SUSE-SU-2026:4639-1
Vulnerability from csaf_suse - Published: 2026-10-13 11:51 - Updated: 2026-10-14 10:26Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch:
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
- CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836).
- CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535).
- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).
- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).
- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).
- CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766).
- CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493).
- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).
- CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310).
- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).
- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).
- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).
- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).
- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).
The following non security issue was fixed:
- Disable BATMAN in supported.conf
- Disable CONFIG_BATMAN_ADV (jsc#PED-16892)
- Disable CONFIG_CAN (jsc#PED-17000)
Patchnames: SUSE-2026-4639,SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4639
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
8.1 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
8.1 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
7.8 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
8.1 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
7.4 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
7.5 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
8.2 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2026-64422
Threats
Impact
important
References
104 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836).\n- CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n\nThe following non security issue was fixed:\n\n- Disable BATMAN in supported.conf \n- Disable CONFIG_BATMAN_ADV (jsc#PED-16892)\n- Disable CONFIG_CAN (jsc#PED-17000)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-4639,SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4639",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4639-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:4639-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264639-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:4639-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264639-1/"
},
{
"category": "self",
"summary": "SUSE Bug 1273290",
"url": "https://bugzilla.suse.com/1273290"
},
{
"category": "self",
"summary": "SUSE Bug 1274037",
"url": "https://bugzilla.suse.com/1274037"
},
{
"category": "self",
"summary": "SUSE Bug 1274836",
"url": "https://bugzilla.suse.com/1274836"
},
{
"category": "self",
"summary": "SUSE Bug 1275535",
"url": "https://bugzilla.suse.com/1275535"
},
{
"category": "self",
"summary": "SUSE Bug 1275696",
"url": "https://bugzilla.suse.com/1275696"
},
{
"category": "self",
"summary": "SUSE Bug 1275972",
"url": "https://bugzilla.suse.com/1275972"
},
{
"category": "self",
"summary": "SUSE Bug 1275985",
"url": "https://bugzilla.suse.com/1275985"
},
{
"category": "self",
"summary": "SUSE Bug 1276007",
"url": "https://bugzilla.suse.com/1276007"
},
{
"category": "self",
"summary": "SUSE Bug 1276381",
"url": "https://bugzilla.suse.com/1276381"
},
{
"category": "self",
"summary": "SUSE Bug 1277493",
"url": "https://bugzilla.suse.com/1277493"
},
{
"category": "self",
"summary": "SUSE Bug 1277766",
"url": "https://bugzilla.suse.com/1277766"
},
{
"category": "self",
"summary": "SUSE Bug 1277908",
"url": "https://bugzilla.suse.com/1277908"
},
{
"category": "self",
"summary": "SUSE Bug 1278191",
"url": "https://bugzilla.suse.com/1278191"
},
{
"category": "self",
"summary": "SUSE Bug 1278253",
"url": "https://bugzilla.suse.com/1278253"
},
{
"category": "self",
"summary": "SUSE Bug 1278310",
"url": "https://bugzilla.suse.com/1278310"
},
{
"category": "self",
"summary": "SUSE Bug 1278315",
"url": "https://bugzilla.suse.com/1278315"
},
{
"category": "self",
"summary": "SUSE Bug 1279619",
"url": "https://bugzilla.suse.com/1279619"
},
{
"category": "self",
"summary": "SUSE Bug 1280786",
"url": "https://bugzilla.suse.com/1280786"
},
{
"category": "self",
"summary": "SUSE Bug 1281397",
"url": "https://bugzilla.suse.com/1281397"
},
{
"category": "self",
"summary": "SUSE Bug 1281546",
"url": "https://bugzilla.suse.com/1281546"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64422 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64580 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64580/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68376 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68376/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-72083 page",
"url": "https://www.suse.com/security/cve/CVE-2026-72083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-72322 page",
"url": "https://www.suse.com/security/cve/CVE-2026-72322/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-72323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-72323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-72348 page",
"url": "https://www.suse.com/security/cve/CVE-2026-72348/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-72398 page",
"url": "https://www.suse.com/security/cve/CVE-2026-72398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74388 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74556 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74588 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74597 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74630 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74641 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74743 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74752 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80785 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-89479 page",
"url": "https://www.suse.com/security/cve/CVE-2026-89479/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-90088 page",
"url": "https://www.suse.com/security/cve/CVE-2026-90088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-90104 page",
"url": "https://www.suse.com/security/cve/CVE-2026-90104/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2026-10-14T10:26:51Z",
