetooth: btusb: fix use-after-free on registration failure (bsc#1274278). - CVE-2026-64512: ACPI: CPPC: Suppress UBSAN warning caused by field misuse (bsc#1273597). - CVE-2026-64513: KVM: x86: Move update_cr8_intercept() to lapic.c (bsc#1273327). - CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303). - CVE-2026-64544: crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents (bsc#1273316). - CVE-2026-64547: net: usb: net1080: validate packet_len before pad-byte access in rx_fixup (bsc#1273319). - CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813). - CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336). - CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930). - CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006). - CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041). - CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040). - CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581). - CVE-2026-68093: KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (bsc#1274725). - CVE-2026-68111: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (bsc#1274873). - CVE-2026-68117: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (bsc#1274881). - CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888). - CVE-2026-68123: net: openvswitch: don't call pad_packet if not necessary (bsc#1275169). - CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517). - CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). - CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583). - CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301). - CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303). - CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304). - CVE-2026-68156: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (bsc#1275305). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307). - CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470). - CVE-2026-68188: Bluetooth: RFCOMM: Fix session UAF in set_termios (bsc#1274953). - CVE-2026-68197: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (bsc#1274804). - CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). - CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161). - CVE-2026-68234: drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved (bsc#1275650). - CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704). - CVE-2026-68277: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers (bsc#1275125). - CVE-2026-68278: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (bsc#1275870). - CVE-2026-68279: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers (bsc#1275871). - CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970). - CVE-2026-68289: tipc: keep the skb in rcv queue until the whole data is read (bsc#1275976). - CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088). - CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083). - CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665). - CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662). - CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659). - CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651). - CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646). - CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645). - CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). - CVE-2026-68349: wifi: carl9170: fix buffer overflow in rx_stream failover path (bsc#1274681). - CVE-2026-68351: wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (bsc#1274678). - CVE-2026-68357: watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (bsc#1274737). - CVE-2026-68363: wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (bsc#1275164). - CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898). - CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908). - CVE-2026-68405: wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock (bsc#1274896). - CVE-2026-68410: wifi: libertas: fix memory leak in helper_firmware_cb() (bsc#1274710). - CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700). - CVE-2026-68426: esp: remove the skb from the chain when it's enqueued in cryptd_wq (bsc#1274705). - CVE-2026-68428: KVM: x86/mmu: Fix use-after-free on vendor module reload (bsc#1274699). - CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800). - CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801). - CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834). - CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208). - CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). - CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506). - CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034). - CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535). - CVE-2026-72084: scsi: target: Write NULL to *port_nexus_ptr if no ISID (bsc#1275540). - CVE-2026-72086: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1277179). - CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). - CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). - CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). - CVE-2026-72142: i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (bsc#1277522). - CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). - CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827). - CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). - CVE-2026-72284: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (bsc#1277730). - CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923). - CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). - CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). - CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). - CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869). - CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). - CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). - CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057). - CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). - CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542). - CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). - CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). - CVE-2026-74265: net: mana: initialize gdma queue id to INVALID_QUEUE_ID (bsc#1276517). - CVE-2026-74271: power: supply: core: Delete two error messages for a failed memory allocation in power_supply_check_supplies() (bsc#1276502). - CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). - CVE-2026-74279: crypto: cavium/cpt - fix DMA cleanup using wrong loop index (bsc#1276479). - CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452). - CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446). - CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). - CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr->pd (bsc#1277095). - CVE-2026-74341: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response (bsc#1277089). - CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). - CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). - CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). - CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). - CVE-2026-74416: drm/radeon: fix memory leak in radeon_ring_restore() on lock failure (bsc#1276343). - CVE-2026-74417: drm/radeon: fix integer overflow in radeon_align_pitch() (bsc#1276363). - CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073). - CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). - CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346). - CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350). - CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864). - CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867). - CVE-2026-74508: Bluetooth: HIDP: reject frames without a transaction header (bsc#1277893). - CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950). - CVE-2026-74519: pinctrl: devicetree: don't free uninitialized dev_name on error path (bsc#1275810). - CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687). - CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695). - CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688). - CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). - CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). - CVE-2026-74582: af_packet: fix raw sockets over 6in4 tunnel (bsc#1275784). - CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066). - CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391). - CVE-2026-74673: Input: evdev - fix information leak in evdev_pass_values() (bsc#1277637). - CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). - CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). - CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022). - CVE-2026-80574: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (bsc#1277329). - CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). - CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275). - CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). - CVE-2026-80609: qede: fix out-of-bounds check for cqe->len_list (bsc#1278334). - CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). - CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). - CVE-2026-80765: HID: hyperv: validate initial device info bounds (bsc#1279499). - CVE-2026-80819: Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (bsc#1279607). - CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). The following non security issues were fixed: - fcntl: Fix potential deadlock in send_sig{io, urg}() (bsc#1269113). - mkspec-dtb: Move DTS prefix into package list. - mkspec-dtb: Move provides-obsoletes to package list. - mkspec-dtb: Put per-architecture package lists into a hash. - mkspec-dtb: re-indent. - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550). - RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes). - s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1270264). - s390/syscalls: Add spectre boundary for syscall dispatch table (bsc#1270264). - smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902). - smb: client: harden POSIX SID length parsing (bsc#1273557).

Patchnames: SUSE-2026-4282,SUSE-SLE-Live-Patching-12-SP5-2026-4282,SUSE-SLE-SERVER-12-SP5-LTSS-2026-4282,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4282

CVE-2024-35973

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-man-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-devel-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-macros-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-source-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_328-default-0:1-8.5.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_328-default-0:1-8.5.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_328-default-0:1-8.5.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-man-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-devel-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-macros-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-source-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:cluster-md-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:dlm-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gfs2-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-0:4.12.14-122.328.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-0:4.12.14-122.328.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ocfs2-kmp-default-0:4.12.14-122.328.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-39964

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2025-40022

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2025-40277

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2025-68214

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-23003

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-23443

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-31483

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-43116

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-43125

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-43134

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-43257

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-43277

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-43363

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-43416

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-45941

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-46070

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-46107

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-46108

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-46128

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-52912

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-52920

4.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-52925

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-52939

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-52946

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53001

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53059

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-53061

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53077

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53089

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53091

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53149

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53163

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53219

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53220

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53223

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53228

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53238

2.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact low

CVE-2026-53264

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-53265

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53309

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53374

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-53388

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-53403

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-63810

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-63823

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-63860

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-63868

4.3 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-63887

8.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-63888

7.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-63890

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-63891

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-63892

6.1 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-63898

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-63920

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-63928

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-63962

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-63990

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64001

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64002

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64005

5.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64007

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64010

7.1 (High)


                
                  CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64011

7.1 (High)