"generator": {
"date": "2026-10-13T11:51:49Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:4639-1",
"initial_release_date": "2026-10-13T11:51:49Z",
"revision_history": [
{
"date": "2026-10-13T11:51:49Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-14T10:26:51Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-debug-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-debug-0:3.0.101-108.223.1.i586",
"product_id": "kernel-debug-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-debug-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-base-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-debug-base-0:3.0.101-108.223.1.i586",
"product_id": "kernel-debug-base-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-base@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-debug-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-debug-devel-0:3.0.101-108.223.1.i586",
"product_id": "kernel-debug-devel-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-debug-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-extra-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-debug-extra-0:3.0.101-108.223.1.i586",
"product_id": "kernel-debug-extra-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-extra@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-debug-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-hmac-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-debug-hmac-0:3.0.101-108.223.1.i586",
"product_id": "kernel-debug-hmac-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-hmac@3.0.101-108.223.1?arch=i586"
}
}
},
{
"category": "product_version",
"name": "kernel-default-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-default-0:3.0.101-108.223.1.i586",
"product_id": "kernel-default-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-default@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-default-base-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-default-base-0:3.0.101-108.223.1.i586",
"product_id": "kernel-default-base-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-default-base@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-default-base-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-default-devel-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-default-devel-0:3.0.101-108.223.1.i586",
"product_id": "kernel-default-devel-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-default-devel@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-default-extra-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-default-extra-0:3.0.101-108.223.1.i586",
"product_id": "kernel-default-extra-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-default-extra@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-default-hmac-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-default-hmac-0:3.0.101-108.223.1.i586",
"product_id": "kernel-default-hmac-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-default-hmac@3.0.101-108.223.1?arch=i586"
}
}
},
{
"category": "product_version",
"name": "kernel-ec2-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-ec2-0:3.0.101-108.223.1.i586",
"product_id": "kernel-ec2-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-ec2@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-ec2-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-ec2-base-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-ec2-base-0:3.0.101-108.223.1.i586",
"product_id": "kernel-ec2-base-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-ec2-base@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-ec2-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-ec2-devel-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-ec2-devel-0:3.0.101-108.223.1.i586",
"product_id": "kernel-ec2-devel-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-ec2-devel@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-ec2-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-ec2-extra-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-ec2-extra-0:3.0.101-108.223.1.i586",
"product_id": "kernel-ec2-extra-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-ec2-extra@3.0.101-108.223.1?arch=i586"
}
}
},
{
"category": "product_version",
"name": "kernel-ec2-hmac-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-ec2-hmac-0:3.0.101-108.223.1.i586",
"product_id": "kernel-ec2-hmac-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-ec2-hmac@3.0.101-108.223.1?arch=i586"
}
}
},
{
"category": "product_version",
"name": "kernel-pae-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-pae-0:3.0.101-108.223.1.i586",
"product_id": "kernel-pae-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-pae@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-pae-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-pae-base-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-pae-base-0:3.0.101-108.223.1.i586",
"product_id": "kernel-pae-base-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-pae-base@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-pae-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-pae-devel-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-pae-devel-0:3.0.101-108.223.1.i586",
"product_id": "kernel-pae-devel-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-pae-devel@3.0.101-108.223.1?arch=i586\u0026upstream=ERROR_UNKNOWN-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-pae-extra-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-pae-extra-0:3.0.101-108.223.1.i586",
"product_id": "kernel-pae-extra-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-pae-extra@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-pae-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-pae-hmac-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-pae-hmac-0:3.0.101-108.223.1.i586",
"product_id": "kernel-pae-hmac-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-pae-hmac@3.0.101-108.223.1?arch=i586"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-source-0:3.0.101-108.223.1.i586",
"product_id": "kernel-source-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.i586",
"product_id": "kernel-source-vanilla-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-syms-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-syms-0:3.0.101-108.223.1.i586",
"product_id": "kernel-syms-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-syms@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-trace-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-trace-0:3.0.101-108.223.1.i586",
"product_id": "kernel-trace-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-trace@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-trace-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-trace-base-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-trace-base-0:3.0.101-108.223.1.i586",
"product_id": "kernel-trace-base-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-trace-base@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-trace-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-trace-devel-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-trace-devel-0:3.0.101-108.223.1.i586",
"product_id": "kernel-trace-devel-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-trace-devel@3.0.101-108.223.1?arch=i586\u0026upstream=ERROR_UNKNOWN-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-trace-extra-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-trace-extra-0:3.0.101-108.223.1.i586",
"product_id": "kernel-trace-extra-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-trace-extra@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-trace-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-trace-hmac-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-trace-hmac-0:3.0.101-108.223.1.i586",
"product_id": "kernel-trace-hmac-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-trace-hmac@3.0.101-108.223.1?arch=i586"
}
}
},
{
"category": "product_version",
"name": "kernel-vanilla-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-vanilla-0:3.0.101-108.223.1.i586",
"product_id": "kernel-vanilla-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-vanilla@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-vanilla-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-vanilla-base-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-vanilla-base-0:3.0.101-108.223.1.i586",
"product_id": "kernel-vanilla-base-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-vanilla-base@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-vanilla-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-vanilla-devel-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-vanilla-devel-0:3.0.101-108.223.1.i586",
"product_id": "kernel-vanilla-devel-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-vanilla-devel@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-vanilla-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-vanilla-hmac-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-vanilla-hmac-0:3.0.101-108.223.1.i586",
"product_id": "kernel-vanilla-hmac-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-vanilla-hmac@3.0.101-108.223.1?arch=i586"
}
}
},
{
"category": "product_version",
"name": "kernel-xen-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-xen-0:3.0.101-108.223.1.i586",
"product_id": "kernel-xen-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-xen@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-xen-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-xen-base-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-xen-base-0:3.0.101-108.223.1.i586",
"product_id": "kernel-xen-base-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-xen-base@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-xen-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-xen-devel-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-xen-devel-0:3.0.101-108.223.1.i586",
"product_id": "kernel-xen-devel-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-xen-devel@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-xen-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-xen-extra-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-xen-extra-0:3.0.101-108.223.1.i586",
"product_id": "kernel-xen-extra-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-xen-extra@3.0.101-108.223.1?arch=i586\u0026upstream=kernel-xen-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-xen-hmac-0:3.0.101-108.223.1.i586",
"product": {
"name": "kernel-xen-hmac-0:3.0.101-108.223.1.i586",
"product_id": "kernel-xen-hmac-0:3.0.101-108.223.1.i586",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-xen-hmac@3.0.101-108.223.1?arch=i586"
}
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-source-0:3.0.101-108.223.1.ia64",
"product": {
"name": "kernel-source-0:3.0.101-108.223.1.ia64",
"product_id": "kernel-source-0:3.0.101-108.223.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@3.0.101-108.223.1?arch=ia64\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.ia64",
"product": {
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.ia64",
"product_id": "kernel-source-vanilla-0:3.0.101-108.223.1.ia64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@3.0.101-108.223.1?arch=ia64\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-docs-0:3.0.101-108.223.1.noarch",
"product": {
"name": "kernel-docs-0:3.0.101-108.223.1.noarch",
"product_id": "kernel-docs-0:3.0.101-108.223.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-docs@3.0.101-108.223.1?arch=noarch\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-source-0:3.0.101-108.223.1.ppc64",
"product": {
"name": "kernel-source-0:3.0.101-108.223.1.ppc64",
"product_id": "kernel-source-0:3.0.101-108.223.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@3.0.101-108.223.1?arch=ppc64\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.ppc64",
"product": {
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.ppc64",
"product_id": "kernel-source-vanilla-0:3.0.101-108.223.1.ppc64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@3.0.101-108.223.1?arch=ppc64\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-source-0:3.0.101-108.223.1.s390",
"product": {
"name": "kernel-source-0:3.0.101-108.223.1.s390",
"product_id": "kernel-source-0:3.0.101-108.223.1.s390",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@3.0.101-108.223.1?arch=s390\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.s390",
"product": {
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.s390",
"product_id": "kernel-source-vanilla-0:3.0.101-108.223.1.s390",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@3.0.101-108.223.1?arch=s390\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-source-0:3.0.101-108.223.1.s390x",