                
                  CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64015

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64088

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64103

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64109

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64113

5.3 (Medium)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64114

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64115

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64118

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64164

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64178

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64190

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64266

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64304

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64306

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64312

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64313

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64315

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64317

6.1 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64322

6.3 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64323

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64332

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64333

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64334

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64340

6.3 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64341

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64343

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64344

6.3 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64380

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64381

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64408

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64411

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64412

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64423

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64436

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64470

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64471

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64512

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64513

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64541

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64544

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64547

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64551

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64553

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64562

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64567

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-64581

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-64582

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68082

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68093

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68111

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68117

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68121

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68123

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68129

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68141

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68143

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68153

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68154

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68155

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68156

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68158

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68159

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68188

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68197

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68198

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68202

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68234

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68238

1.9 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact low

CVE-2026-68277

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68278

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68279

2.4 (Low)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact low

CVE-2026-68284

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68289

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact low

CVE-2026-68299

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68300

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68313

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68315

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68320

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68325

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68328

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68329

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68338

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68349

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68351

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68357

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68363

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68397

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68398

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68405

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68410

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68425

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68426

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68428

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-68432

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68433

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68450

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-68480

5.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72017

2.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact low

CVE-2026-72020

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-72036

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72083

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-72084

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-72086

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72108

3.4 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact low

CVE-2026-72135

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-72138

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72142

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72164

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-72251

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-72282

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72284

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72296

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72297

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72323

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-72339

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-72389

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-72421

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72450

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72466

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-72487

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-72502

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74255

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74261

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74265

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74271

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74278

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact low

CVE-2026-74279

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74296

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74297

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74302

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74334

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74341

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74377

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74378

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74382

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74388

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74406

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74416

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74417

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74454

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74479

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74482

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74488

7.1 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74495

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74496

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74508

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74510

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74519

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74537

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74548

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74550

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74556

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74557

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74582

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74584

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74669

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-74673

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74705

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-74743

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-80534

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-80574

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-80580

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-80590

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-80603

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-80609

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-80714

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-80737

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

CVE-2026-80765

6.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-80819

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact moderate

CVE-2026-80909

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2024-35973

Threats

Impact important

References

1005 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://www.suse.com/support/update/announcement/…	self
https://bugzilla.suse.com/1224586	self
https://bugzilla.suse.com/1251966	self
https://bugzilla.suse.com/1252682	self
https://bugzilla.suse.com/1254894	self
https://bugzilla.suse.com/1255225	self
https://bugzilla.suse.com/1257246	self
https://bugzilla.suse.com/1261679	self
https://bugzilla.suse.com/1262771	self
https://bugzilla.suse.com/1264296	self
https://bugzilla.suse.com/1264308	self
https://bugzilla.suse.com/1264541	self
https://bugzilla.suse.com/1264594	self
https://bugzilla.suse.com/1264619	self
https://bugzilla.suse.com/1264821	self
https://bugzilla.suse.com/1265068	self
https://bugzilla.suse.com/1265121	self
https://bugzilla.suse.com/1266920	self
https://bugzilla.suse.com/1267501	self
https://bugzilla.suse.com/1267612	self
https://bugzilla.suse.com/1267615	self
https://bugzilla.suse.com/1267643	self
https://bugzilla.suse.com/1268972	self
https://bugzilla.suse.com/1268987	self
https://bugzilla.suse.com/1269000	self
https://bugzilla.suse.com/1269013	self
https://bugzilla.suse.com/1269113	self
https://bugzilla.suse.com/1269114	self
https://bugzilla.suse.com/1269238	self
https://bugzilla.suse.com/1269256	self
https://bugzilla.suse.com/1269301	self
https://bugzilla.suse.com/1269306	self
https://bugzilla.suse.com/1269381	self
https://bugzilla.suse.com/1269412	self
https://bugzilla.suse.com/1269530	self
https://bugzilla.suse.com/1269655	self
https://bugzilla.suse.com/1269685	self
https://bugzilla.suse.com/1269686	self
https://bugzilla.suse.com/1269733	self
https://bugzilla.suse.com/1269734	self
https://bugzilla.suse.com/1269774	self
https://bugzilla.suse.com/1269783	self
https://bugzilla.suse.com/1269815	self
https://bugzilla.suse.com/1270264	self
https://bugzilla.suse.com/1271731	self
https://bugzilla.suse.com/1271825	self
https://bugzilla.suse.com/1271827	self
https://bugzilla.suse.com/1272182	self
https://bugzilla.suse.com/1272210	self
https://bugzilla.suse.com/1272262	self
https://bugzilla.suse.com/1272297	self
https://bugzilla.suse.com/1272385	self
https://bugzilla.suse.com/1272390	self
https://bugzilla.suse.com/1272426	self
https://bugzilla.suse.com/1272429	self
https://bugzilla.suse.com/1272482	self
https://bugzilla.suse.com/1272497	self
https://bugzilla.suse.com/1272591	self
https://bugzilla.suse.com/1272641	self
https://bugzilla.suse.com/1272643	self
https://bugzilla.suse.com/1272877	self
https://bugzilla.suse.com/1272891	self
https://bugzilla.suse.com/1273027	self
https://bugzilla.suse.com/1273105	self
https://bugzilla.suse.com/1273285	self
https://bugzilla.suse.com/1273303	self
https://bugzilla.suse.com/1273305	self
https://bugzilla.suse.com/1273316	self
https://bugzilla.suse.com/1273319	self
https://bugzilla.suse.com/1273327	self
https://bugzilla.suse.com/1273336	self
https://bugzilla.suse.com/1273463	self
https://bugzilla.suse.com/1273555	self
https://bugzilla.suse.com/1273557	self
https://bugzilla.suse.com/1273597	self
https://bugzilla.suse.com/1273734	self
https://bugzilla.suse.com/1273742	self
https://bugzilla.suse.com/1273745	self
https://bugzilla.suse.com/1273748	self
https://bugzilla.suse.com/1273749	self
https://bugzilla.suse.com/1273759	self
https://bugzilla.suse.com/1273762	self
https://bugzilla.suse.com/1273774	self
https://bugzilla.suse.com/1273778	self
https://bugzilla.suse.com/1273780	self
https://bugzilla.suse.com/1273813	self
https://bugzilla.suse.com/1273831	self
https://bugzilla.suse.com/1273860	self
https://bugzilla.suse.com/1273869	self
https://bugzilla.suse.com/1273882	self
https://bugzilla.suse.com/1273891	self
https://bugzilla.suse.com/1273892	self
https://bugzilla.suse.com/1273895	self
https://bugzilla.suse.com/1273930	self
https://bugzilla.suse.com/1273933	self
https://bugzilla.suse.com/1273936	self
https://bugzilla.suse.com/1273939	self
https://bugzilla.suse.com/1273940	self
https://bugzilla.suse.com/1273942	self
https://bugzilla.suse.com/1273944	self
https://bugzilla.suse.com/1273946	self
https://bugzilla.suse.com/1273957	self
https://bugzilla.suse.com/1273958	self
https://bugzilla.suse.com/1273968	self
https://bugzilla.suse.com/1273974	self
https://bugzilla.suse.com/1274003	self
https://bugzilla.suse.com/1274006	self
https://bugzilla.suse.com/1274019	self
https://bugzilla.suse.com/1274028	self
https://bugzilla.suse.com/1274040	self
https://bugzilla.suse.com/1274041	self
https://bugzilla.suse.com/1274077	self
https://bugzilla.suse.com/1274208	self
https://bugzilla.suse.com/1274274	self
https://bugzilla.suse.com/1274277	self
https://bugzilla.suse.com/1274278	self
https://bugzilla.suse.com/1274550	self
https://bugzilla.suse.com/1274581	self
https://bugzilla.suse.com/1274637	self
https://bugzilla.suse.com/1274645	self
https://bugzilla.suse.com/1274646	self
https://bugzilla.suse.com/1274651	self
https://bugzilla.suse.com/1274659	self
https://bugzilla.suse.com/1274662	self
https://bugzilla.suse.com/1274665	self
https://bugzilla.suse.com/1274678	self
https://bugzilla.suse.com/1274681	self
https://bugzilla.suse.com/1274699	self
https://bugzilla.suse.com/1274700	self
https://bugzilla.suse.com/1274705	self
https://bugzilla.suse.com/1274710	self
https://bugzilla.suse.com/1274725	self
https://bugzilla.suse.com/1274737	self
https://bugzilla.suse.com/1274800	self
https://bugzilla.suse.com/1274801	self
https://bugzilla.suse.com/1274803	self
https://bugzilla.suse.com/1274804	self
https://bugzilla.suse.com/1274834	self
https://bugzilla.suse.com/1274859	self
https://bugzilla.suse.com/1274873	self
https://bugzilla.suse.com/1274881	self
https://bugzilla.suse.com/1274888	self
https://bugzilla.suse.com/1274896	self
https://bugzilla.suse.com/1274898	self
https://bugzilla.suse.com/1274902	self
https://bugzilla.suse.com/1274908	self
https://bugzilla.suse.com/1274953	self
https://bugzilla.suse.com/1275083	self
https://bugzilla.suse.com/1275088	self
https://bugzilla.suse.com/1275094	self
https://bugzilla.suse.com/1275125	self
https://bugzilla.suse.com/1275161	self
https://bugzilla.suse.com/1275164	self
https://bugzilla.suse.com/1275169	self
https://bugzilla.suse.com/1275301	self
https://bugzilla.suse.com/1275303	self
https://bugzilla.suse.com/1275304	self
https://bugzilla.suse.com/1275305	self
https://bugzilla.suse.com/1275307	self
https://bugzilla.suse.com/1275470	self
https://bugzilla.suse.com/1275506	self
https://bugzilla.suse.com/1275517	self
https://bugzilla.suse.com/1275535	self
https://bugzilla.suse.com/1275540	self
https://bugzilla.suse.com/1275583	self
https://bugzilla.suse.com/1275650	self
https://bugzilla.suse.com/1275685	self
https://bugzilla.suse.com/1275687	self
https://bugzilla.suse.com/1275688	self
https://bugzilla.suse.com/1275695	self
https://bugzilla.suse.com/1275696	self
https://bugzilla.suse.com/1275704	self
https://bugzilla.suse.com/1275784	self
https://bugzilla.suse.com/1275810	self
https://bugzilla.suse.com/1275827	self
https://bugzilla.suse.com/1275864	self
https://bugzilla.suse.com/1275867	self
https://bugzilla.suse.com/1275870	self
https://bugzilla.suse.com/1275871	self
https://bugzilla.suse.com/1275923	self
https://bugzilla.suse.com/1275950	self
https://bugzilla.suse.com/1275970	self
https://bugzilla.suse.com/1275976	self
https://bugzilla.suse.com/1275985	self
https://bugzilla.suse.com/1276006	self
https://bugzilla.suse.com/1276343	self
https://bugzilla.suse.com/1276346	self
https://bugzilla.suse.com/1276350	self
https://bugzilla.suse.com/1276354	self
https://bugzilla.suse.com/1276363	self
https://bugzilla.suse.com/1276395	self
https://bugzilla.suse.com/1276445	self
https://bugzilla.suse.com/1276446	self
https://bugzilla.suse.com/1276452	self
https://bugzilla.suse.com/1276479	self
https://bugzilla.suse.com/1276502	self
https://bugzilla.suse.com/1276517	self
https://bugzilla.suse.com/1276528	self
https://bugzilla.suse.com/1276542	self
https://bugzilla.suse.com/1276547	self
https://bugzilla.suse.com/1276665	self
https://bugzilla.suse.com/1276767	self
https://bugzilla.suse.com/1276840	self
https://bugzilla.suse.com/1276922	self
https://bugzilla.suse.com/1277022	self
https://bugzilla.suse.com/1277023	self
https://bugzilla.suse.com/1277034	self
https://bugzilla.suse.com/1277057	self
https://bugzilla.suse.com/1277066	self
https://bugzilla.suse.com/1277073	self
https://bugzilla.suse.com/1277089	self
https://bugzilla.suse.com/1277095	self
https://bugzilla.suse.com/1277179	self
https://bugzilla.suse.com/1277235	self
https://bugzilla.suse.com/1277275	self
https://bugzilla.suse.com/1277329	self
https://bugzilla.suse.com/1277350	self
https://bugzilla.suse.com/1277391	self
https://bugzilla.suse.com/1277522	self
https://bugzilla.suse.com/1277553	self
https://bugzilla.suse.com/1277561	self
https://bugzilla.suse.com/1277571	self
https://bugzilla.suse.com/1277637	self
https://bugzilla.suse.com/1277728	self
https://bugzilla.suse.com/1277730	self
https://bugzilla.suse.com/1277738	self
https://bugzilla.suse.com/1277893	self
https://bugzilla.suse.com/1277908	self
https://bugzilla.suse.com/1278113	self
https://bugzilla.suse.com/1278132	self
https://bugzilla.suse.com/1278233	self
https://bugzilla.suse.com/1278236	self
https://bugzilla.suse.com/1278240	self
https://bugzilla.suse.com/1278253	self
https://bugzilla.suse.com/1278293	self
https://bugzilla.suse.com/1278294	self
https://bugzilla.suse.com/1278334	self
https://bugzilla.suse.com/1279422	self
https://bugzilla.suse.com/1279487	self
https://bugzilla.suse.com/1279499	self
https://bugzilla.suse.com/1279607	self
https://bugzilla.suse.com/1279813	self
https://www.suse.com/security/cve/CVE-2024-35973/	self
https://www.suse.com/security/cve/CVE-2025-39964/	self
https://www.suse.com/security/cve/CVE-2025-40022/	self
https://www.suse.com/security/cve/CVE-2025-40277/	self
https://www.suse.com/security/cve/CVE-2025-68214/	self
https://www.suse.com/security/cve/CVE-2026-23003/	self
https://www.suse.com/security/cve/CVE-2026-23443/	self
https://www.suse.com/security/cve/CVE-2026-31483/	self
https://www.suse.com/security/cve/CVE-2026-43116/	self
https://www.suse.com/security/cve/CVE-2026-43125/	self
https://www.suse.com/security/cve/CVE-2026-43134/	self
https://www.suse.com/security/cve/CVE-2026-43257/	self
https://www.suse.com/security/cve/CVE-2026-43277/	self
https://www.suse.com/security/cve/CVE-2026-43363/	self
https://www.suse.com/security/cve/CVE-2026-43416/	self
https://www.suse.com/security/cve/CVE-2026-45941/	self
https://www.suse.com/security/cve/CVE-2026-46070/	self
https://www.suse.com/security/cve/CVE-2026-46107/	self
https://www.suse.com/security/cve/CVE-2026-46108/	self
https://www.suse.com/security/cve/CVE-2026-46128/	self
https://www.suse.com/security/cve/CVE-2026-52912/	self
https://www.suse.com/security/cve/CVE-2026-52920/	self
https://www.suse.com/security/cve/CVE-2026-52925/	self
https://www.suse.com/security/cve/CVE-2026-52939/	self
https://www.suse.com/security/cve/CVE-2026-52946/	self
https://www.suse.com/security/cve/CVE-2026-53001/	self
https://www.suse.com/security/cve/CVE-2026-53059/	self
https://www.suse.com/security/cve/CVE-2026-53061/	self
https://www.suse.com/security/cve/CVE-2026-53077/	self
https://www.suse.com/security/cve/CVE-2026-53089/	self
https://www.suse.com/security/cve/CVE-2026-53091/	self
https://www.suse.com/security/cve/CVE-2026-53149/	self
https://www.suse.com/security/cve/CVE-2026-53163/	self
https://www.suse.com/security/cve/CVE-2026-53219/	self
https://www.suse.com/security/cve/CVE-2026-53220/	self
https://www.suse.com/security/cve/CVE-2026-53223/	self
https://www.suse.com/security/cve/CVE-2026-53228/	self
https://www.suse.com/security/cve/CVE-2026-53238/	self
https://www.suse.com/security/cve/CVE-2026-53264/	self
https://www.suse.com/security/cve/CVE-2026-53265/	self
https://www.suse.com/security/cve/CVE-2026-53309/	self
https://www.suse.com/security/cve/CVE-2026-53374/	self
https://www.suse.com/security/cve/CVE-2026-53388/	self
https://www.suse.com/security/cve/CVE-2026-53403/	self
https://www.suse.com/security/cve/CVE-2026-63810/	self
https://www.suse.com/security/cve/CVE-2026-63823/	self
https://www.suse.com/security/cve/CVE-2026-63860/	self
https://www.suse.com/security/cve/CVE-2026-63868/	self
https://www.suse.com/security/cve/CVE-2026-63887/	self
https://www.suse.com/security/cve/CVE-2026-63888/	self
https://www.suse.com/security/cve/CVE-2026-63890/	self
https://www.suse.com/security/cve/CVE-2026-63891/	self
https://www.suse.com/security/cve/CVE-2026-63892/	self
https://www.suse.com/security/cve/CVE-2026-63898/	self
https://www.suse.com/security/cve/CVE-2026-63920/	self
https://www.suse.com/security/cve/CVE-2026-63928/	self
https://www.suse.com/security/cve/CVE-2026-63962/	self
https://www.suse.com/security/cve/CVE-2026-63990/	self
https://www.suse.com/security/cve/CVE-2026-64001/	self
https://www.suse.com/security/cve/CVE-2026-64002/	self
https://www.suse.com/security/cve/CVE-2026-64005/	self
https://www.suse.com/security/cve/CVE-2026-64007/	self
https://www.suse.com/security/cve/CVE-2026-64010/	self
https://www.suse.com/security/cve/CVE-2026-64011/	self
https://www.suse.com/security/cve/CVE-2026-64015/	self
https://www.suse.com/security/cve/CVE-2026-64088/	self
https://www.suse.com/security/cve/CVE-2026-64103/	self
https://www.suse.com/security/cve/CVE-2026-64109/	self
https://www.suse.com/security/cve/CVE-2026-64113/	self
https://www.suse.com/security/cve/CVE-2026-64114/	self
https://www.suse.com/security/cve/CVE-2026-64115/	self
https://www.suse.com/security/cve/CVE-2026-64118/	self
https://www.suse.com/security/cve/CVE-2026-64164/	self
https://www.suse.com/security/cve/CVE-2026-64178/	self
https://www.suse.com/security/cve/CVE-2026-64190/	self
https://www.suse.com/security/cve/CVE-2026-64266/	self
https://www.suse.com/security/cve/CVE-2026-64304/	self
https://www.suse.com/security/cve/CVE-2026-64306/	self
https://www.suse.com/security/cve/CVE-2026-64312/	self
https://www.suse.com/security/cve/CVE-2026-64313/	self
https://www.suse.com/security/cve/CVE-2026-64315/	self
https://www.suse.com/security/cve/CVE-2026-64317/	self
https://www.suse.com/security/cve/CVE-2026-64322/	self
https://www.suse.com/security/cve/CVE-2026-64323/	self
https://www.suse.com/security/cve/CVE-2026-64332/	self
https://www.suse.com/security/cve/CVE-2026-64333/	self
https://www.suse.com/security/cve/CVE-2026-64334/	self
https://www.suse.com/security/cve/CVE-2026-64340/	self
https://www.suse.com/security/cve/CVE-2026-64341/	self
https://www.suse.com/security/cve/CVE-2026-64343/	self
https://www.suse.com/security/cve/CVE-2026-64344/	self
https://www.suse.com/security/cve/CVE-2026-64380/	self
https://www.suse.com/security/cve/CVE-2026-64381/	self
https://www.suse.com/security/cve/CVE-2026-64408/	self
https://www.suse.com/security/cve/CVE-2026-64411/	self
https://www.suse.com/security/cve/CVE-2026-64412/	self
https://www.suse.com/security/cve/CVE-2026-64423/	self
https://www.suse.com/security/cve/CVE-2026-64436/	self
https://www.suse.com/security/cve/CVE-2026-64470/	self
https://www.suse.com/security/cve/CVE-2026-64471/	self
https://www.suse.com/security/cve/CVE-2026-64512/	self
https://www.suse.com/security/cve/CVE-2026-64513/	self
https://www.suse.com/security/cve/CVE-2026-64541/	self
https://www.suse.com/security/cve/CVE-2026-64544/	self
https://www.suse.com/security/cve/CVE-2026-64547/	self
https://www.suse.com/security/cve/CVE-2026-64551/	self
https://www.suse.com/security/cve/CVE-2026-64553/	self
https://www.suse.com/security/cve/CVE-2026-64562/	self
https://www.suse.com/security/cve/CVE-2026-64567/	self
https://www.suse.com/security/cve/CVE-2026-64581/	self
https://www.suse.com/security/cve/CVE-2026-64582/	self
https://www.suse.com/security/cve/CVE-2026-68082/	self
https://www.suse.com/security/cve/CVE-2026-68093/	self
https://www.suse.com/security/cve/CVE-2026-68111/	self
https://www.suse.com/security/cve/CVE-2026-68117/	self
https://www.suse.com/security/cve/CVE-2026-68121/	self
https://www.suse.com/security/cve/CVE-2026-68123/	self
https://www.suse.com/security/cve/CVE-2026-68129/	self
https://www.suse.com/security/cve/CVE-2026-68141/	self
https://www.suse.com/security/cve/CVE-2026-68143/	self
https://www.suse.com/security/cve/CVE-2026-68153/	self
https://www.suse.com/security/cve/CVE-2026-68154/	self
https://www.suse.com/security/cve/CVE-2026-68155/	self
https://www.suse.com/security/cve/CVE-2026-68156/	self
https://www.suse.com/security/cve/CVE-2026-68158/	self
https://www.suse.com/security/cve/CVE-2026-68159/	self
https://www.suse.com/security/cve/CVE-2026-68188/	self
https://www.suse.com/security/cve/CVE-2026-68197/	self
https://www.suse.com/security/cve/CVE-2026-68198/	self
https://www.suse.com/security/cve/CVE-2026-68202/	self
https://www.suse.com/security/cve/CVE-2026-68234/	self
https://www.suse.com/security/cve/CVE-2026-68238/	self
https://www.suse.com/security/cve/CVE-2026-68277/	self
https://www.suse.com/security/cve/CVE-2026-68278/	self
https://www.suse.com/security/cve/CVE-2026-68279/	self
https://www.suse.com/security/cve/CVE-2026-68284/	self
https://www.suse.com/security/cve/CVE-2026-68289/	self
https://www.suse.com/security/cve/CVE-2026-68299/	self
https://www.suse.com/security/cve/CVE-2026-68300/	self
https://www.suse.com/security/cve/CVE-2026-68313/	self
https://www.suse.com/security/cve/CVE-2026-68315/	self
https://www.suse.com/security/cve/CVE-2026-68320/	self
https://www.suse.com/security/cve/CVE-2026-68325/	self
https://www.suse.com/security/cve/CVE-2026-68328/	self
https://www.suse.com/security/cve/CVE-2026-68329/	self
https://www.suse.com/security/cve/CVE-2026-68338/	self
https://www.suse.com/security/cve/CVE-2026-68349/	self
https://www.suse.com/security/cve/CVE-2026-68351/	self
https://www.suse.com/security/cve/CVE-2026-68357/	self
https://www.suse.com/security/cve/CVE-2026-68363/	self
https://www.suse.com/security/cve/CVE-2026-68397/	self
https://www.suse.com/security/cve/CVE-2026-68398/	self
https://www.suse.com/security/cve/CVE-2026-68405/	self
https://www.suse.com/security/cve/CVE-2026-68410/	self
https://www.suse.com/security/cve/CVE-2026-68425/	self
https://www.suse.com/security/cve/CVE-2026-68426/	self
https://www.suse.com/security/cve/CVE-2026-68428/	self
https://www.suse.com/security/cve/CVE-2026-68432/	self
https://www.suse.com/security/cve/CVE-2026-68433/	self
https://www.suse.com/security/cve/CVE-2026-68450/	self
https://www.suse.com/security/cve/CVE-2026-68480/	self
https://www.suse.com/security/cve/CVE-2026-72017/	self
https://www.suse.com/security/cve/CVE-2026-72020/	self
https://www.suse.com/security/cve/CVE-2026-72036/	self
https://www.suse.com/security/cve/CVE-2026-72083/	self
https://www.suse.com/security/cve/CVE-2026-72084/	self
https://www.suse.com/security/cve/CVE-2026-72086/	self
https://www.suse.com/security/cve/CVE-2026-72108/	self
https://www.suse.com/security/cve/CVE-2026-72135/	self
https://www.suse.com/security/cve/CVE-2026-72138/	self
https://www.suse.com/security/cve/CVE-2026-72142/	self
https://www.suse.com/security/cve/CVE-2026-72164/	self