"product": {
"name": "kernel-source-0:3.0.101-108.223.1.s390x",
"product_id": "kernel-source-0:3.0.101-108.223.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@3.0.101-108.223.1?arch=s390x\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.s390x",
"product": {
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.s390x",
"product_id": "kernel-source-vanilla-0:3.0.101-108.223.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@3.0.101-108.223.1?arch=s390x\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-debug-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-debug-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-debug-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-debug-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-base-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-debug-base-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-debug-base-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-base@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-debug-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-debug-devel-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-debug-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-extra-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-debug-extra-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-debug-extra-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-extra@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-debug-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-hmac-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-debug-hmac-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-debug-hmac-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-hmac@3.0.101-108.223.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-default-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-default-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-default-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-default@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-default-base-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-default-base-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-default-base-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-default-base@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-default-base-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-default-devel@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-default-extra-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-default-extra-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-default-extra-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-default-extra@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-default-hmac-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-default-hmac-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-default-hmac-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-default-hmac@3.0.101-108.223.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-ec2-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-ec2-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-ec2-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-ec2@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-ec2-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-ec2-base@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-ec2-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-ec2-devel@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-ec2-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-ec2-extra-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-ec2-extra-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-ec2-extra-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-ec2-extra@3.0.101-108.223.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-ec2-hmac-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-ec2-hmac-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-ec2-hmac-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-ec2-hmac@3.0.101-108.223.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-source-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-source-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-source-vanilla-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-source-vanilla-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-syms-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-syms-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-syms-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-syms@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-source-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-trace-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-trace-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-trace-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-trace@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-trace-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-trace-base@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-trace-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-trace-devel@3.0.101-108.223.1?arch=x86_64\u0026upstream=ERROR_UNKNOWN-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-trace-extra-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-trace-extra-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-trace-extra-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-trace-extra@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-trace-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-trace-hmac-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-trace-hmac-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-trace-hmac-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-trace-hmac@3.0.101-108.223.