https://www.suse.com/security/cve/CVE-2026-72251/	self
https://www.suse.com/security/cve/CVE-2026-72282/	self
https://www.suse.com/security/cve/CVE-2026-72284/	self
https://www.suse.com/security/cve/CVE-2026-72296/	self
https://www.suse.com/security/cve/CVE-2026-72297/	self
https://www.suse.com/security/cve/CVE-2026-72323/	self
https://www.suse.com/security/cve/CVE-2026-72339/	self
https://www.suse.com/security/cve/CVE-2026-72389/	self
https://www.suse.com/security/cve/CVE-2026-72421/	self
https://www.suse.com/security/cve/CVE-2026-72450/	self
https://www.suse.com/security/cve/CVE-2026-72466/	self
https://www.suse.com/security/cve/CVE-2026-72487/	self
https://www.suse.com/security/cve/CVE-2026-72502/	self
https://www.suse.com/security/cve/CVE-2026-74255/	self
https://www.suse.com/security/cve/CVE-2026-74261/	self
https://www.suse.com/security/cve/CVE-2026-74265/	self
https://www.suse.com/security/cve/CVE-2026-74271/	self
https://www.suse.com/security/cve/CVE-2026-74278/	self
https://www.suse.com/security/cve/CVE-2026-74279/	self
https://www.suse.com/security/cve/CVE-2026-74296/	self
https://www.suse.com/security/cve/CVE-2026-74297/	self
https://www.suse.com/security/cve/CVE-2026-74302/	self
https://www.suse.com/security/cve/CVE-2026-74334/	self
https://www.suse.com/security/cve/CVE-2026-74341/	self
https://www.suse.com/security/cve/CVE-2026-74377/	self
https://www.suse.com/security/cve/CVE-2026-74378/	self
https://www.suse.com/security/cve/CVE-2026-74382/	self
https://www.suse.com/security/cve/CVE-2026-74388/	self
https://www.suse.com/security/cve/CVE-2026-74406/	self
https://www.suse.com/security/cve/CVE-2026-74416/	self
https://www.suse.com/security/cve/CVE-2026-74417/	self
https://www.suse.com/security/cve/CVE-2026-74454/	self
https://www.suse.com/security/cve/CVE-2026-74479/	self
https://www.suse.com/security/cve/CVE-2026-74482/	self
https://www.suse.com/security/cve/CVE-2026-74488/	self
https://www.suse.com/security/cve/CVE-2026-74495/	self
https://www.suse.com/security/cve/CVE-2026-74496/	self
https://www.suse.com/security/cve/CVE-2026-74508/	self
https://www.suse.com/security/cve/CVE-2026-74510/	self
https://www.suse.com/security/cve/CVE-2026-74519/	self
https://www.suse.com/security/cve/CVE-2026-74537/	self
https://www.suse.com/security/cve/CVE-2026-74548/	self
https://www.suse.com/security/cve/CVE-2026-74550/	self
https://www.suse.com/security/cve/CVE-2026-74556/	self
https://www.suse.com/security/cve/CVE-2026-74557/	self
https://www.suse.com/security/cve/CVE-2026-74582/	self
https://www.suse.com/security/cve/CVE-2026-74584/	self
https://www.suse.com/security/cve/CVE-2026-74669/	self
https://www.suse.com/security/cve/CVE-2026-74673/	self
https://www.suse.com/security/cve/CVE-2026-74705/	self
https://www.suse.com/security/cve/CVE-2026-74743/	self
https://www.suse.com/security/cve/CVE-2026-80534/	self
https://www.suse.com/security/cve/CVE-2026-80574/	self
https://www.suse.com/security/cve/CVE-2026-80580/	self
https://www.suse.com/security/cve/CVE-2026-80590/	self
https://www.suse.com/security/cve/CVE-2026-80603/	self
https://www.suse.com/security/cve/CVE-2026-80609/	self
https://www.suse.com/security/cve/CVE-2026-80714/	self
https://www.suse.com/security/cve/CVE-2026-80737/	self
https://www.suse.com/security/cve/CVE-2026-80765/	self
https://www.suse.com/security/cve/CVE-2026-80819/	self
https://www.suse.com/security/cve/CVE-2026-80909/	self
https://www.suse.com/security/cve/CVE-2024-35973	external
https://bugzilla.suse.com/1224586	external
https://www.suse.com/security/cve/CVE-2025-39964	external
https://bugzilla.suse.com/1251966	external
https://www.suse.com/security/cve/CVE-2025-40022	external
https://bugzilla.suse.com/1252682	external
https://www.suse.com/security/cve/CVE-2025-40277	external
https://bugzilla.suse.com/1254894	external
https://www.suse.com/security/cve/CVE-2025-68214	external
https://bugzilla.suse.com/1255225	external
https://www.suse.com/security/cve/CVE-2026-23003	external
https://bugzilla.suse.com/1257246	external
https://www.suse.com/security/cve/CVE-2026-23443	external
https://bugzilla.suse.com/1261679	external
https://www.suse.com/security/cve/CVE-2026-31483	external
https://bugzilla.suse.com/1262771	external
https://www.suse.com/security/cve/CVE-2026-43116	external
https://bugzilla.suse.com/1264619	external
https://www.suse.com/security/cve/CVE-2026-43125	external
https://bugzilla.suse.com/1264541	external
https://www.suse.com/security/cve/CVE-2026-43134	external
https://bugzilla.suse.com/1264308	external
https://www.suse.com/security/cve/CVE-2026-43257	external
https://bugzilla.suse.com/1264296	external
https://www.suse.com/security/cve/CVE-2026-43277	external
https://bugzilla.suse.com/1264594	external
https://www.suse.com/security/cve/CVE-2026-43363	external
https://bugzilla.suse.com/1265068	external
https://www.suse.com/security/cve/CVE-2026-43416	external
https://bugzilla.suse.com/1265121	external
https://www.suse.com/security/cve/CVE-2026-45941	external
https://bugzilla.suse.com/1266920	external
https://www.suse.com/security/cve/CVE-2026-46070	external
https://bugzilla.suse.com/1267501	external
https://bugzilla.suse.com/1267887	external
https://www.suse.com/security/cve/CVE-2026-46107	external
https://bugzilla.suse.com/1267612	external
https://www.suse.com/security/cve/CVE-2026-46108	external
https://bugzilla.suse.com/1267615	external
https://www.suse.com/security/cve/CVE-2026-46128	external
https://bugzilla.suse.com/1267643	external
https://www.suse.com/security/cve/CVE-2026-52912	external
https://bugzilla.suse.com/1269000	external
https://bugzilla.suse.com/1276762	external
https://www.suse.com/security/cve/CVE-2026-52920	external
https://bugzilla.suse.com/1269013	external
https://www.suse.com/security/cve/CVE-2026-52925	external
https://bugzilla.suse.com/1268987	external
https://www.suse.com/security/cve/CVE-2026-52939	external
https://bugzilla.suse.com/1268972	external
https://www.suse.com/security/cve/CVE-2026-52946	external
https://bugzilla.suse.com/1269113	external
https://www.suse.com/security/cve/CVE-2026-53001	external
https://bugzilla.suse.com/1269114	external
https://www.suse.com/security/cve/CVE-2026-53059	external
https://bugzilla.suse.com/1269655	external
https://bugzilla.suse.com/1270376	external
https://www.suse.com/security/cve/CVE-2026-53061	external
https://bugzilla.suse.com/1269685	external
https://www.suse.com/security/cve/CVE-2026-53077	external
https://bugzilla.suse.com/1269412	external
https://www.suse.com/security/cve/CVE-2026-53089	external
https://bugzilla.suse.com/1269783	external
https://www.suse.com/security/cve/CVE-2026-53091	external
https://bugzilla.suse.com/1269530	external
https://www.suse.com/security/cve/CVE-2026-53149	external
https://bugzilla.suse.com/1269733	external
https://www.suse.com/security/cve/CVE-2026-53163	external
https://bugzilla.suse.com/1269306	external
https://www.suse.com/security/cve/CVE-2026-53219	external
https://bugzilla.suse.com/1269686	external
https://www.suse.com/security/cve/CVE-2026-53220	external
https://bugzilla.suse.com/1269381	external
https://www.suse.com/security/cve/CVE-2026-53223	external
https://bugzilla.suse.com/1269301	external
https://www.suse.com/security/cve/CVE-2026-53228	external
https://bugzilla.suse.com/1269256	external
https://www.suse.com/security/cve/CVE-2026-53238	external
https://bugzilla.suse.com/1269774	external
https://www.suse.com/security/cve/CVE-2026-53264	external
https://bugzilla.suse.com/1269238	external
https://bugzilla.suse.com/1273216	external
https://www.suse.com/security/cve/CVE-2026-53265	external
https://bugzilla.suse.com/1269734	external
https://www.suse.com/security/cve/CVE-2026-53309	external
https://bugzilla.suse.com/1269815	external
https://www.suse.com/security/cve/CVE-2026-53374	external
https://bugzilla.suse.com/1271827	external
https://www.suse.com/security/cve/CVE-2026-53388	external
https://bugzilla.suse.com/1271825	external
https://www.suse.com/security/cve/CVE-2026-53403	external
https://bugzilla.suse.com/1271731	external
https://www.suse.com/security/cve/CVE-2026-63810	external
https://bugzilla.suse.com/1272297	external
https://www.suse.com/security/cve/CVE-2026-63823	external
https://bugzilla.suse.com/1272182	external
https://bugzilla.suse.com/1272190	external
https://www.suse.com/security/cve/CVE-2026-63860	external
https://bugzilla.suse.com/1272429	external
https://www.suse.com/security/cve/CVE-2026-63868	external
https://bugzilla.suse.com/1272497	external
https://www.suse.com/security/cve/CVE-2026-63887	external
https://bugzilla.suse.com/1272385	external
https://bugzilla.suse.com/1272386	external
https://www.suse.com/security/cve/CVE-2026-63888	external
https://bugzilla.suse.com/1272390	external
https://bugzilla.suse.com/1272391	external
https://www.suse.com/security/cve/CVE-2026-63890	external
https://bugzilla.suse.com/1272426	external
https://www.suse.com/security/cve/CVE-2026-63891	external
https://bugzilla.suse.com/1272641	external
https://www.suse.com/security/cve/CVE-2026-63892	external
https://bugzilla.suse.com/1272591	external
https://www.suse.com/security/cve/CVE-2026-63898	external
https://bugzilla.suse.com/1272643	external
https://www.suse.com/security/cve/CVE-2026-63920	external
https://bugzilla.suse.com/1272877	external
https://bugzilla.suse.com/1273012	external
https://www.suse.com/security/cve/CVE-2026-63928	external
https://bugzilla.suse.com/1272891	external
https://www.suse.com/security/cve/CVE-2026-63962	external
https://bugzilla.suse.com/1272482	external
https://www.suse.com/security/cve/CVE-2026-63990	external
https://bugzilla.suse.com/1273027	external
https://www.suse.com/security/cve/CVE-2026-64001	external
https://bugzilla.suse.com/1273734	external
https://www.suse.com/security/cve/CVE-2026-64002	external
https://bugzilla.suse.com/1273774	external
https://bugzilla.suse.com/1276496	external
https://www.suse.com/security/cve/CVE-2026-64005	external
https://bugzilla.suse.com/1273831	external
https://www.suse.com/security/cve/CVE-2026-64007	external
https://bugzilla.suse.com/1273105	external
https://bugzilla.suse.com/1273108	external
https://www.suse.com/security/cve/CVE-2026-64010	external
https://bugzilla.suse.com/1273882	external
https://bugzilla.suse.com/1276494	external
https://www.suse.com/security/cve/CVE-2026-64011	external
https://bugzilla.suse.com/1273891	external
https://bugzilla.suse.com/1276493	external
https://www.suse.com/security/cve/CVE-2026-64015	external
https://bugzilla.suse.com/1273762	external
https://bugzilla.suse.com/1273823	external
https://www.suse.com/security/cve/CVE-2026-64088	external
https://bugzilla.suse.com/1273463	external
https://www.suse.com/security/cve/CVE-2026-64103	external
https://bugzilla.suse.com/1273759	external
https://www.suse.com/security/cve/CVE-2026-64109	external
https://bugzilla.suse.com/1273748	external
https://bugzilla.suse.com/1273829	external
https://www.suse.com/security/cve/CVE-2026-64113	external
https://bugzilla.suse.com/1272262	external
https://www.suse.com/security/cve/CVE-2026-64114	external
https://bugzilla.suse.com/1273742	external
https://bugzilla.suse.com/1273833	external
https://www.suse.com/security/cve/CVE-2026-64115	external
https://bugzilla.suse.com/1273745	external
https://bugzilla.suse.com/1273835	external
https://www.suse.com/security/cve/CVE-2026-64118	external
https://bugzilla.suse.com/1273749	external
https://www.suse.com/security/cve/CVE-2026-64164	external
https://bugzilla.suse.com/1273957	external
https://www.suse.com/security/cve/CVE-2026-64178	external
https://bugzilla.suse.com/1273946	external
https://www.suse.com/security/cve/CVE-2026-64190	external
https://bugzilla.suse.com/1272210	external
https://www.suse.com/security/cve/CVE-2026-64266	external
https://bugzilla.suse.com/1273555	external
https://www.suse.com/security/cve/CVE-2026-64304	external
https://bugzilla.suse.com/1273944	external
https://bugzilla.suse.com/1273983	external
https://www.suse.com/security/cve/CVE-2026-64306	external
https://bugzilla.suse.com/1273939	external
https://www.suse.com/security/cve/CVE-2026-64312	external
https://bugzilla.suse.com/1273968	external
https://www.suse.com/security/cve/CVE-2026-64313	external
https://bugzilla.suse.com/1273940	external
https://www.suse.com/security/cve/CVE-2026-64315	external
https://bugzilla.suse.com/1274028	external
https://www.suse.com/security/cve/CVE-2026-64317	external
https://bugzilla.suse.com/1273936	external
https://www.suse.com/security/cve/CVE-2026-64322	external
https://bugzilla.suse.com/1273958	external
https://www.suse.com/security/cve/CVE-2026-64323	external
https://bugzilla.suse.com/1273305	external
https://www.suse.com/security/cve/CVE-2026-64332	external
https://bugzilla.suse.com/1273285	external
https://www.suse.com/security/cve/CVE-2026-64333	external
https://bugzilla.suse.com/1273933	external
https://www.suse.com/security/cve/CVE-2026-64334	external
https://bugzilla.suse.com/1273942	external
https://www.suse.com/security/cve/CVE-2026-64340	external
https://bugzilla.suse.com/1274003	external
https://www.suse.com/security/cve/CVE-2026-64341	external
https://bugzilla.suse.com/1273895	external
https://www.suse.com/security/cve/CVE-2026-64343	external
https://bugzilla.suse.com/1273974	external
https://www.suse.com/security/cve/CVE-2026-64344	external
https://bugzilla.suse.com/1274019	external
https://www.suse.com/security/cve/CVE-2026-64380	external
https://bugzilla.suse.com/1273557	external
https://www.suse.com/security/cve/CVE-2026-64381	external
https://bugzilla.suse.com/1273860	external
https://www.suse.com/security/cve/CVE-2026-64408	external
https://bugzilla.suse.com/1273778	external
https://www.suse.com/security/cve/CVE-2026-64411	external
https://bugzilla.suse.com/1274077	external
https://www.suse.com/security/cve/CVE-2026-64412	external
https://bugzilla.suse.com/1273780	external
https://www.suse.com/security/cve/CVE-2026-64423	external
https://bugzilla.suse.com/1274274	external
https://bugzilla.suse.com/1275458	external
https://www.suse.com/security/cve/CVE-2026-64436	external
https://bugzilla.suse.com/1274277	external
https://www.suse.com/security/cve/CVE-2026-64470	external
https://bugzilla.suse.com/1273892	external
https://www.suse.com/security/cve/CVE-2026-64471	external
https://bugzilla.suse.com/1274278	external
https://www.suse.com/security/cve/CVE-2026-64512	external
https://bugzilla.suse.com/1273597	external
https://www.suse.com/security/cve/CVE-2026-64513	external
https://bugzilla.suse.com/1273327	external
https://www.suse.com/security/cve/CVE-2026-64541	external
https://bugzilla.suse.com/1273303	external
https://bugzilla.suse.com/1273308	external
https://www.suse.com/security/cve/CVE-2026-64544	external
https://bugzilla.suse.com/1273316	external
https://www.suse.com/security/cve/CVE-2026-64547	external
https://bugzilla.suse.com/1273319	external
https://www.suse.com/security/cve/CVE-2026-64551	external
https://bugzilla.suse.com/1273813	external
https://www.suse.com/security/cve/CVE-2026-64553	external
https://bugzilla.suse.com/1273336	external
https://www.suse.com/security/cve/CVE-2026-64562	external
https://bugzilla.suse.com/1273930	external
https://bugzilla.suse.com/1273987	external
https://www.suse.com/security/cve/CVE-2026-64567	external
https://bugzilla.suse.com/1274006	external
https://www.suse.com/security/cve/CVE-2026-64581	external
https://bugzilla.suse.com/1274041	external
https://bugzilla.suse.com/1274042	external
https://www.suse.com/security/cve/CVE-2026-64582	external
https://bugzilla.suse.com/1274040	external
https://www.suse.com/security/cve/CVE-2026-68082	external
https://bugzilla.suse.com/1274581	external
https://www.suse.com/security/cve/CVE-2026-68093	external
https://bugzilla.suse.com/1274725	external
https://bugzilla.suse.com/1276486	external
https://www.suse.com/security/cve/CVE-2026-68111	external
https://bugzilla.suse.com/1274873	external
https://www.suse.com/security/cve/CVE-2026-68117	external
https://bugzilla.suse.com/1274881	external
https://www.suse.com/security/cve/CVE-2026-68121	external
https://bugzilla.suse.com/1274888	external
https://bugzilla.suse.com/1275228	external
https://www.suse.com/security/cve/CVE-2026-68123	external
https://bugzilla.suse.com/1275169	external
https://www.suse.com/security/cve/CVE-2026-68129	external
https://bugzilla.suse.com/1275517	external
https://www.suse.com/security/cve/CVE-2026-68141	external
https://bugzilla.suse.com/1275094	external
https://www.suse.com/security/cve/CVE-2026-68143	external
https://bugzilla.suse.com/1275583	external
https://www.suse.com/security/cve/CVE-2026-68153	external
https://bugzilla.suse.com/1275301	external
https://www.suse.com/security/cve/CVE-2026-68154	external
https://bugzilla.suse.com/1275303	external
https://www.suse.com/security/cve/CVE-2026-68155	external
https://bugzilla.suse.com/1275304	external
https://bugzilla.suse.com/1276305	external
https://www.suse.com/security/cve/CVE-2026-68156	external
https://bugzilla.suse.com/1275305	external
https://www.suse.com/security/cve/CVE-2026-68158	external
https://bugzilla.suse.com/1275307	external
https://bugzilla.suse.com/1276303	external
https://www.suse.com/security/cve/CVE-2026-68159	external
https://bugzilla.suse.com/1275470	external
https://bugzilla.suse.com/1275471	external
https://www.suse.com/security/cve/CVE-2026-68188	external
https://bugzilla.suse.com/1274953	external
https://www.suse.com/security/cve/CVE-2026-68197	external
https://bugzilla.suse.com/1274804	external
https://www.suse.com/security/cve/CVE-2026-68198	external
https://bugzilla.suse.com/1274803	external
https://www.suse.com/security/cve/CVE-2026-68202	external
https://bugzilla.suse.com/1275161	external
https://bugzilla.suse.com/1275162	external
https://www.suse.com/security/cve/CVE-2026-68234	external
https://bugzilla.suse.com/1275650	external
https://www.suse.com/security/cve/CVE-2026-68238	external
https://bugzilla.suse.com/1275704	external
https://www.suse.com/security/cve/CVE-2026-68277	external
https://bugzilla.suse.com/1275125	external
https://www.suse.com/security/cve/CVE-2026-68278	external
https://bugzilla.suse.com/1275870	external
https://www.suse.com/security/cve/CVE-2026-68279	external
https://bugzilla.suse.com/1275871	external
https://www.suse.com/security/cve/CVE-2026-68284	external
https://bugzilla.suse.com/1275970	external
https://www.suse.com/security/cve/CVE-2026-68289	external
https://bugzilla.suse.com/1275976	external
https://www.suse.com/security/cve/CVE-2026-68299	external
https://bugzilla.suse.com/1275088	external
https://www.suse.com/security/cve/CVE-2026-68300	external
https://bugzilla.suse.com/1275083	external
https://www.suse.com/security/cve/CVE-2026-68313	external
https://bugzilla.suse.com/1274665	external
https://www.suse.com/security/cve/CVE-2026-68315	external
https://bugzilla.suse.com/1274662	external
https://www.suse.com/security/cve/CVE-2026-68320	external
https://bugzilla.suse.com/1274659	external
https://www.suse.com/security/cve/CVE-2026-68325	external
https://bugzilla.suse.com/1274651	external
https://www.suse.com/security/cve/CVE-2026-68328	external
https://bugzilla.suse.com/1274646	external
https://www.suse.com/security/cve/CVE-2026-68329	external
https://bugzilla.suse.com/1274645	external
https://www.suse.com/security/cve/CVE-2026-68338	external
https://bugzilla.suse.com/1274637	external
https://www.suse.com/security/cve/CVE-2026-68349	external
https://bugzilla.suse.com/1274681	external
https://www.suse.com/security/cve/CVE-2026-68351	external
https://bugzilla.suse.com/1274678	external
https://www.suse.com/security/cve/CVE-2026-68357	external
https://bugzilla.suse.com/1274737	external
https://www.suse.com/security/cve/CVE-2026-68363	external
https://bugzilla.suse.com/1275164	external
https://www.suse.com/security/cve/CVE-2026-68397	external
https://bugzilla.suse.com/1274898	external
https://bugzilla.suse.com/1274918	external
https://www.suse.com/security/cve/CVE-2026-68398	external
https://bugzilla.suse.com/1274908	external
https://bugzilla.suse.com/1274916	external
https://www.suse.com/security/cve/CVE-2026-68405	external
https://bugzilla.suse.com/1274896	external
https://www.suse.com/security/cve/CVE-2026-68410	external
https://bugzilla.suse.com/1274710	external
https://www.suse.com/security/cve/CVE-2026-68425	external
https://bugzilla.suse.com/1274700	external
https://www.suse.com/security/cve/CVE-2026-68426	external
https://bugzilla.suse.com/1274705	external
https://bugzilla.suse.com/1274712	external
https://www.suse.com/security/cve/CVE-2026-68428	external
https://bugzilla.suse.com/1274699	external
https://www.suse.com/security/cve/CVE-2026-68432	external
https://bugzilla.suse.com/1274800	external
https://www.suse.com/security/cve/CVE-2026-68433	external
https://bugzilla.suse.com/1274801	external
https://www.suse.com/security/cve/CVE-2026-68450	external
https://bugzilla.suse.com/1274834	external
https://www.suse.com/security/cve/CVE-2026-68480	external
https://bugzilla.suse.com/1274208	external
https://bugzilla.suse.com/1274209	external
https://www.suse.com/security/cve/CVE-2026-72017	external
https://bugzilla.suse.com/1276840	external
https://www.suse.com/security/cve/CVE-2026-72020	external
https://bugzilla.suse.com/1275506	external
https://bugzilla.suse.com/1276301	external
https://www.suse.com/security/cve/CVE-2026-72036	external
https://bugzilla.suse.com/1277034	external
https://www.suse.com/security/cve/CVE-2026-72083	external
https://bugzilla.suse.com/1275535	external
https://bugzilla.suse.com/1275536	external
https://www.suse.com/security/cve/CVE-2026-72084	external
https://bugzilla.suse.com/1275540	external
https://bugzilla.suse.com/1275541	external
https://www.suse.com/security/cve/CVE-2026-72086	external
https://bugzilla.suse.com/1277179	external
https://www.suse.com/security/cve/CVE-2026-72108	external
https://bugzilla.suse.com/1277350	external
https://www.suse.com/security/cve/CVE-2026-72135	external
https://bugzilla.suse.com/1277571	external
https://bugzilla.suse.com/1277573	external
https://www.suse.com/security/cve/CVE-2026-72138	external
https://bugzilla.suse.com/1277235	external
https://www.suse.com/security/cve/CVE-2026-72142	external
https://bugzilla.suse.com/1277522	external
https://www.suse.com/security/cve/CVE-2026-72164	external
https://bugzilla.suse.com/1277553	external
https://bugzilla.suse.com/1277868	external
https://www.suse.com/security/cve/CVE-2026-72251	external
https://bugzilla.suse.com/1275827	external
https://bugzilla.suse.com/1276297	external
https://www.suse.com/security/cve/CVE-2026-72282	external
https://bugzilla.suse.com/1277728	external
https://www.suse.com/security/cve/CVE-2026-72284	external
https://bugzilla.suse.com/1277730	external
https://www.suse.com/security/cve/CVE-2026-72296	external
https://bugzilla.suse.com/1275923	external
https://www.suse.com/security/cve/CVE-2026-72297	external
https://bugzilla.suse.com/1277738	external
https://bugzilla.suse.com/1277739	external
https://www.suse.com/security/cve/CVE-2026-72323	external
https://bugzilla.suse.com/1275985	external
https://bugzilla.suse.com/1275986	external
https://www.suse.com/security/cve/CVE-2026-72339	external
https://bugzilla.suse.com/1276006	external
https://bugzilla.suse.com/1276318	external
https://www.suse.com/security/cve/CVE-2026-72389	external
https://bugzilla.suse.com/1273869	external
https://bugzilla.suse.com/1274051	external
https://www.suse.com/security/cve/CVE-2026-72421	external
https://bugzilla.suse.com/1277023	external
https://www.suse.com/security/cve/CVE-2026-72450	external
https://bugzilla.suse.com/1278113	external
https://www.suse.com/security/cve/CVE-2026-72466	external
https://bugzilla.suse.com/1277057	external
https://www.suse.com/security/cve/CVE-2026-72487	external
https://bugzilla.suse.com/1276767	external
https://www.suse.com/security/cve/CVE-2026-72502	external
https://bugzilla.suse.com/1276542	external
https://www.suse.com/security/cve/CVE-2026-74255	external
https://bugzilla.suse.com/1276547	external
https://www.suse.com/security/cve/CVE-2026-74261	external
https://bugzilla.suse.com/1276528	external
https://www.suse.com/security/cve/CVE-2026-74265	external
https://bugzilla.suse.com/1276517	external
https://www.suse.com/security/cve/CVE-2026-74271	external
https://bugzilla.suse.com/1276502	external
https://www.suse.com/security/cve/CVE-2026-74278	external
https://bugzilla.suse.com/1278132	external
https://www.suse.com/security/cve/CVE-2026-74279	external
https://bugzilla.suse.com/1276479	external
https://www.suse.com/security/cve/CVE-2026-74296	external
https://bugzilla.suse.com/1276452	external
https://www.suse.com/security/cve/CVE-2026-74297	external
https://bugzilla.suse.com/1276446	external
https://www.suse.com/security/cve/CVE-2026-74302	external
https://bugzilla.suse.com/1276445	external
https://www.suse.com/security/cve/CVE-2026-74334	external
https://bugzilla.suse.com/1277095	external
https://www.suse.com/security/cve/CVE-2026-74341	external
https://bugzilla.suse.com/1277089	external
https://www.suse.com/security/cve/CVE-2026-74377	external
https://bugzilla.suse.com/1278236	external
https://www.suse.com/security/cve/CVE-2026-74378	external
https://bugzilla.suse.com/1278233	external
https://bugzilla.suse.com/1278234	external
https://www.suse.com/security/cve/CVE-2026-74382	external
https://bugzilla.suse.com/1278240	external
https://www.suse.com/security/cve/CVE-2026-74388	external
https://bugzilla.suse.com/1278253	external
https://bugzilla.suse.com/1278254	external
https://www.suse.com/security/cve/CVE-2026-74406	external
https://bugzilla.suse.com/1276395	external
https://bugzilla.suse.com/1280096	external
https://www.suse.com/security/cve/CVE-2026-74416	external
https://bugzilla.suse.com/1276343	external
https://www.suse.com/security/cve/CVE-2026-74417	external
https://bugzilla.suse.com/1276363	external
https://www.suse.com/security/cve/CVE-2026-74454	external
https://bugzilla.suse.com/1277073	external
https://bugzilla.suse.com/1277074	external
https://www.suse.com/security/cve/CVE-2026-74479	external
https://bugzilla.suse.com/1276354	external
https://bugzilla.suse.com/1277290	external
https://www.suse.com/security/cve/CVE-2026-74482	external
https://bugzilla.suse.com/1276346	external
https://www.suse.com/security/cve/CVE-2026-74488	external
https://bugzilla.suse.com/1276350	external
https://bugzilla.suse.com/1277289	external
https://www.suse.com/security/cve/CVE-2026-74495	external
https://bugzilla.suse.com/1275864	external
https://www.suse.com/security/cve/CVE-2026-74496	external
https://bugzilla.suse.com/1275867	external
https://bugzilla.suse.com/1275868	external
https://www.suse.com/security/cve/CVE-2026-74508	external
https://bugzilla.suse.com/1277893	external
https://www.suse.com/security/cve/CVE-2026-74510	external
https://bugzilla.suse.com/1275950	external
https://www.suse.com/security/cve/CVE-2026-74519	external
https://bugzilla.suse.com/1275810	external
https://www.suse.com/security/cve/CVE-2026-74537	external
https://bugzilla.suse.com/1275687	external
https://bugzilla.suse.com/1275701	external
https://www.suse.com/security/cve/CVE-2026-74548	external
https://bugzilla.suse.com/1275695	external
https://www.suse.com/security/cve/CVE-2026-74550	external
https://bugzilla.suse.com/1275688	external
https://www.suse.com/security/cve/CVE-2026-74556	external
https://bugzilla.suse.com/1275696	external
https://bugzilla.suse.com/1275700	external
https://www.suse.com/security/cve/CVE-2026-74557	external
https://bugzilla.suse.com/1275685	external
https://www.suse.com/security/cve/CVE-2026-74582	external
https://bugzilla.suse.com/1275784	external
https://bugzilla.suse.com/1276281	external
https://www.suse.com/security/cve/CVE-2026-74584	external
https://bugzilla.suse.com/1277066	external
https://www.suse.com/security/cve/CVE-2026-74669	external
https://bugzilla.suse.com/1277391	external
https://bugzilla.suse.com/1277399	external
https://www.suse.com/security/cve/CVE-2026-74673	external
https://bugzilla.suse.com/1277637	external
https://www.suse.com/security/cve/CVE-2026-74705	external
https://bugzilla.suse.com/1276922	external
https://www.suse.com/security/cve/CVE-2026-74743	external
https://bugzilla.suse.com/1277908	external
https://bugzilla.suse.com/1277909	external
https://www.suse.com/security/cve/CVE-2026-80534	external
https://bugzilla.suse.com/1277022	external
https://www.suse.com/security/cve/CVE-2026-80574	external
https://bugzilla.suse.com/1277329	external
https://www.suse.com/security/cve/CVE-2026-80580	external
https://bugzilla.suse.com/1278294	external
https://bugzilla.suse.com/1278295	external
https://www.suse.com/security/cve/CVE-2026-80590	external
https://bugzilla.suse.com/1277275	external
https://www.suse.com/security/cve/CVE-2026-80603	external
https://bugzilla.suse.com/1278293	external
https://www.suse.com/security/cve/CVE-2026-80609	external
https://bugzilla.suse.com/1278334	external
https://bugzilla.suse.com/1278339	external
https://www.suse.com/security/cve/CVE-2026-80714	external
https://bugzilla.suse.com/1277561	external
https://bugzilla.suse.com/1277583	external
https://www.suse.com/security/cve/CVE-2026-80737	external
https://bugzilla.suse.com/1279487	external
https://bugzilla.suse.com/1279488	external
https://www.suse.com/security/cve/CVE-2026-80765	external
https://bugzilla.suse.com/1279499	external
https://www.suse.com/security/cve/CVE-2026-80819	external
https://bugzilla.suse.com/1279607	external
https://www.suse.com/security/cve/CVE-2026-80909	external
https://bugzilla.suse.com/1279422	external
https://bugzilla.suse.com/1279423	external

JSON

To clipboard

Loading 12.6 MB of JSON…

CVE-2024-35973 (GCVE-0-2024-35973)

Vulnerability from cvelistv5 – Published: 2024-05-20 09:42 – Updated: 2026-05-23 15:45

Title

geneve: fix header validation in geneve[6]_xmit_skb

Summary

In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve[6]_xmit_skb syzbot is able to trigger an uninit-value in geneve_xmit() [1] Problem : While most ip tunnel helpers (like ip_tunnel_get_dsfield()) uses skb_protocol(skb, true), pskb_inet_may_pull() is only using skb->protocol. If anything else than ETH_P_IPV6 or ETH_P_IP is found in skb->protocol, pskb_inet_may_pull() does nothing at all. If a vlan tag was provided by the caller (af_packet in the syzbot case), the network header might not point to the correct location, and skb linear part could be smaller than expected. Add skb_vlan_inet_prepare() to perform a complete mac validation. Use this in geneve for the moment, I suspect we need to adopt this more broadly. v4 - Jakub reported v3 broke l2_tos_ttl_inherit.sh selftest - Only call __vlan_get_protocol() for vlan types. v2,v3 - Addressed Sabrina comments on v1 and v2 [1] BUG: KMSAN: uninit-value in geneve_xmit_skb drivers/net/geneve.c:910 [inline] BUG: KMSAN: uninit-value in geneve_xmit+0x302d/0x5420 drivers/net/geneve.c:1030 geneve_xmit_skb drivers/net/geneve.c:910 [inline] geneve_xmit+0x302d/0x5420 drivers/net/geneve.c:1030 __netdev_start_xmit include/linux/netdevice.h:4903 [inline] netdev_start_xmit include/linux/netdevice.h:4917 [inline] xmit_one net/core/dev.c:3531 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3547 __dev_queue_xmit+0x348d/0x52c0 net/core/dev.c:4335 dev_queue_xmit include/linux/netdevice.h:3091 [inline] packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3081 [inline] packet_sendmsg+0x8bb0/0x9ef0 net/packet/af_packet.c:3113 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 __sys_sendto+0x685/0x830 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0x125/0x1d0 net/socket.c:2199 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was created at: slab_post_alloc_hook mm/slub.c:3804 [inline] slab_alloc_node mm/slub.c:3845 [inline] kmem_cache_alloc_node+0x613/0xc50 mm/slub.c:3888 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:577 __alloc_skb+0x35b/0x7a0 net/core/skbuff.c:668 alloc_skb include/linux/skbuff.h:1318 [inline] alloc_skb_with_frags+0xc8/0xbf0 net/core/skbuff.c:6504 sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2795 packet_alloc_skb net/packet/af_packet.c:2930 [inline] packet_snd net/packet/af_packet.c:3024 [inline] packet_sendmsg+0x722d/0x9ef0 net/packet/af_packet.c:3113 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 __sys_sendto+0x685/0x830 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0x125/0x1d0 net/socket.c:2199 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 CPU: 0 PID: 5033 Comm: syz-executor346 Not tainted 6.9.0-rc1-syzkaller-00005-g928a87efa423 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-29 18:16 UTC

CWE

CWE-noinfo Not enough information

Assigner

Linux mitre root

References

12 references

URL	Tags
https://git.kernel.org/stable/c/43be590456e1f3566…
https://git.kernel.org/stable/c/d3adf11d7993518a3…
https://git.kernel.org/stable/c/10204df9beda4978b…
https://git.kernel.org/stable/c/3c1ae6de74e3d2d63…
https://git.kernel.org/stable/c/4a1b65d1e55d53b39…
https://git.kernel.org/stable/c/190d9efa5773f26d6…
https://git.kernel.org/stable/c/357163fff3a6e48fe…
https://git.kernel.org/stable/c/d8a6213d70accb403…
https://lists.debian.org/debian-lts-announce/2024…	x_transferred
https://lists.debian.org/debian-lts-announce/2024…	x_transferred
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

6 products

Vendor	Product	Version
Linux	Linux	Affected: 35385daa8db320d2d9664930c28e732578b0d7de , < 43be590456e1f3566054ce78ae2dbb68cbe1a536 (git) Affected: 6f92124d74419797fadfbcd5b7a72c384a6413ad , < d3adf11d7993518a39bd02b383cfe657ccc0023c (git) Affected: 71ad9260c001b217d704cda88ecea251b2d367da , < 10204df9beda4978bd1d0c2db0d8375bfb03b915 (git) Affected: d13f048dd40e8577260cd43faea8ec9b77520197 , < 3c1ae6de74e3d2d6333d29a2d3e13e6094596c79 (git) Affected: d13f048dd40e8577260cd43faea8ec9b77520197 , < 4a1b65d1e55d53b397cb27014208be1e04172670 (git) Affected: d13f048dd40e8577260cd43faea8ec9b77520197 , < 190d9efa5773f26d6f334b1b8be282c4fa13fd5e (git) Affected: d13f048dd40e8577260cd43faea8ec9b77520197 , < 357163fff3a6e48fe74745425a32071ec9caf852 (git) Affected: d13f048dd40e8577260cd43faea8ec9b77520197 , < d8a6213d70accb403b82924a1c229e733433a5ef (git) Affected: 9a51e36ebf433adf59c051bec33f5aa54640bb4d (git) Affected: 21815f28af8081b258552c111774ff320cf38d38 (git) Affected: 4.19.191 , < 4.19.313 (semver) Affected: 5.4.119 , < 5.4.275 (semver) Affected: 5.10.37 , < 5.10.216 (semver) Affected: 5.11.21 , < 5.12 (semver) Affected: 5.12.4 , < 5.13 (semver)
Linux	Linux	Affected: 5.13 Unaffected: 0 , < 5.13 (semver) Unaffected: 4.19.313 , ≤ 4.19.* (semver) Unaffected: 5.4.275 , ≤ 5.4.* (semver) Unaffected: 5.10.216 , ≤ 5.10.* (semver) Unaffected: 5.15.156 , ≤ 5.15.* (semver) Unaffected: 6.1.87 , ≤ 6.1.* (semver) Unaffected: 6.6.28 , ≤ 6.6.* (semver) Unaffected: 6.8.7 , ≤ 6.8.* (semver) Unaffected: 6.9 , ≤ * (original_commit_for_fix)
Siemens	RUGGEDCOM RST2428P	Affected: 0 , < V3.1 (custom)
Siemens	SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family	Unaffected: 0 , < * (custom)
Siemens	SCALANCE XCM-/XRM-/XCH-/XRH-300 family	Affected: 0 , < V3.1 (custom)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-35973",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-29T18:16:33.435108Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-29T19:56:09.359Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T03:21:49.047Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/43be590456e1f3566054ce78ae2dbb68cbe1a536"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d3adf11d7993518a39bd02b383cfe657ccc0023c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/10204df9beda4978bd1d0c2db0d8375bfb03b915"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/3c1ae6de74e3d2d6333d29a2d3e13e6094596c79"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4a1b65d1e55d53b397cb27014208be1e04172670"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/190d9efa5773f26d6f334b1b8be282c4fa13fd5e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/357163fff3a6e48fe74745425a32071ec9caf852"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d8a6213d70accb403b82924a1c229e733433a5ef"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST2428P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XCM-/XRM-/XCH-/XRH-300 family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T11:53:20.615Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-613116.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/geneve.c",
            "include/net/ip_tunnels.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "43be590456e1f3566054ce78ae2dbb68cbe1a536",
              "status": "affected",
              "version": "35385daa8db320d2d9664930c28e732578b0d7de",
              "versionType": "git"
            },
            {
              "lessThan": "d3adf11d7993518a39bd02b383cfe657ccc0023c",
              "status": "affected",
              "version": "6f92124d74419797fadfbcd5b7a72c384a6413ad",
              "versionType": "git"
            },
            {
              "lessThan": "10204df9beda4978bd1d0c2db0d8375bfb03b915",
              "status": "affected",
              "version": "71ad9260c001b217d704cda88ecea251b2d367da",
              "versionType": "git"
            },
            {
              "lessThan": "3c1ae6de74e3d2d6333d29a2d3e13e6094596c79",
              "status": "affected",
              "version": "d13f048dd40e8577260cd43faea8ec9b77520197",
              "versionType": "git"
            },
            {
              "lessThan": "4a1b65d1e55d53b397cb27014208be1e04172670",
              "status": "affected",
              "version": "d13f048dd40e8577260cd43faea8ec9b77520197",
              "versionType": "git"
            },
            {
              "lessThan": "190d9efa5773f26d6f334b1b8be282c4fa13fd5e",
              "status": "affected",
              "version": "d13f048dd40e8577260cd43faea8ec9b77520197",
              "versionType": "git"
            },
            {
              "lessThan": "357163fff3a6e48fe74745425a32071ec9caf852",
              "status": "affected",
              "version": "d13f048dd40e8577260cd43faea8ec9b77520197",
              "versionType": "git"
            },
            {
              "lessThan": "d8a6213d70accb403b82924a1c229e733433a5ef",
              "status": "affected",
              "version": "d13f048dd40e8577260cd43faea8ec9b77520197",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "9a51e36ebf433adf59c051bec33f5aa54640bb4d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "21815f28af8081b258552c111774ff320cf38d38",
              "versionType": "git"
            },
            {
              "lessThan": "4.19.313",
              "status": "affected",
              "version": "4.19.191",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.275",
              "status": "affected",
              "version": "5.4.119",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.216",
              "status": "affected",
              "version": "5.10.37",
              "versionType": "semver"
            },
            {
              "lessThan": "5.12",
              "status": "affected",
              "version": "5.11.21",
              "versionType": "semver"
            },
            {
              "lessThan": "5.13",
              "status": "affected",
              "version": "5.12.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/geneve.c",
            "include/net/ip_tunnels.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.13"
            },
            {
              "lessThan": "5.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.313",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.275",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.156",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.87",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.28",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.313",
                  "versionStartIncluding": "4.19.191",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.275",
                  "versionStartIncluding": "5.4.119",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.216",
                  "versionStartIncluding": "5.10.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.156",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.87",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.28",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.7",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.11.21",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.12.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: fix header validation in geneve[6]_xmit_skb\n\nsyzbot is able to trigger an uninit-value in geneve_xmit() [1]\n\nProblem : While most ip tunnel helpers (like ip_tunnel_get_dsfield())\nuses skb_protocol(skb, true), pskb_inet_may_pull() is only using\nskb-\u003eprotocol.\n\nIf anything else than ETH_P_IPV6 or ETH_P_IP is found in skb-\u003eprotocol,\npskb_inet_may_pull() does nothing at all.\n\nIf a vlan tag was provided by the caller (af_packet in the syzbot case),\nthe network header might not point to the correct location, and skb\nlinear part could be smaller than expected.\n\nAdd skb_vlan_inet_prepare() to perform a complete mac validation.\n\nUse this in geneve for the moment, I suspect we need to adopt this\nmore broadly.\n\nv4 - Jakub reported v3 broke l2_tos_ttl_inherit.sh selftest\n   - Only call __vlan_get_protocol() for vlan types.\n\nv2,v3 - Addressed Sabrina comments on v1 and v2\n\n[1]\n\nBUG: KMSAN: uninit-value in geneve_xmit_skb drivers/net/geneve.c:910 [inline]\n BUG: KMSAN: uninit-value in geneve_xmit+0x302d/0x5420 drivers/net/geneve.c:1030\n  geneve_xmit_skb drivers/net/geneve.c:910 [inline]\n  geneve_xmit+0x302d/0x5420 drivers/net/geneve.c:1030\n  __netdev_start_xmit include/linux/netdevice.h:4903 [inline]\n  netdev_start_xmit include/linux/netdevice.h:4917 [inline]\n  xmit_one net/core/dev.c:3531 [inline]\n  dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3547\n  __dev_queue_xmit+0x348d/0x52c0 net/core/dev.c:4335\n  dev_queue_xmit include/linux/netdevice.h:3091 [inline]\n  packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276\n  packet_snd net/packet/af_packet.c:3081 [inline]\n  packet_sendmsg+0x8bb0/0x9ef0 net/packet/af_packet.c:3113\n  sock_sendmsg_nosec net/socket.c:730 [inline]\n  __sock_sendmsg+0x30f/0x380 net/socket.c:745\n  __sys_sendto+0x685/0x830 net/socket.c:2191\n  __do_sys_sendto net/socket.c:2203 [inline]\n  __se_sys_sendto net/socket.c:2199 [inline]\n  __x64_sys_sendto+0x125/0x1d0 net/socket.c:2199\n do_syscall_64+0xd5/0x1f0\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\n\nUninit was created at:\n  slab_post_alloc_hook mm/slub.c:3804 [inline]\n  slab_alloc_node mm/slub.c:3845 [inline]\n  kmem_cache_alloc_node+0x613/0xc50 mm/slub.c:3888\n  kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:577\n  __alloc_skb+0x35b/0x7a0 net/core/skbuff.c:668\n  alloc_skb include/linux/skbuff.h:1318 [inline]\n  alloc_skb_with_frags+0xc8/0xbf0 net/core/skbuff.c:6504\n  sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2795\n  packet_alloc_skb net/packet/af_packet.c:2930 [inline]\n  packet_snd net/packet/af_packet.c:3024 [inline]\n  packet_sendmsg+0x722d/0x9ef0 net/packet/af_packet.c:3113\n  sock_sendmsg_nosec net/socket.c:730 [inline]\n  __sock_sendmsg+0x30f/0x380 net/socket.c:745\n  __sys_sendto+0x685/0x830 net/socket.c:2191\n  __do_sys_sendto net/socket.c:2203 [inline]\n  __se_sys_sendto net/socket.c:2199 [inline]\n  __x64_sys_sendto+0x125/0x1d0 net/socket.c:2199\n do_syscall_64+0xd5/0x1f0\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\n\nCPU: 0 PID: 5033 Comm: syz-executor346 Not tainted 6.9.0-rc1-syzkaller-00005-g928a87efa423 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:45:36.681Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/43be590456e1f3566054ce78ae2dbb68cbe1a536"
        },
        {
          "url": "https://git.kernel.org/stable/c/d3adf11d7993518a39bd02b383cfe657ccc0023c"
        },
        {
          "url": "https://git.kernel.org/stable/c/10204df9beda4978bd1d0c2db0d8375bfb03b915"
        },
        {
          "url": "https://git.kernel.org/stable/c/3c1ae6de74e3d2d6333d29a2d3e13e6094596c79"
        },
        {
          "url": "https://git.kernel.org/stable/c/4a1b65d1e55d53b397cb27014208be1e04172670"
        },
        {
          "url": "https://git.kernel.org/stable/c/190d9efa5773f26d6f334b1b8be282c4fa13fd5e"
        },
        {
          "url": "https://git.kernel.org/stable/c/357163fff3a6e48fe74745425a32071ec9caf852"
        },
        {
          "url": "https://git.kernel.org/stable/c/d8a6213d70accb403b82924a1c229e733433a5ef"
        }
      ],
      "title": "geneve: fix header validation in geneve[6]_xmit_skb",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-35973",
    "datePublished": "2024-05-20T09:42:00.475Z",
    "dateReserved": "2024-05-17T13:50:33.142Z",
    "dateUpdated": "2026-05-23T15:45:36.681Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-39964 (GCVE-0-2025-39964)

Vulnerability from cvelistv5 – Published: 2025-10-13 13:48 – Updated: 2026-09-19 03:56

Title

crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-18 00:00 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

Linux mitre root

References

9 references

URL	Tags
https://git.kernel.org/stable/c/0f28c4adbc4a97437…
https://git.kernel.org/stable/c/e4c1ec11132ec466f…
https://git.kernel.org/stable/c/1f323a48e9b5ebfe6…
https://git.kernel.org/stable/c/7c4491b5644e3a370…
https://git.kernel.org/stable/c/9aee87da5572b3a14…
https://git.kernel.org/stable/c/45bcf60fe49b37daa…
https://git.kernel.org/stable/c/1b34cbbf4f011a121…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource
https://cert-portal.siemens.com/productcert/html/…

Impacted products

5 products

Vendor	Product	Version
Linux	Linux	Affected: 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 , < 0f28c4adbc4a97437874c9b669fd7958a8c6d6ce (git) Affected: 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 , < e4c1ec11132ec466f7362a95f36a506ce4dc08c9 (git) Affected: 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 , < 1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8 (git) Affected: 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 , < 7c4491b5644e3a3708f3dbd7591be0a570135b84 (git) Affected: 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 , < 9aee87da5572b3a14075f501752e209801160d3d (git) Affected: 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 , < 45bcf60fe49b37daab1acee57b27211ad1574042 (git) Affected: 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 , < 1b34cbbf4f011a121ef7b2d7d6e6920a036d5285 (git)
Linux	Linux	Affected: 2.6.38 Unaffected: 0 , < 2.6.38 (semver) Unaffected: 5.10.245 , ≤ 5.10.* (semver) Unaffected: 5.15.194 , ≤ 5.15.* (semver) Unaffected: 6.1.154 , ≤ 6.1.* (semver) Unaffected: 6.6.108 , ≤ 6.6.* (semver) Unaffected: 6.12.49 , ≤ 6.12.* (semver) Unaffected: 6.16.9 , ≤ 6.16.* (semver) Unaffected: 6.17 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-39964",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-18T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-09-18",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39964"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-19T03:56:17.769Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39964"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-09-18T00:00:00.000Z",
            "value": "CVE-2025-39964 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T08:42:37.537Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "crypto/af_alg.c",
            "include/crypto/if_alg.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "0f28c4adbc4a97437874c9b669fd7958a8c6d6ce",
              "status": "affected",
              "version": "8ff590903d5fc7f5a0a988c38267a3d08e6393a2",
              "versionType": "git"
            },
            {
              "lessThan": "e4c1ec11132ec466f7362a95f36a506ce4dc08c9",
              "status": "affected",
              "version": "8ff590903d5fc7f5a0a988c38267a3d08e6393a2",
              "versionType": "git"
            },
            {
              "lessThan": "1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8",
              "status": "affected",
              "version": "8ff590903d5fc7f5a0a988c38267a3d08e6393a2",
              "versionType": "git"
            },
            {
              "lessThan": "7c4491b5644e3a3708f3dbd7591be0a570135b84",
              "status": "affected",
              "version": "8ff590903d5fc7f5a0a988c38267a3d08e6393a2",
              "versionType": "git"
            },
            {
              "lessThan": "9aee87da5572b3a14075f501752e209801160d3d",
              "status": "affected",
              "version": "8ff590903d5fc7f5a0a988c38267a3d08e6393a2",
              "versionType": "git"
            },
            {
              "lessThan": "45bcf60fe49b37daab1acee57b27211ad1574042",
              "status": "affected",
              "version": "8ff590903d5fc7f5a0a988c38267a3d08e6393a2",
              "versionType": "git"
            },
            {
              "lessThan": "1b34cbbf4f011a121ef7b2d7d6e6920a036d5285",
              "status": "affected",
              "version": "8ff590903d5fc7f5a0a988c38267a3d08e6393a2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "crypto/af_alg.c",
            "include/crypto/if_alg.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.38"
            },
            {
              "lessThan": "2.6.38",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.245",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.194",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.154",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.108",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.49",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.16.*",
              "status": "unaffected",
              "version": "6.16.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.17",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.245",
                  "versionStartIncluding": "2.6.38",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.194",
                  "versionStartIncluding": "2.6.38",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.154",
                  "versionStartIncluding": "2.6.38",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.108",
                  "versionStartIncluding": "2.6.38",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.49",
                  "versionStartIncluding": "2.6.38",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16.9",
                  "versionStartIncluding": "2.6.38",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17",
                  "versionStartIncluding": "2.6.38",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Disallow concurrent writes in af_alg_sendmsg\n\nIssuing two writes to the same af_alg socket is bogus as the\ndata will be interleaved in an unpredictable fashion.  Furthermore,\nconcurrent writes may create inconsistencies in the internal\nsocket state.\n\nDisallow this by adding a new ctx-\u003ewrite field that indiciates\nexclusive ownership for writing."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached through the AF_ALG socket family via `socket()`/`bind()`/`sendmsg()`/`recvmsg()` syscalls, which requires local system access. There is no remote or adjacent-network path to `af_alg_sendmsg()`.\nAC:L - The attacker controls both sides of the race entirely \u2014 two of its own threads on a socket it owns \u2014 and can force writer A to park deterministically in `af_alg_wait_for_wmem()` by sizing `SO_SNDBUF` and filling it, then wake it on demand with its own `recvmsg()`. The error exit that leaves `cur == 0` is triggered at will with a deliberately faulting user buffer, so no condition is outside the attacker\u0027s control.\nPR:L - `alg_create()`, `alg_bind()` and `alg_setkey()` perform no capability checks whatsoever, so any unprivileged local user \u2014 including one inside a container or unprivileged user namespace \u2014 can open, bind and write to an AF_ALG skcipher/aead socket. The required modules are auto-loaded on demand via `MODULE_ALIAS_NETPROTO(AF_ALG)` and `request_module(\"algif-%s\")`.\nUI:N - The attacking process performs every step itself \u2014 socket creation, bind, and the two concurrent `sendmsg()` calls. No victim action or interaction of any kind is needed.\nS:U - The corruption is confined to kernel heap objects (`struct af_alg_tsgl`/scatterlist and adjacent slab memory) within the same security authority. No hypervisor, IOMMU, or other trust boundary is crossed.\nC:H - The out-of-bounds scatterlist entry is fabricated from kernel list pointers and is subsequently handed to the cipher by `skcipher_recvmsg`/`aead_recvmsg` via `af_alg_pull_tsgl()`, so arbitrary kernel memory is encrypted/decrypted and returned to userspace. This yields a kernel memory disclosure primitive, not merely a pointer leak.\nI:H - `memcpy_from_msg(page_address(sg_page(sg)) + sg-\u003eoffset + sg-\u003elength, msg, len)` on the underflowed scatterlist writes attacker-controlled data of attacker-chosen length to an address derived from attacker-influenceable heap contents. Combined with heap grooming of the 4KB tsgl allocations, this is a controlled kernel write suitable for privilege escalation.\nA:H - Dereferencing `page_address(sg_page(sg))` on a bogus page_link, and the later `put_page()` on that fabricated page, reliably produce an oops/panic or page refcount corruption. Any unprivileged user can trigger this repeatedly, crashing the machine."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:06:33.126Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce"
        },
        {
          "url": "https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9"
        },
        {
          "url": "https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8"
        },
        {
          "url": "https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84"
        },
        {
          "url": "https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d"
        },
        {
          "url": "https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042"
        },
        {
          "url": "https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285"
        }
      ],
      "title": "crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-39964",
    "datePublished": "2025-10-13T13:48:30.334Z",
    "dateReserved": "2025-04-16T07:20:57.149Z",
    "dateUpdated": "2026-09-19T03:56:17.769Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-40022 (GCVE-0-2025-40022)

Vulnerability from cvelistv5 – Published: 2025-10-24 12:24 – Updated: 2026-09-08 08:42

Title

crypto: af_alg - Fix incorrect boolean values in af_alg_ctx

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Commit 1b34cbbf4f01 ("crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg") changed some fields from bool to 1-bit bitfields of type u32. However, some assignments to these fields, specifically 'more' and 'merge', assign values greater than 1. These relied on C's implicit conversion to bool, such that zero becomes false and nonzero becomes true. With a 1-bit bitfields of type u32 instead, mod 2 of the value is taken instead, resulting in 0 being assigned in some cases when 1 was intended. Fix this by restoring the bool type.

Severity

No CVSS data available.

Assigner

Linux mitre root

References

9 references

URL	Tags
https://git.kernel.org/stable/c/3a21698ace915a445…
https://git.kernel.org/stable/c/d382d6daf0184490f…
https://git.kernel.org/stable/c/54506c6335690f4ef…
https://git.kernel.org/stable/c/8703940bd30b5ad94…
https://git.kernel.org/stable/c/316b090c2fee964c3…
https://git.kernel.org/stable/c/fbe96bd25423e6127…
https://git.kernel.org/stable/c/d0ca0df179c4b21e2…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

8 products

Vendor	Product	Version
Linux	Linux	Affected: 0f28c4adbc4a97437874c9b669fd7958a8c6d6ce , < 3a21698ace915a445bce2d0dcfc84b6d2199baf7 (git) Affected: e4c1ec11132ec466f7362a95f36a506ce4dc08c9 , < d382d6daf0184490f366562469a5673f65ee2662 (git) Affected: 1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8 , < 54506c6335690f4ef1b9f154e34f5a604c72c1ed (git) Affected: 7c4491b5644e3a3708f3dbd7591be0a570135b84 , < 8703940bd30b5ad94408d28d7192db2491cd3592 (git) Affected: 9aee87da5572b3a14075f501752e209801160d3d , < 316b090c2fee964c307a634fecc7df269664b158 (git) Affected: 45bcf60fe49b37daab1acee57b27211ad1574042 , < fbe96bd25423e61273d8831e995260b429d850b6 (git) Affected: 1b34cbbf4f011a121ef7b2d7d6e6920a036d5285 , < d0ca0df179c4b21e2a6c4a4fb637aa8fa14575cb (git)
Linux	Linux	Affected: 6.1.154 , < 6.1.155 (semver) Affected: 6.6.108 , < 6.6.109 (semver) Affected: 6.12.49 , < 6.12.50 (semver) Affected: 6.16.9 , < 6.16.10 (semver)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T08:42:43.608Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/crypto/if_alg.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3a21698ace915a445bce2d0dcfc84b6d2199baf7",
              "status": "affected",
              "version": "0f28c4adbc4a97437874c9b669fd7958a8c6d6ce",
              "versionType": "git"
            },
            {
              "lessThan": "d382d6daf0184490f366562469a5673f65ee2662",
              "status": "affected",
              "version": "e4c1ec11132ec466f7362a95f36a506ce4dc08c9",
              "versionType": "git"
            },
            {
              "lessThan": "54506c6335690f4ef1b9f154e34f5a604c72c1ed",
              "status": "affected",
              "version": "1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8",
              "versionType": "git"
            },
            {
              "lessThan": "8703940bd30b5ad94408d28d7192db2491cd3592",
              "status": "affected",
              "version": "7c4491b5644e3a3708f3dbd7591be0a570135b84",
              "versionType": "git"
            },
            {
              "lessThan": "316b090c2fee964c307a634fecc7df269664b158",
              "status": "affected",
              "version": "9aee87da5572b3a14075f501752e209801160d3d",
              "versionType": "git"
            },
            {
              "lessThan": "fbe96bd25423e61273d8831e995260b429d850b6",
              "status": "affected",
              "version": "45bcf60fe49b37daab1acee57b27211ad1574042",
              "versionType": "git"
            },
            {
              "lessThan": "d0ca0df179c4b21e2a6c4a4fb637aa8fa14575cb",
              "status": "affected",
              "version": "1b34cbbf4f011a121ef7b2d7d6e6920a036d5285",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/crypto/if_alg.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6.1.155",
              "status": "affected",
              "version": "6.1.154",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.109",
              "status": "affected",
              "version": "6.6.108",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.50",
              "status": "affected",
              "version": "6.12.49",
              "versionType": "semver"
            },
            {
              "lessThan": "6.16.10",
              "status": "affected",
              "version": "6.16.9",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.155",
                  "versionStartIncluding": "6.1.154",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.109",
                  "versionStartIncluding": "6.6.108",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.50",
                  "versionStartIncluding": "6.12.49",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16.10",
                  "versionStartIncluding": "6.16.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Fix incorrect boolean values in af_alg_ctx\n\nCommit 1b34cbbf4f01 (\"crypto: af_alg - Disallow concurrent writes in\naf_alg_sendmsg\") changed some fields from bool to 1-bit bitfields of\ntype u32.\n\nHowever, some assignments to these fields, specifically \u0027more\u0027 and\n\u0027merge\u0027, assign values greater than 1.  These relied on C\u0027s implicit\nconversion to bool, such that zero becomes false and nonzero becomes\ntrue.\n\nWith a 1-bit bitfields of type u32 instead, mod 2 of the value is taken\ninstead, resulting in 0 being assigned in some cases when 1 was intended.\n\nFix this by restoring the bool type."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T21:40:58.053Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/3a21698ace915a445bce2d0dcfc84b6d2199baf7"
        },
        {
          "url": "https://git.kernel.org/stable/c/d382d6daf0184490f366562469a5673f65ee2662"
        },
        {
          "url": "https://git.kernel.org/stable/c/54506c6335690f4ef1b9f154e34f5a604c72c1ed"
        },
        {
          "url": "https://git.kernel.org/stable/c/8703940bd30b5ad94408d28d7192db2491cd3592"
        },
        {
          "url": "https://git.kernel.org/stable/c/316b090c2fee964c307a634fecc7df269664b158"
        },
        {
          "url": "https://git.kernel.org/stable/c/fbe96bd25423e61273d8831e995260b429d850b6"
        },
        {
          "url": "https://git.kernel.org/stable/c/d0ca0df179c4b21e2a6c4a4fb637aa8fa14575cb"
        }
      ],
      "title": "crypto: af_alg - Fix incorrect boolean values in af_alg_ctx",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-40022",
    "datePublished": "2025-10-24T12:24:57.875Z",
    "dateReserved": "2025-04-16T07:20:57.152Z",
    "dateUpdated": "2026-09-08T08:42:43.608Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-40277 (GCVE-0-2025-40277)

Vulnerability from cvelistv5 – Published: 2025-12-06 21:51 – Updated: 2026-08-05 12:09

Title

drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-16 19:51 UTC

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/e58559845021c3bad…
https://git.kernel.org/stable/c/54d458b244893e47b…
https://git.kernel.org/stable/c/709e5c088f9c99a5c…
https://git.kernel.org/stable/c/a3abb54c27b2c393c…
https://git.kernel.org/stable/c/b5df9e06eed3df6a4…
https://git.kernel.org/stable/c/5aea2cde03d4247cd…
https://git.kernel.org/stable/c/f3f3a8eb3f0ba799f…
https://git.kernel.org/stable/c/32b415a9dc2c212e8…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 8ce75f8ab9044fe11caaaf2b2c82471023212f9f , < e58559845021c3bad5e094219378b869157fad53 (git) Affected: 8ce75f8ab9044fe11caaaf2b2c82471023212f9f , < 54d458b244893e47bda52ec3943fdfbc8d7d068b (git) Affected: 8ce75f8ab9044fe11caaaf2b2c82471023212f9f , < 709e5c088f9c99a5cf2c1d1c6ce58f2cca7ab173 (git) Affected: 8ce75f8ab9044fe11caaaf2b2c82471023212f9f , < a3abb54c27b2c393c44362399777ad2f6e1ff17e (git) Affected: 8ce75f8ab9044fe11caaaf2b2c82471023212f9f , < b5df9e06eed3df6a4f5c6f8453013b0cabb927b4 (git) Affected: 8ce75f8ab9044fe11caaaf2b2c82471023212f9f , < 5aea2cde03d4247cdcf53f9ab7d0747c9dca1cfc (git) Affected: 8ce75f8ab9044fe11caaaf2b2c82471023212f9f , < f3f3a8eb3f0ba799fae057091d8c67cca12d6fa0 (git) Affected: 8ce75f8ab9044fe11caaaf2b2c82471023212f9f , < 32b415a9dc2c212e809b7ebc2b14bc3fbda2b9af (git)
Linux	Linux	Affected: 4.3 Unaffected: 0 , < 4.3 (semver) Unaffected: 5.4.302 , ≤ 5.4.* (semver) Unaffected: 5.10.247 , ≤ 5.10.* (semver) Unaffected: 5.15.197 , ≤ 5.15.* (semver) Unaffected: 6.1.159 , ≤ 6.1.* (semver) Unaffected: 6.6.117 , ≤ 6.6.* (semver) Unaffected: 6.12.59 , ≤ 6.12.* (semver) Unaffected: 6.17.9 , ≤ 6.17.* (semver) Unaffected: 6.18 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-40277",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-16T19:51:12.603019Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T19:51:24.946Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e58559845021c3bad5e094219378b869157fad53",
              "status": "affected",
              "version": "8ce75f8ab9044fe11caaaf2b2c82471023212f9f",
              "versionType": "git"
            },
            {
              "lessThan": "54d458b244893e47bda52ec3943fdfbc8d7d068b",
              "status": "affected",
              "version": "8ce75f8ab9044fe11caaaf2b2c82471023212f9f",
              "versionType": "git"
            },
            {
              "lessThan": "709e5c088f9c99a5cf2c1d1c6ce58f2cca7ab173",
              "status": "affected",
              "version": "8ce75f8ab9044fe11caaaf2b2c82471023212f9f",
              "versionType": "git"
            },
            {
              "lessThan": "a3abb54c27b2c393c44362399777ad2f6e1ff17e",
              "status": "affected",
              "version": "8ce75f8ab9044fe11caaaf2b2c82471023212f9f",
              "versionType": "git"
            },
            {
              "lessThan": "b5df9e06eed3df6a4f5c6f8453013b0cabb927b4",
              "status": "affected",
              "version": "8ce75f8ab9044fe11caaaf2b2c82471023212f9f",
              "versionType": "git"
            },
            {
              "lessThan": "5aea2cde03d4247cdcf53f9ab7d0747c9dca1cfc",
              "status": "affected",
              "version": "8ce75f8ab9044fe11caaaf2b2c82471023212f9f",
              "versionType": "git"
            },
            {
              "lessThan": "f3f3a8eb3f0ba799fae057091d8c67cca12d6fa0",
              "status": "affected",
              "version": "8ce75f8ab9044fe11caaaf2b2c82471023212f9f",
              "versionType": "git"
            },
            {
              "lessThan": "32b415a9dc2c212e809b7ebc2b14bc3fbda2b9af",
              "status": "affected",
              "version": "8ce75f8ab9044fe11caaaf2b2c82471023212f9f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.3"
            },
            {
              "lessThan": "4.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.302",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.247",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.197",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.159",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.117",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.59",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.302",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.247",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.197",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.159",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.117",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.59",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.9",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE\n\nThis data originates from userspace and is used in buffer offset\ncalculations which could potentially overflow causing an out-of-bounds\naccess."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached only through the DRM_IOCTL_VMW_EXECBUF ioctl on the local vmwgfx device/render node (/dev/dri/renderD*), requiring local system access. There is no network or remote path into the command verifier.\nAC:L - The attacker fully and deterministically controls header-\u003esize in the command stream they submit; setting it to 0xFFFFFFF8..0xFFFFFFFF reliably wraps the 32-bit size computation and bypasses the size_remaining check every time. No race, timing window, or uncontrollable precondition is involved.\nPR:L - VMW_EXECBUF is declared DRM_RENDER_ALLOW and vmwgfx sets DRIVER_RENDER, so no DRM master or authentication is needed \u2014 any unprivileged local user with access to the render node (standard for graphics/desktop users and containers in VMware guests) can submit commands.\nUI:N - The attacker triggers the flaw entirely on their own by issuing the execbuf ioctl with a crafted SVGA3D command header. No victim action or interaction is required.\nS:U - The integer overflow and the resulting out-of-bounds accesses occur within the guest kernel\u0027s own address space and are confined to the kernel\u0027s security authority. No hypervisor, IOMMU, or sandbox boundary is crossed by the kernel-side defect itself.\nC:H - The unchecked header-\u003esize drives pointer arithmetic in vmw_cmd_dma(), vmw_cmd_draw(), and vmw_cmd_tex_state(), producing large out-of-bounds reads of adjacent kernel memory whose contents are interpreted as resource handles; success/failure of vmw_user_resource_lookup_handle() forms a scanning oracle over kernel heap contents, so arbitrary kernel memory disclosure is achievable.\nI:H - The same overflow yields out-of-bounds writes \u2014 vmw_cmd_dma() writes bo_size into suffix-\u003emaximumOffset past the buffer, and OOB-derived relocation offsets cause vmw_resource_relocations_apply() to write 32-bit resource IDs outside the command buffer. Controlled heap corruption of this kind is a standard path to privilege escalation.\nA:H - A header-\u003esize of 0xFFFFFFF8 makes *size zero, causing vmw_cmd_check_all() to spin forever while holding dev_priv-\u003ecmdbuf_mutex, and the far out-of-bounds reads past a vmalloc\u0027d bounce buffer hit a guard page and oops the kernel. Either outcome is a full denial of service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:09:09.886Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e58559845021c3bad5e094219378b869157fad53"
        },
        {
          "url": "https://git.kernel.org/stable/c/54d458b244893e47bda52ec3943fdfbc8d7d068b"
        },
        {
          "url": "https://git.kernel.org/stable/c/709e5c088f9c99a5cf2c1d1c6ce58f2cca7ab173"
        },
        {
          "url": "https://git.kernel.org/stable/c/a3abb54c27b2c393c44362399777ad2f6e1ff17e"
        },
        {
          "url": "https://git.kernel.org/stable/c/b5df9e06eed3df6a4f5c6f8453013b0cabb927b4"
        },
        {
          "url": "https://git.kernel.org/stable/c/5aea2cde03d4247cdcf53f9ab7d0747c9dca1cfc"
        },
        {
          "url": "https://git.kernel.org/stable/c/f3f3a8eb3f0ba799fae057091d8c67cca12d6fa0"
        },
        {
          "url": "https://git.kernel.org/stable/c/32b415a9dc2c212e809b7ebc2b14bc3fbda2b9af"
        }
      ],
      "title": "drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-40277",
    "datePublished": "2025-12-06T21:51:00.437Z",
    "dateReserved": "2025-04-16T07:20:57.184Z",
    "dateUpdated": "2026-08-05T12:09:09.886Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-68214 (GCVE-0-2025-68214)

Vulnerability from cvelistv5 – Published: 2025-12-16 13:57 – Updated: 2026-05-23 16:02

Title

timers: Fix NULL function pointer race in timer_shutdown_sync()

Summary

In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition between timer_shutdown_sync() and timer expiration that can lead to hitting a WARN_ON in expire_timers(). The issue occurs when timer_shutdown_sync() clears the timer function to NULL while the timer is still running on another CPU. The race scenario looks like this: CPU0 CPU1 <SOFTIRQ> lock_timer_base() expire_timers() base->running_timer = timer; unlock_timer_base() [call_timer_fn enter] mod_timer() ... timer_shutdown_sync() lock_timer_base() // For now, will not detach the timer but only clear its function to NULL if (base->running_timer != timer) ret = detach_if_pending(timer, base, true); if (shutdown) timer->function = NULL; unlock_timer_base() [call_timer_fn exit] lock_timer_base() base->running_timer = NULL; unlock_timer_base() ... // Now timer is pending while its function set to NULL. // next timer trigger <SOFTIRQ> expire_timers() WARN_ON_ONCE(!fn) // hit ... lock_timer_base() // Now timer will detach if (base->running_timer != timer) ret = detach_if_pending(timer, base, true); if (shutdown) timer->function = NULL; unlock_timer_base() The problem is that timer_shutdown_sync() clears the timer function regardless of whether the timer is currently running. This can leave a pending timer with a NULL function pointer, which triggers the WARN_ON_ONCE(!fn) check in expire_timers(). Fix this by only clearing the timer function when actually detaching the timer. If the timer is running, leave the function pointer intact, which is safe because the timer will be properly detached when it finishes running.

Severity

No CVSS data available.

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/ba43ac025c4318241…
https://git.kernel.org/stable/c/1a975716cc8977f46…
https://git.kernel.org/stable/c/6665fbd7730b26d77…
https://git.kernel.org/stable/c/176725f4848376530…
https://git.kernel.org/stable/c/a01efa7a780c42ac5…
https://git.kernel.org/stable/c/20739af07383e6eb1…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: debbcf812d735003c96c5e5968a3cfa4e1fbd1af , < ba43ac025c4318241f8edf94f31d2eebab86991b (git) Affected: 334c33aa487be406a149c8b87c38c8399d2dba8d , < 1a975716cc8977f461e45e28e3e5977d46ad7a6a (git) Affected: 0cc04e80458a822300b93f82ed861a513edde194 , < 6665fbd7730b26d770c232b20d1b907e6a67a914 (git) Affected: 0cc04e80458a822300b93f82ed861a513edde194 , < 176725f4848376530a0f0da9023f956afcc33585 (git) Affected: 0cc04e80458a822300b93f82ed861a513edde194 , < a01efa7a780c42ac5170a949bd95c9786ffcc60a (git) Affected: 0cc04e80458a822300b93f82ed861a513edde194 , < 20739af07383e6eb1ec59dcd70b72ebfa9ac362c (git) Affected: 6.1.158 , < 6.1.159 (semver)
Linux	Linux	Affected: 6.2 Unaffected: 0 , < 6.2 (semver) Unaffected: 6.1.159 , ≤ 6.1.* (semver) Unaffected: 6.6.118 , ≤ 6.6.* (semver) Unaffected: 6.12.60 , ≤ 6.12.* (semver) Unaffected: 6.17.10 , ≤ 6.17.* (semver) Unaffected: 6.18 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "kernel/time/timer.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ba43ac025c4318241f8edf94f31d2eebab86991b",
              "status": "affected",
              "version": "debbcf812d735003c96c5e5968a3cfa4e1fbd1af",
              "versionType": "git"
            },
            {
              "lessThan": "1a975716cc8977f461e45e28e3e5977d46ad7a6a",
              "status": "affected",
              "version": "334c33aa487be406a149c8b87c38c8399d2dba8d",
              "versionType": "git"
            },
            {
              "lessThan": "6665fbd7730b26d770c232b20d1b907e6a67a914",
              "status": "affected",
              "version": "0cc04e80458a822300b93f82ed861a513edde194",
              "versionType": "git"
            },
            {
              "lessThan": "176725f4848376530a0f0da9023f956afcc33585",
              "status": "affected",
              "version": "0cc04e80458a822300b93f82ed861a513edde194",
              "versionType": "git"
            },
            {
              "lessThan": "a01efa7a780c42ac5170a949bd95c9786ffcc60a",
              "status": "affected",
              "version": "0cc04e80458a822300b93f82ed861a513edde194",
              "versionType": "git"
            },
            {
              "lessThan": "20739af07383e6eb1ec59dcd70b72ebfa9ac362c",
              "status": "affected",
              "version": "0cc04e80458a822300b93f82ed861a513edde194",
              "versionType": "git"
            },
            {
              "lessThan": "6.1.159",
              "status": "affected",
              "version": "6.1.158",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "kernel/time/timer.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.2"
            },
            {
              "lessThan": "6.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.159",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.118",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.60",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.159",
                  "versionStartIncluding": "6.1.158",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.118",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.60",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.10",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntimers: Fix NULL function pointer race in timer_shutdown_sync()\n\nThere is a race condition between timer_shutdown_sync() and timer\nexpiration that can lead to hitting a WARN_ON in expire_timers().\n\nThe issue occurs when timer_shutdown_sync() clears the timer function\nto NULL while the timer is still running on another CPU. The race\nscenario looks like this:\n\nCPU0\t\t\t\t\tCPU1\n\t\t\t\t\t\u003cSOFTIRQ\u003e\n\t\t\t\t\tlock_timer_base()\n\t\t\t\t\texpire_timers()\n\t\t\t\t\tbase-\u003erunning_timer = timer;\n\t\t\t\t\tunlock_timer_base()\n\t\t\t\t\t[call_timer_fn enter]\n\t\t\t\t\tmod_timer()\n\t\t\t\t\t...\ntimer_shutdown_sync()\nlock_timer_base()\n// For now, will not detach the timer but only clear its function to NULL\nif (base-\u003erunning_timer != timer)\n\tret = detach_if_pending(timer, base, true);\nif (shutdown)\n\ttimer-\u003efunction = NULL;\nunlock_timer_base()\n\t\t\t\t\t[call_timer_fn exit]\n\t\t\t\t\tlock_timer_base()\n\t\t\t\t\tbase-\u003erunning_timer = NULL;\n\t\t\t\t\tunlock_timer_base()\n\t\t\t\t\t...\n\t\t\t\t\t// Now timer is pending while its function set to NULL.\n\t\t\t\t\t// next timer trigger\n\t\t\t\t\t\u003cSOFTIRQ\u003e\n\t\t\t\t\texpire_timers()\n\t\t\t\t\tWARN_ON_ONCE(!fn) // hit\n\t\t\t\t\t...\nlock_timer_base()\n// Now timer will detach\nif (base-\u003erunning_timer != timer)\n\tret = detach_if_pending(timer, base, true);\nif (shutdown)\n\ttimer-\u003efunction = NULL;\nunlock_timer_base()\n\nThe problem is that timer_shutdown_sync() clears the timer function\nregardless of whether the timer is currently running. This can leave a\npending timer with a NULL function pointer, which triggers the\nWARN_ON_ONCE(!fn) check in expire_timers().\n\nFix this by only clearing the timer function when actually detaching the\ntimer. If the timer is running, leave the function pointer intact, which is\nsafe because the timer will be properly detached when it finishes running."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T16:02:22.475Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ba43ac025c4318241f8edf94f31d2eebab86991b"
        },
        {
          "url": "https://git.kernel.org/stable/c/1a975716cc8977f461e45e28e3e5977d46ad7a6a"
        },
        {
          "url": "https://git.kernel.org/stable/c/6665fbd7730b26d770c232b20d1b907e6a67a914"
        },
        {
          "url": "https://git.kernel.org/stable/c/176725f4848376530a0f0da9023f956afcc33585"
        },
        {
          "url": "https://git.kernel.org/stable/c/a01efa7a780c42ac5170a949bd95c9786ffcc60a"
        },
        {
          "url": "https://git.kernel.org/stable/c/20739af07383e6eb1ec59dcd70b72ebfa9ac362c"
        }
      ],
      "title": "timers: Fix NULL function pointer race in timer_shutdown_sync()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68214",
    "datePublished": "2025-12-16T13:57:09.728Z",
    "dateReserved": "2025-12-16T13:41:40.256Z",
    "dateUpdated": "2026-05-23T16:02:22.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-23003 (GCVE-0-2026-23003)

Vulnerability from cvelistv5 – Published: 2026-01-25 14:36 – Updated: 2026-09-08 08:44

Title

ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()

Summary

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Blamed commit did not take care of VLAN encapsulations as spotted by syzbot [1]. Use skb_vlan_inet_prepare() instead of pskb_inet_may_pull(). [1] BUG: KMSAN: uninit-value in __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline] BUG: KMSAN: uninit-value in INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline] BUG: KMSAN: uninit-value in IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321 __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline] INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline] IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321 ip6ip6_dscp_ecn_decapsulate+0x16f/0x1b0 net/ipv6/ip6_tunnel.c:729 __ip6_tnl_rcv+0xed9/0x1b50 net/ipv6/ip6_tunnel.c:860 ip6_tnl_rcv+0xc3/0x100 net/ipv6/ip6_tunnel.c:903 gre_rcv+0x1529/0x1b90 net/ipv6/ip6_gre.c:-1 ip6_protocol_deliver_rcu+0x1c89/0x2c60 net/ipv6/ip6_input.c:438 ip6_input_finish+0x1f4/0x4a0 net/ipv6/ip6_input.c:489 NF_HOOK include/linux/netfilter.h:318 [inline] ip6_input+0x9c/0x330 net/ipv6/ip6_input.c:500 ip6_mc_input+0x7ca/0xc10 net/ipv6/ip6_input.c:590 dst_input include/net/dst.h:474 [inline] ip6_rcv_finish+0x958/0x990 net/ipv6/ip6_input.c:79 NF_HOOK include/linux/netfilter.h:318 [inline] ipv6_rcv+0xf1/0x3c0 net/ipv6/ip6_input.c:311 __netif_receive_skb_one_core net/core/dev.c:6139 [inline] __netif_receive_skb+0x1df/0xac0 net/core/dev.c:6252 netif_receive_skb_internal net/core/dev.c:6338 [inline] netif_receive_skb+0x57/0x630 net/core/dev.c:6397 tun_rx_batched+0x1df/0x980 drivers/net/tun.c:1485 tun_get_user+0x5c0e/0x6c60 drivers/net/tun.c:1953 tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999 new_sync_write fs/read_write.c:593 [inline] vfs_write+0xbe2/0x15d0 fs/read_write.c:686 ksys_write fs/read_write.c:738 [inline] __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746 x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:4960 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 mm/slub.c:5315 kmalloc_reserve+0x13c/0x4b0 net/core/skbuff.c:586 __alloc_skb+0x805/0x1040 net/core/skbuff.c:690 alloc_skb include/linux/skbuff.h:1383 [inline] alloc_skb_with_frags+0xc5/0xa60 net/core/skbuff.c:6712 sock_alloc_send_pskb+0xacc/0xc60 net/core/sock.c:2995 tun_alloc_skb drivers/net/tun.c:1461 [inline] tun_get_user+0x1142/0x6c60 drivers/net/tun.c:1794 tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999 new_sync_write fs/read_write.c:593 [inline] vfs_write+0xbe2/0x15d0 fs/read_write.c:686 ksys_write fs/read_write.c:738 [inline] __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746 x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 UID: 0 PID: 6465 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-16 20:17 UTC

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/f9c5c5b791d385057…
https://git.kernel.org/stable/c/64c71d60a21a9ed0a…
https://git.kernel.org/stable/c/9e1c8c2a33d0a7b1f…
https://git.kernel.org/stable/c/2f03dafea0a8096a2…
https://git.kernel.org/stable/c/df5ffde9669314500…
https://git.kernel.org/stable/c/b9f915340f25cae15…
https://git.kernel.org/stable/c/81c734dae203757fb…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

5 products

Vendor	Product	Version
Linux	Linux	Affected: a9bc32879a08f23cdb80a48c738017e39aea1080 , < f9c5c5b791d3850570796f9e067629474e613796 (git) Affected: af6b5c50d47ab43e5272ad61935d0ed2e264d3f0 , < 64c71d60a21a9ed0a802483dcd422b5b24eb1abe (git) Affected: d54e4da98bbfa8c257bdca94c49652d81d18a4d8 , < 9e1c8c2a33d0a7b1f637b5d0602fe56ed10166af (git) Affected: 350a6640fac4b53564ec20aa3f4a0922cb0ba5e6 , < 2f03dafea0a8096a2eb60f551218b360e5bab9a3 (git) Affected: 8d975c15c0cd744000ca386247432d57b21f9df0 , < df5ffde9669314500809bc498ae73d6d3d9519ac (git) Affected: 8d975c15c0cd744000ca386247432d57b21f9df0 , < b9f915340f25cae1562f18e1eb52deafca328414 (git) Affected: 8d975c15c0cd744000ca386247432d57b21f9df0 , < 81c734dae203757fb3c9eee6f9896386940776bd (git) Affected: c835df3bcc14858ae9b27315dd7de76370b94f3a (git) Affected: 5.10.210 , < 5.10.249 (semver) Affected: 5.15.149 , < 5.15.199 (semver) Affected: 6.1.77 , < 6.1.162 (semver) Affected: 6.6.16 , < 6.6.122 (semver) Affected: 6.7.4 , < 6.8 (semver)
Linux	Linux	Affected: 6.8 Unaffected: 0 , < 6.8 (semver) Unaffected: 5.10.249 , ≤ 5.10.* (semver) Unaffected: 5.15.199 , ≤ 5.15.* (semver) Unaffected: 6.1.162 , ≤ 6.1.* (semver) Unaffected: 6.6.122 , ≤ 6.6.* (semver) Unaffected: 6.12.67 , ≤ 6.12.* (semver) Unaffected: 6.18.7 , ≤ 6.18.* (semver) Unaffected: 6.19 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-23003",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-16T20:17:50.477974Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T20:18:00.168Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T08:44:33.646Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/ip6_tunnel.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f9c5c5b791d3850570796f9e067629474e613796",
              "status": "affected",
              "version": "a9bc32879a08f23cdb80a48c738017e39aea1080",
              "versionType": "git"
            },
            {
              "lessThan": "64c71d60a21a9ed0a802483dcd422b5b24eb1abe",
              "status": "affected",
              "version": "af6b5c50d47ab43e5272ad61935d0ed2e264d3f0",
              "versionType": "git"
            },
            {
              "lessThan": "9e1c8c2a33d0a7b1f637b5d0602fe56ed10166af",
              "status": "affected",
              "version": "d54e4da98bbfa8c257bdca94c49652d81d18a4d8",
              "versionType": "git"
            },
            {
              "lessThan": "2f03dafea0a8096a2eb60f551218b360e5bab9a3",
              "status": "affected",
              "version": "350a6640fac4b53564ec20aa3f4a0922cb0ba5e6",
              "versionType": "git"
            },
            {
              "lessThan": "df5ffde9669314500809bc498ae73d6d3d9519ac",
              "status": "affected",
              "version": "8d975c15c0cd744000ca386247432d57b21f9df0",
              "versionType": "git"
            },
            {
              "lessThan": "b9f915340f25cae1562f18e1eb52deafca328414",
              "status": "affected",
              "version": "8d975c15c0cd744000ca386247432d57b21f9df0",
              "versionType": "git"
            },
            {
              "lessThan": "81c734dae203757fb3c9eee6f9896386940776bd",
              "status": "affected",
              "version": "8d975c15c0cd744000ca386247432d57b21f9df0",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c835df3bcc14858ae9b27315dd7de76370b94f3a",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.249",
              "status": "affected",
              "version": "5.10.210",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.199",
              "status": "affected",
              "version": "5.15.149",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.162",
              "status": "affected",
              "version": "6.1.77",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.122",
              "status": "affected",
              "version": "6.6.16",
              "versionType": "semver"
            },
            {
              "lessThan": "6.8",
              "status": "affected",
              "version": "6.7.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/ip6_tunnel.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.8"
            },
            {
              "lessThan": "6.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.249",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.199",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.162",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.122",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.67",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.249",
                  "versionStartIncluding": "5.10.210",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.199",
                  "versionStartIncluding": "5.15.149",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.162",
                  "versionStartIncluding": "6.1.77",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.122",
                  "versionStartIncluding": "6.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.67",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.7",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.7.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()\n\nBlamed commit did not take care of VLAN encapsulations\nas spotted by syzbot [1].\n\nUse skb_vlan_inet_prepare() instead of pskb_inet_may_pull().\n\n[1]\n BUG: KMSAN: uninit-value in __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline]\n BUG: KMSAN: uninit-value in INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline]\n BUG: KMSAN: uninit-value in IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321\n  __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline]\n  INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline]\n  IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321\n  ip6ip6_dscp_ecn_decapsulate+0x16f/0x1b0 net/ipv6/ip6_tunnel.c:729\n  __ip6_tnl_rcv+0xed9/0x1b50 net/ipv6/ip6_tunnel.c:860\n  ip6_tnl_rcv+0xc3/0x100 net/ipv6/ip6_tunnel.c:903\n gre_rcv+0x1529/0x1b90 net/ipv6/ip6_gre.c:-1\n  ip6_protocol_deliver_rcu+0x1c89/0x2c60 net/ipv6/ip6_input.c:438\n  ip6_input_finish+0x1f4/0x4a0 net/ipv6/ip6_input.c:489\n  NF_HOOK include/linux/netfilter.h:318 [inline]\n  ip6_input+0x9c/0x330 net/ipv6/ip6_input.c:500\n  ip6_mc_input+0x7ca/0xc10 net/ipv6/ip6_input.c:590\n  dst_input include/net/dst.h:474 [inline]\n  ip6_rcv_finish+0x958/0x990 net/ipv6/ip6_input.c:79\n  NF_HOOK include/linux/netfilter.h:318 [inline]\n  ipv6_rcv+0xf1/0x3c0 net/ipv6/ip6_input.c:311\n  __netif_receive_skb_one_core net/core/dev.c:6139 [inline]\n  __netif_receive_skb+0x1df/0xac0 net/core/dev.c:6252\n  netif_receive_skb_internal net/core/dev.c:6338 [inline]\n  netif_receive_skb+0x57/0x630 net/core/dev.c:6397\n  tun_rx_batched+0x1df/0x980 drivers/net/tun.c:1485\n  tun_get_user+0x5c0e/0x6c60 drivers/net/tun.c:1953\n  tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999\n  new_sync_write fs/read_write.c:593 [inline]\n  vfs_write+0xbe2/0x15d0 fs/read_write.c:686\n  ksys_write fs/read_write.c:738 [inline]\n  __do_sys_write fs/read_write.c:749 [inline]\n  __se_sys_write fs/read_write.c:746 [inline]\n  __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746\n  x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n  slab_post_alloc_hook mm/slub.c:4960 [inline]\n  slab_alloc_node mm/slub.c:5263 [inline]\n  kmem_cache_alloc_node_noprof+0x9e7/0x17a0 mm/slub.c:5315\n  kmalloc_reserve+0x13c/0x4b0 net/core/skbuff.c:586\n  __alloc_skb+0x805/0x1040 net/core/skbuff.c:690\n  alloc_skb include/linux/skbuff.h:1383 [inline]\n  alloc_skb_with_frags+0xc5/0xa60 net/core/skbuff.c:6712\n  sock_alloc_send_pskb+0xacc/0xc60 net/core/sock.c:2995\n  tun_alloc_skb drivers/net/tun.c:1461 [inline]\n  tun_get_user+0x1142/0x6c60 drivers/net/tun.c:1794\n  tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999\n  new_sync_write fs/read_write.c:593 [inline]\n  vfs_write+0xbe2/0x15d0 fs/read_write.c:686\n  ksys_write fs/read_write.c:738 [inline]\n  __do_sys_write fs/read_write.c:749 [inline]\n  __se_sys_write fs/read_write.c:746 [inline]\n  __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746\n  x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nCPU: 0 UID: 0 PID: 6465 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - __ip6_tnl_rcv() is reached from IPv6 packet receive via registered IPv6 tunnel/GRE protocol handlers, so a remote peer can trigger it by sending crafted tunneled IPv6/GRE packets to an exposed tunnel endpoint.\nAC:L - The attacker controls the tunneled packet format, including VLAN encapsulation, and there is no race or hard-to-hit timing condition.\nPR:N - Tunnel setup is privileged, but once the affected tunnel endpoint exists, the packet receive path has no attacker credential or authentication requirement.\nUI:N - Processing occurs automatically on packet receipt and does not require any victim user action.\nS:U - The bug affects kernel packet processing within the same host security authority and does not cross a VM, IOMMU, or sandbox boundary.\nC:N - The bug is an uninitialized value use in ECN decapsulation, but the investigated path does not expose the uninitialized kernel data to the attacker.\nI:N - The malformed packet can affect ECN/DSCP handling for that packet, but there is no evidence of arbitrary data modification or control-flow corruption.\nA:H - The reachable KMSAN BUG/oops path demonstrates that crafted packets can trigger a kernel fault condition, which is scored as high availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:20:05.561Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f9c5c5b791d3850570796f9e067629474e613796"
        },
        {
          "url": "https://git.kernel.org/stable/c/64c71d60a21a9ed0a802483dcd422b5b24eb1abe"
        },
        {
          "url": "https://git.kernel.org/stable/c/9e1c8c2a33d0a7b1f637b5d0602fe56ed10166af"
        },
        {
          "url": "https://git.kernel.org/stable/c/2f03dafea0a8096a2eb60f551218b360e5bab9a3"
        },
        {
          "url": "https://git.kernel.org/stable/c/df5ffde9669314500809bc498ae73d6d3d9519ac"
        },
        {
          "url": "https://git.kernel.org/stable/c/b9f915340f25cae1562f18e1eb52deafca328414"
        },
        {
          "url": "https://git.kernel.org/stable/c/81c734dae203757fb3c9eee6f9896386940776bd"
        }
      ],
      "title": "ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-23003",
    "datePublished": "2026-01-25T14:36:17.491Z",
    "dateReserved": "2026-01-13T15:37:45.939Z",
    "dateUpdated": "2026-09-08T08:44:33.646Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-23443 (GCVE-0-2026-23443)

Vulnerability from cvelistv5 – Published: 2026-04-03 15:15 – Updated: 2026-05-11 22:07

Title

ACPI: processor: Fix previous acpi_processor_errata_piix4() fix

Summary

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix previous acpi_processor_errata_piix4() fix After commi f132e089fe89 ("ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()"), device pointers may be dereferenced after dropping references to the device objects pointed to by them, which may cause a use-after-free to occur. Moreover, debug messages about enabling the errata may be printed if the errata flags corresponding to them are unset. Address all of these issues by moving message printing to the points in the code where the errata flags are set.

Severity

No CVSS data available.

Assigner

Linux mitre root

References

7 references

URL	Tags
https://git.kernel.org/stable/c/68408e8f9e366ad98…
https://git.kernel.org/stable/c/2e369ba9eb7b8a06e…
https://git.kernel.org/stable/c/edf4c2aaee08e8fd5…
https://git.kernel.org/stable/c/e0c470049344e9346…
https://git.kernel.org/stable/c/98473309a36acc271…
https://git.kernel.org/stable/c/8583f62259e1b315d…
https://git.kernel.org/stable/c/bf504b229cb8d534e…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 06724a60cfa9767ea90b0f5d3dfb5cdd251b64f5 , < 68408e8f9e366ad9850a66ac65cb569f13bf6cd4 (git) Affected: ad86ac604f8391c0212a91412d4f764c7a85f254 , < 2e369ba9eb7b8a06e9cc35a3e7fe73e59272f8c2 (git) Affected: 01e8751b37a366b1ca561add0042f2ceb18c03bf , < edf4c2aaee08e8fd503fbae705c801e92a0b55d7 (git) Affected: b803811485ac0b2f774b6bf3abc8b999ba3b7033 , < e0c470049344e9346fff79d7e2362212c216665e (git) Affected: 29f60d3d06818d40118a30d663231f027ae87a05 , < 98473309a36acc271009b85e0bb53a4c0dddf5c2 (git) Affected: 0398b641be2b66c2fc7e0163c606ef19372e7ad5 , < 8583f62259e1b315d5239371adfb36939cdab741 (git) Affected: f132e089fe89cadc2098991f0a3cb05c3f824ac6 , < bf504b229cb8d534eccbaeaa23eba34c05131e25 (git)
Linux	Linux	Affected: 5.15.202 , < 5.15.203 (semver) Affected: 6.1.165 , < 6.1.167 (semver) Affected: 6.6.128 , < 6.6.130 (semver) Affected: 6.12.75 , < 6.12.78 (semver) Affected: 6.18.16 , < 6.18.20 (semver) Affected: 6.19.6 , < 6.19.10 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/acpi/acpi_processor.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "68408e8f9e366ad9850a66ac65cb569f13bf6cd4",
              "status": "affected",
              "version": "06724a60cfa9767ea90b0f5d3dfb5cdd251b64f5",
              "versionType": "git"
            },
            {
              "lessThan": "2e369ba9eb7b8a06e9cc35a3e7fe73e59272f8c2",
              "status": "affected",
              "version": "ad86ac604f8391c0212a91412d4f764c7a85f254",
              "versionType": "git"
            },
            {
              "lessThan": "edf4c2aaee08e8fd503fbae705c801e92a0b55d7",
              "status": "affected",
              "version": "01e8751b37a366b1ca561add0042f2ceb18c03bf",
              "versionType": "git"
            },
            {
              "lessThan": "e0c470049344e9346fff79d7e2362212c216665e",
              "status": "affected",
              "version": "b803811485ac0b2f774b6bf3abc8b999ba3b7033",
              "versionType": "git"
            },
            {
              "lessThan": "98473309a36acc271009b85e0bb53a4c0dddf5c2",
              "status": "affected",
              "version": "29f60d3d06818d40118a30d663231f027ae87a05",
              "versionType": "git"
            },
            {
              "lessThan": "8583f62259e1b315d5239371adfb36939cdab741",
              "status": "affected",
              "version": "0398b641be2b66c2fc7e0163c606ef19372e7ad5",
              "versionType": "git"
            },
            {
              "lessThan": "bf504b229cb8d534eccbaeaa23eba34c05131e25",
              "status": "affected",
              "version": "f132e089fe89cadc2098991f0a3cb05c3f824ac6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/acpi/acpi_processor.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5.15.203",
              "status": "affected",
              "version": "5.15.202",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.167",
              "status": "affected",
              "version": "6.1.165",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.130",
              "status": "affected",
              "version": "6.6.128",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.78",
              "status": "affected",
              "version": "6.12.75",
              "versionType": "semver"
            },
            {
              "lessThan": "6.18.20",
              "status": "affected",
              "version": "6.18.16",
              "versionType": "semver"
            },
            {
              "lessThan": "6.19.10",
              "status": "affected",
              "version": "6.19.6",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "5.15.202",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "6.1.165",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "6.6.128",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "6.12.75",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.20",
                  "versionStartIncluding": "6.18.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.10",
                  "versionStartIncluding": "6.19.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: processor: Fix previous acpi_processor_errata_piix4() fix\n\nAfter commi f132e089fe89 (\"ACPI: processor: Fix NULL-pointer dereference\nin acpi_processor_errata_piix4()\"), device pointers may be dereferenced\nafter dropping references to the device objects pointed to by them,\nwhich may cause a use-after-free to occur.\n\nMoreover, debug messages about enabling the errata may be printed\nif the errata flags corresponding to them are unset.\n\nAddress all of these issues by moving message printing to the points\nin the code where the errata flags are set."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T22:07:00.396Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/68408e8f9e366ad9850a66ac65cb569f13bf6cd4"
        },
        {
          "url": "https://git.kernel.org/stable/c/2e369ba9eb7b8a06e9cc35a3e7fe73e59272f8c2"
        },
        {
          "url": "https://git.kernel.org/stable/c/edf4c2aaee08e8fd503fbae705c801e92a0b55d7"
        },
        {
          "url": "https://git.kernel.org/stable/c/e0c470049344e9346fff79d7e2362212c216665e"
        },
        {
          "url": "https://git.kernel.org/stable/c/98473309a36acc271009b85e0bb53a4c0dddf5c2"
        },
        {
          "url": "https://git.kernel.org/stable/c/8583f62259e1b315d5239371adfb36939cdab741"
        },
        {
          "url": "https://git.kernel.org/stable/c/bf504b229cb8d534eccbaeaa23eba34c05131e25"
        }
      ],
      "title": "ACPI: processor: Fix previous acpi_processor_errata_piix4() fix",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-23443",
    "datePublished": "2026-04-03T15:15:27.698Z",
    "dateReserved": "2026-01-13T15:37:46.018Z",
    "dateUpdated": "2026-05-11T22:07:00.396Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-31483 (GCVE-0-2026-31483)

Vulnerability from cvelistv5 – Published: 2026-04-22 13:54 – Updated: 2026-05-11 22:09

Title

s390/syscalls: Add spectre boundary for syscall dispatch table

Summary

In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is directly controlled by userspace, but does not have an array_index_nospec() boundary to prevent access past the syscall function pointer tables.

Severity

No CVSS data available.

Assigner

Linux mitre root

References

7 references

URL	Tags
https://git.kernel.org/stable/c/3c3b97064764899c3…
https://git.kernel.org/stable/c/1cb9c7bc9025c6375…
https://git.kernel.org/stable/c/7a5260fbc6e79a159…
https://git.kernel.org/stable/c/f8c444b918d639e1f…
https://git.kernel.org/stable/c/87776f02449e3bded…
https://git.kernel.org/stable/c/4d05dd18d867d58c6…
https://git.kernel.org/stable/c/48b8814e25d073dd8…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 56e62a73702836017564eaacd5212e4d0fa1c01d , < 3c3b97064764899c39a0abbd35a6caa031e70333 (git) Affected: 56e62a73702836017564eaacd5212e4d0fa1c01d , < 1cb9c7bc9025c637564fabc7fcc3c9343949e310 (git) Affected: 56e62a73702836017564eaacd5212e4d0fa1c01d , < 7a5260fbc6e79a1595328ec5c6aa3f937504a1f0 (git) Affected: 56e62a73702836017564eaacd5212e4d0fa1c01d , < f8c444b918d639e1f9a621ee20fe481c1d10dfc4 (git) Affected: 56e62a73702836017564eaacd5212e4d0fa1c01d , < 87776f02449e3bded95b2ccbd6b012e9ae64e6f3 (git) Affected: 56e62a73702836017564eaacd5212e4d0fa1c01d , < 4d05dd18d867d58c6952a3bc260d244899da7256 (git) Affected: 56e62a73702836017564eaacd5212e4d0fa1c01d , < 48b8814e25d073dd84daf990a879a820bad2bcbd (git)
Linux	Linux	Affected: 5.12 Unaffected: 0 , < 5.12 (semver) Unaffected: 5.15.203 , ≤ 5.15.* (semver) Unaffected: 6.1.168 , ≤ 6.1.* (semver) Unaffected: 6.6.131 , ≤ 6.6.* (semver) Unaffected: 6.12.80 , ≤ 6.12.* (semver) Unaffected: 6.18.21 , ≤ 6.18.* (semver) Unaffected: 6.19.11 , ≤ 6.19.* (semver) Unaffected: 7.0 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/s390/kernel/syscall.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3c3b97064764899c39a0abbd35a6caa031e70333",
              "status": "affected",
              "version": "56e62a73702836017564eaacd5212e4d0fa1c01d",
              "versionType": "git"
            },
            {
              "lessThan": "1cb9c7bc9025c637564fabc7fcc3c9343949e310",
              "status": "affected",
              "version": "56e62a73702836017564eaacd5212e4d0fa1c01d",
              "versionType": "git"
            },
            {
              "lessThan": "7a5260fbc6e79a1595328ec5c6aa3f937504a1f0",
              "status": "affected",
              "version": "56e62a73702836017564eaacd5212e4d0fa1c01d",
              "versionType": "git"
            },
            {
              "lessThan": "f8c444b918d639e1f9a621ee20fe481c1d10dfc4",
              "status": "affected",
              "version": "56e62a73702836017564eaacd5212e4d0fa1c01d",
              "versionType": "git"
            },
            {
              "lessThan": "87776f02449e3bded95b2ccbd6b012e9ae64e6f3",
              "status": "affected",
              "version": "56e62a73702836017564eaacd5212e4d0fa1c01d",
              "versionType": "git"
            },
            {
              "lessThan": "4d05dd18d867d58c6952a3bc260d244899da7256",
              "status": "affected",
              "version": "56e62a73702836017564eaacd5212e4d0fa1c01d",
              "versionType": "git"
            },
            {
              "lessThan": "48b8814e25d073dd84daf990a879a820bad2bcbd",
              "status": "affected",
              "version": "56e62a73702836017564eaacd5212e4d0fa1c01d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/s390/kernel/syscall.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "lessThan": "5.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.131",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.80",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.21",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.168",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.131",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.80",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.21",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.11",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/syscalls: Add spectre boundary for syscall dispatch table\n\nThe s390 syscall number is directly controlled by userspace, but does\nnot have an array_index_nospec() boundary to prevent access past the\nsyscall function pointer tables."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T22:09:36.271Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/3c3b97064764899c39a0abbd35a6caa031e70333"
        },
        {
          "url": "https://git.kernel.org/stable/c/1cb9c7bc9025c637564fabc7fcc3c9343949e310"
        },
        {
          "url": "https://git.kernel.org/stable/c/7a5260fbc6e79a1595328ec5c6aa3f937504a1f0"
        },
        {
          "url": "https://git.kernel.org/stable/c/f8c444b918d639e1f9a621ee20fe481c1d10dfc4"
        },
        {
          "url": "https://git.kernel.org/stable/c/87776f02449e3bded95b2ccbd6b012e9ae64e6f3"
        },
        {
          "url": "https://git.kernel.org/stable/c/4d05dd18d867d58c6952a3bc260d244899da7256"
        },
        {
          "url": "https://git.kernel.org/stable/c/48b8814e25d073dd84daf990a879a820bad2bcbd"
        }
      ],
      "title": "s390/syscalls: Add spectre boundary for syscall dispatch table",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-31483",
    "datePublished": "2026-04-22T13:54:09.561Z",
    "dateReserved": "2026-03-09T15:48:24.101Z",
    "dateUpdated": "2026-05-11T22:09:36.271Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43116 (GCVE-0-2026-43116)

Vulnerability from cvelistv5 – Published: 2026-05-06 07:40 – Updated: 2026-09-08 08:48

Title

netfilter: ctnetlink: ensure safe access to master conntrack

Summary

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ensure safe access to master conntrack Holding reference on the expectation is not sufficient, the master conntrack object can just go away, making exp->master invalid. To access exp->master safely: - Grab the nf_conntrack_expect_lock, this gets serialized with clean_from_lists() which also holds this lock when the master conntrack goes away. - Hold reference on master conntrack via nf_conntrack_find_get(). Not so easy since the master tuple to look up for the master conntrack is not available in the existing problematic paths. This patch goes for extending the nf_conntrack_expect_lock section to address this issue for simplicity, in the cases that are described below this is just slightly extending the lock section. The add expectation command already holds a reference to the master conntrack from ctnetlink_create_expect(). However, the delete expectation command needs to grab the spinlock before looking up for the expectation. Expand the existing spinlock section to address this to cover the expectation lookup. Note that, the nf_ct_expect_iterate_net() calls already grabs the spinlock while iterating over the expectation table, which is correct. The get expectation command needs to grab the spinlock to ensure master conntrack does not go away. This also expands the existing spinlock section to cover the expectation lookup too. I needed to move the netlink skb allocation out of the spinlock to keep it GFP_KERNEL. For the expectation events, the IPEXP_DESTROY event is already delivered under the spinlock, just move the delivery of IPEXP_NEW under the spinlock too because the master conntrack event cache is reached through exp->master. While at it, add lockdep notations to help identify what codepaths need to grab the spinlock.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux mitre root

References

7 references

URL	Tags
https://git.kernel.org/stable/c/9e1196d27ef496f40…
https://git.kernel.org/stable/c/5e1c1d22268ae710c…
https://git.kernel.org/stable/c/d52fa1fa7440676b8…
https://git.kernel.org/stable/c/f338ced0473849c9f…
https://git.kernel.org/stable/c/497f99b26fffdc563…
https://git.kernel.org/stable/c/bffcaad9afdfe45d7…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

5 products

Vendor	Product	Version
Linux	Linux	Affected: c1d10adb4a521de5760112853f42aaeefcec96eb , < 9e1196d27ef496f404c76f7a9d03761142d991c4 (git) Affected: c1d10adb4a521de5760112853f42aaeefcec96eb , < 5e1c1d22268ae710c238342c8030c21daf298168 (git) Affected: c1d10adb4a521de5760112853f42aaeefcec96eb , < d52fa1fa7440676b8c238037a050ab008c22737f (git) Affected: c1d10adb4a521de5760112853f42aaeefcec96eb , < f338ced0473849c9f6ed0b77ca99f1aab5826787 (git) Affected: c1d10adb4a521de5760112853f42aaeefcec96eb , < 497f99b26fffdc5635706d1b4811f1ed8ee21a5b (git) Affected: c1d10adb4a521de5760112853f42aaeefcec96eb , < bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5 (git)
Linux	Linux	Affected: 2.6.16 Unaffected: 0 , < 2.6.16 (semver) Unaffected: 6.1.176 , ≤ 6.1.* (semver) Unaffected: 6.6.143 , ≤ 6.6.* (semver) Unaffected: 6.12.94 , ≤ 6.12.* (semver) Unaffected: 6.18.24 , ≤ 6.18.* (semver) Unaffected: 6.19.14 , ≤ 6.19.* (semver) Unaffected: 7.0 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T08:48:49.019Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/net/netfilter/nf_conntrack_core.h",
            "net/netfilter/nf_conntrack_ecache.c",
            "net/netfilter/nf_conntrack_expect.c",
            "net/netfilter/nf_conntrack_netlink.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9e1196d27ef496f404c76f7a9d03761142d991c4",
              "status": "affected",
              "version": "c1d10adb4a521de5760112853f42aaeefcec96eb",
              "versionType": "git"
            },
            {
              "lessThan": "5e1c1d22268ae710c238342c8030c21daf298168",
              "status": "affected",
              "version": "c1d10adb4a521de5760112853f42aaeefcec96eb",
              "versionType": "git"
            },
            {
              "lessThan": "d52fa1fa7440676b8c238037a050ab008c22737f",
              "status": "affected",
              "version": "c1d10adb4a521de5760112853f42aaeefcec96eb",
              "versionType": "git"
            },
            {
              "lessThan": "f338ced0473849c9f6ed0b77ca99f1aab5826787",
              "status": "affected",
              "version": "c1d10adb4a521de5760112853f42aaeefcec96eb",
              "versionType": "git"
            },
            {
              "lessThan": "497f99b26fffdc5635706d1b4811f1ed8ee21a5b",
              "status": "affected",
              "version": "c1d10adb4a521de5760112853f42aaeefcec96eb",
              "versionType": "git"
            },
            {
              "lessThan": "bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5",
              "status": "affected",
              "version": "c1d10adb4a521de5760112853f42aaeefcec96eb",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "include/net/netfilter/nf_conntrack_core.h",
            "net/netfilter/nf_conntrack_ecache.c",
            "net/netfilter/nf_conntrack_expect.c",
            "net/netfilter/nf_conntrack_netlink.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.16"
            },
            {
              "lessThan": "2.6.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.143",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.94",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.24",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.143",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.94",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.24",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.14",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ctnetlink: ensure safe access to master conntrack\n\nHolding reference on the expectation is not sufficient, the master\nconntrack object can just go away, making exp-\u003emaster invalid.\n\nTo access exp-\u003emaster safely:\n\n- Grab the nf_conntrack_expect_lock, this gets serialized with\n  clean_from_lists() which also holds this lock when the master\n  conntrack goes away.\n\n- Hold reference on master conntrack via nf_conntrack_find_get().\n  Not so easy since the master tuple to look up for the master conntrack\n  is not available in the existing problematic paths.\n\nThis patch goes for extending the nf_conntrack_expect_lock section\nto address this issue for simplicity, in the cases that are described\nbelow this is just slightly extending the lock section.\n\nThe add expectation command already holds a reference to the master\nconntrack from ctnetlink_create_expect().\n\nHowever, the delete expectation command needs to grab the spinlock\nbefore looking up for the expectation. Expand the existing spinlock\nsection to address this to cover the expectation lookup. Note that,\nthe nf_ct_expect_iterate_net() calls already grabs the spinlock while\niterating over the expectation table, which is correct.\n\nThe get expectation command needs to grab the spinlock to ensure master\nconntrack does not go away. This also expands the existing spinlock\nsection to cover the expectation lookup too. I needed to move the\nnetlink skb allocation out of the spinlock to keep it GFP_KERNEL.\n\nFor the expectation events, the IPEXP_DESTROY event is already delivered\nunder the spinlock, just move the delivery of IPEXP_NEW under the\nspinlock too because the master conntrack event cache is reached through\nexp-\u003emaster.\n\nWhile at it, add lockdep notations to help identify what codepaths need\nto grab the spinlock."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable ctnetlink expectation operations are reached through NETLINK_NETFILTER messages from local userspace, not directly by remote packets.\nAC:L - The race is between attacker-driven ctnetlink expectation lookup/dump/delete and attacker-driven master conntrack deletion or timeout, so the attacker can create and retry both sides.\nPR:L - nfnetlink requires CAP_NET_ADMIN in the target network namespace, and an unprivileged local user can reasonably obtain that via a user plus network namespace on affected deployments.\nUI:N - No victim action is required after the attacker can send the netlink requests.\nS:U - This is a kernel memory safety issue within the same host security authority and does not cross a VM, IOMMU, or similar scope boundary.\nC:H - The bug is a use-after-free of the master struct nf_conn reachable from a retained expectation, and kernel UAFs can be leveraged for disclosure of sensitive kernel memory.\nI:H - The stale master pointer is kernel heap memory corruption/use-after-free, which is defensibly exploitable for control-flow or data modification with heap grooming.\nA:H - Even without full exploitation, dereferencing the freed master conntrack can trigger a kernel oops or panic."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:26:02.836Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9e1196d27ef496f404c76f7a9d03761142d991c4"
        },
        {
          "url": "https://git.kernel.org/stable/c/5e1c1d22268ae710c238342c8030c21daf298168"
        },
        {
          "url": "https://git.kernel.org/stable/c/d52fa1fa7440676b8c238037a050ab008c22737f"
        },
        {
          "url": "https://git.kernel.org/stable/c/f338ced0473849c9f6ed0b77ca99f1aab5826787"
        },
        {
          "url": "https://git.kernel.org/stable/c/497f99b26fffdc5635706d1b4811f1ed8ee21a5b"
        },
        {
          "url": "https://git.kernel.org/stable/c/bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5"
        }
      ],
      "title": "netfilter: ctnetlink: ensure safe access to master conntrack",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43116",
    "datePublished": "2026-05-06T07:40:41.185Z",
    "dateReserved": "2026-05-01T14:12:55.986Z",
    "dateUpdated": "2026-09-08T08:48:49.019Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43125 (GCVE-0-2026-43125)

Vulnerability from cvelistv5 – Published: 2026-05-06 11:27 – Updated: 2026-08-25 12:05

Title

dlm: validate length in dlm_search_rsb_tree

Summary

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-130 - Improper Handling of Length Parameter Inconsistency

Assigner

Linux mitre root

References

25 references

URL	Tags
https://git.kernel.org/stable/c/67288113c5e6cf9e6…
https://git.kernel.org/stable/c/082083c9fbd99422a…
https://git.kernel.org/stable/c/5f053a2e7209d326c…
https://git.kernel.org/stable/c/080e5563f878c64e6…
https://access.redhat.com/security/cve/CVE-2026-43125	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2467234	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:35844	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41236	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34095	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36767	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34094	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25121	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59091	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33899	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35863	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55837	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56224	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56225	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55763	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25120	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33900	vendor-advisoryx_refsource_REDHAT

Impacted products

23 products

Vendor	Product	Version
Linux	Linux	Affected: 7210cb7a72a22303cdb225bd1aea28697a17bbae , < 67288113c5e6cf9e659b4065c0ed6f16100e0c71 (git) Affected: 7210cb7a72a22303cdb225bd1aea28697a17bbae , < 082083c9fbd99422a0370fe2102144a231c9f5d6 (git) Affected: 7210cb7a72a22303cdb225bd1aea28697a17bbae , < 5f053a2e7209d326cbbc07738fa6d6893d307438 (git) Affected: 7210cb7a72a22303cdb225bd1aea28697a17bbae , < 080e5563f878c64e697b89e7439d730d0daad882 (git)
Linux	Linux	Affected: 3.4 Unaffected: 0 , < 3.4 (semver) Unaffected: 6.12.75 , ≤ 6.12.* (semver) Unaffected: 6.18.16 , ≤ 6.18.* (semver) Unaffected: 6.19.6 , ≤ 6.19.* (semver) Unaffected: 7.0 , ≤ * (original_commit_for_fix)
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:3.10.0-1160.155.1.rt56.1307.el7 , < * (rpm) cpe:/a:redhat:rhel_extras_rt_els:7
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:3.10.0-1160.154.1.el7 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.132.1.rt7.473.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::nfv
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.132.1.el8_10 , < * (rpm) cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:4.18.0-372.198.1.el8_6 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 0:4.18.0-372.198.1.el8_6 , < * (rpm) cpe:/o:redhat:rhel_eus_long_life:8.6
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:4.18.0-477.150.1.el8_8 , < * (rpm) cpe:/o:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:4.18.0-477.150.1.el8_8 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	cpe:/o:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-687.15.1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:5.14.0-284.178.1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:5.14.0-284.178.1.rt14.463.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::nfv
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	cpe:/o:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:5.14.0-427.136.1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	cpe:/o:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:5.14.0-570.125.1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	cpe:/o:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_extras_rt_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.10.0-1160.155.1.rt56.1307.el7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.10.0-1160.154.1.el7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8::nfv"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-553.132.1.rt7.473.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-553.132.1.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_aus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-372.198.1.el8_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_eus_long_life:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-372.198.1.el8_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-477.150.1.el8_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-477.150.1.el8_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9",
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-687.15.1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-284.178.1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2::nfv"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-284.178.1.rt14.463.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-427.136.1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-570.125.1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unknown",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-06T00:00:00.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the Linux kernel\u0027s Distributed Lock Manager (dlm) module. An attacker could send specially crafted network messages with an oversized length parameter to the dlm_dump_rsb_name() function. This lack of validation can lead to an out-of-bounds write in the dlm_search_rsb_tree() function, potentially causing a buffer overflow. This vulnerability could allow for denial of service or, in some cases, arbitrary code execution."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-130",
                "description": "Improper Handling of Length Parameter Inconsistency",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T12:05:44.813Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-43125"
          },
          {
            "name": "RHBZ#2467234",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467234"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43125.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35844"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41236"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34095"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36767"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34094"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25217"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25121"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55762"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59091"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33899"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35863"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55761"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55837"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56224"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56225"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55763"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25120"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33900"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:35844: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41236: Red Hat Enterprise Linux for Real Time (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34095: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36767: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux BaseOS E4S (v.9.4), Red Hat Enterprise Linux Real Time E4S (v.9.4), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34094: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25217: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25121: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55762: Red Hat Enterprise Linux BaseOS (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59091: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33899: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35863: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55761: Red Hat Enterprise Linux BaseOS E4S (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55837: Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56224: Red Hat Enterprise Linux BaseOS E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56225: Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55763: Red Hat Enterprise Linux BaseOS (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25120: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33900: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-06T00:00:00.000Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-06T00:00:00.000Z",
            "value": "Made public."
          }
        ],
        "title": "kernel: dlm: validate length in dlm_search_rsb_tree",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/dlm/lock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "67288113c5e6cf9e659b4065c0ed6f16100e0c71",
              "status": "affected",
              "version": "7210cb7a72a22303cdb225bd1aea28697a17bbae",
              "versionType": "git"
            },
            {
              "lessThan": "082083c9fbd99422a0370fe2102144a231c9f5d6",
              "status": "affected",
              "version": "7210cb7a72a22303cdb225bd1aea28697a17bbae",
              "versionType": "git"
            },
            {
              "lessThan": "5f053a2e7209d326cbbc07738fa6d6893d307438",
              "status": "affected",
              "version": "7210cb7a72a22303cdb225bd1aea28697a17bbae",
              "versionType": "git"
            },
            {
              "lessThan": "080e5563f878c64e697b89e7439d730d0daad882",
              "status": "affected",
              "version": "7210cb7a72a22303cdb225bd1aea28697a17bbae",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/dlm/lock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.4"
            },
            {
              "lessThan": "3.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.75",
                  "versionStartIncluding": "3.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.16",
                  "versionStartIncluding": "3.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.6",
                  "versionStartIncluding": "3.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "3.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndlm: validate length in dlm_search_rsb_tree\n\nThe len parameter in dlm_dump_rsb_name() is not validated and comes\nfrom network messages. When it exceeds DLM_RESNAME_MAXLEN, it can\ncause out-of-bounds write in dlm_search_rsb_tree().\n\nAdd length validation to prevent potential buffer overflow."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The vulnerable path is reached by DLM recovery messages received over the kernel DLM TCP/SCTP lowcomms transport from a remote cluster peer. Although the peer address must match configured cluster membership, the bug is triggered by network protocol data delivered to the target kernel.\nAC:L - A remote peer that can send DLM recovery traffic controls the malformed RCOM_LOOKUP packet, including the special debug rc_id and oversized length/name payload. The recovery-state gate is a normal DLM condition that a participating peer can plausibly induce or target, so exploitation does not depend on conditions outside attacker control.\nPR:N - The vulnerable receive path does not require credentials or privileges on the target system before parsing the packet. Cluster peer/source-address admission is not a privilege on the vulnerable host, and there is no DLM authentication check before the oversized name reaches the copy.\nUI:N - No victim user action is required once the target DLM lockspace is active and receiving cluster traffic. The attacker sends the malformed recovery message directly.\nS:U - The impact is compromise or crash of the target kernel within the same security authority. This is not a VM escape, IOMMU bypass, or other cross-scope boundary.\nC:H - The bug is a network-controlled stack buffer overflow in the kernel, copying up to socket-buffer-sized attacker data into a 64-byte resource-name key. Such memory corruption is defensibly exploitable for kernel information disclosure as part of code execution or memory disclosure primitives.\nI:H - The oversized memcpy can corrupt the kernel stack, including control data, from attacker-controlled network bytes. This supports arbitrary kernel memory modification or code execution in the highest reasonable scenario.\nA:H - Even without reliable code execution, the stack overflow can corrupt kernel control state and readily crash or panic the system. The malformed packet can be sent remotely whenever the vulnerable DLM receive path is reachable."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:26:06.027Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/67288113c5e6cf9e659b4065c0ed6f16100e0c71"
        },
        {
          "url": "https://git.kernel.org/stable/c/082083c9fbd99422a0370fe2102144a231c9f5d6"
        },
        {
          "url": "https://git.kernel.org/stable/c/5f053a2e7209d326cbbc07738fa6d6893d307438"
        },
        {
          "url": "https://git.kernel.org/stable/c/080e5563f878c64e697b89e7439d730d0daad882"
        }
      ],
      "title": "dlm: validate length in dlm_search_rsb_tree",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43125",
    "datePublished": "2026-05-06T11:27:10.903Z",
    "dateReserved": "2026-05-01T14:12:55.988Z",
    "dateUpdated": "2026-08-25T12:05:44.813Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2026:4282-1

CVE-2024-35973 (GCVE-0-2024-35973)

CVE-2025-39964 (GCVE-0-2025-39964)

CVE-2025-40022 (GCVE-0-2025-40022)

CVE-2025-40277 (GCVE-0-2025-40277)

CVE-2025-68214 (GCVE-0-2025-68214)

CVE-2026-23003 (GCVE-0-2026-23003)

CVE-2026-23443 (GCVE-0-2026-23443)

CVE-2026-31483 (GCVE-0-2026-31483)

CVE-2026-43116 (GCVE-0-2026-43116)

CVE-2026-43125 (GCVE-0-2026-43125)

Tags

Sightings

Nomenclature

Related by attack behaviour