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-vanilla-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-vanilla-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-vanilla-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-vanilla@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-vanilla-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-vanilla-base-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-vanilla-base-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-vanilla-base-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-vanilla-base@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-vanilla-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-vanilla-devel-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-vanilla-devel-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-vanilla-devel-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-vanilla-devel@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-vanilla-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-vanilla-hmac-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-vanilla-hmac-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-vanilla-hmac-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-vanilla-hmac@3.0.101-108.223.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-xen-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-xen-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-xen-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-xen@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-xen-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-xen-base@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-xen-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-xen-devel-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-xen-devel-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-xen-devel-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-xen-devel@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-xen-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-xen-extra-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-xen-extra-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-xen-extra-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.0.101:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-xen-extra@3.0.101-108.223.1?arch=x86_64\u0026upstream=kernel-xen-0:3.0.101-108.223.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-xen-hmac-0:3.0.101-108.223.1.x86_64",
"product": {
"name": "kernel-xen-hmac-0:3.0.101-108.223.1.x86_64",
"product_id": "kernel-xen-hmac-0:3.0.101-108.223.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-xen-hmac@3.0.101-108.223.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss-extreme-core:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-default-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-default-base-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-docs-0:3.0.101-108.223.1.noarch as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch"
},
"product_reference": "kernel-docs-0:3.0.101-108.223.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-ec2-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-ec2-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-ec2-base-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-ec2-devel-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-source-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-syms-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-trace-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-base-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-trace-devel-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-xen-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-xen-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-xen-base-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-xen-devel-0:3.0.101-108.223.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
},
"product_reference": "kernel-xen-devel-0:3.0.101-108.223.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-64422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64422"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes\n\nReject invalid `net.ipv4.tcp_reordering` values before they reach TCP\nsocket state. The sysctl is stored as an `int` but copied into the\n`u32` `tp-\u003ereordering` field for new sockets, so negative writes wrap\nto large values.\n\nWith `tcp_mtu_probing=2`, the wrapped value can overflow the\n`tcp_mtu_probe()` size calculation and drive the MTU probing path into\nan out-of-bounds read. Route `tcp_reordering` writes through\n`proc_dointvec_minmax()` and require it to be at least 1. Also require\n`tcp_max_reordering` to be at least 1 so the configured maximum cannot\nbecome negative either.\n\nWhen registering the table for a non-init network namespace, relocate\n`extra2` pointers that refer into `init_net.ipv4` so the\n`tcp_reordering` upper bound follows that namespace\u0027s\n`tcp_max_reordering`.\n\nHarden `tcp_mtu_probe()` itself by computing `size_needed` as `u64`.\nThis keeps the send queue and window checks from being bypassed through\nsigned integer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64422",
"url": "https://www.suse.com/security/cve/CVE-2026-64422"
},
{
"category": "external",
"summary": "SUSE Bug 1273290 for CVE-2026-64422",
"url": "https://bugzilla.suse.com/1273290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "moderate"
}
],
"title": "CVE-2026-64422"
},
{
"cve": "CVE-2026-64580",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64580"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()\n\nOn the error path where in6_dev_get(dev) returns NULL, xfrm6_fill_dst()\nreleases the device reference with netdev_put() but leaves\nxdst-\u003eu.dst.dev set. dst_destroy() later calls netdev_put(dst-\u003edev)\nagain, so the same net_device reference is released twice, underflowing\nits refcount (ref_tracker WARNING + \"unregister_netdevice: waiting for\n\u003cdev\u003e to become free\").\n\nClear xdst-\u003eu.dst.dev after the netdev_put(), the same way the XFRM\ndevice-offload paths xfrm_dev_state_add() and xfrm_dev_policy_add() in\nnet/xfrm/xfrm_device.c NULL -\u003edev when releasing the reference on error.\n\n ref_tracker: reference already released.\n ref_tracker: allocated in:\n xfrm6_fill_dst (net/ipv6/xfrm6_policy.c:86)\n ...\n udpv6_sendmsg (net/ipv6/udp.c:1696)\n ...\n ref_tracker: freed in:\n xfrm6_fill_dst (net/ipv6/xfrm6_policy.c:90)\n ...\n WARNING: lib/ref_tracker.c:322 at ref_tracker_free+0x58b/0x780\n dst_destroy (net/core/dst.c:115)\n rcu_core\n handle_softirqs\n ...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64580",
"url": "https://www.suse.com/security/cve/CVE-2026-64580"
},
{
"category": "external",
"summary": "SUSE Bug 1274037 for CVE-2026-64580",
"url": "https://bugzilla.suse.com/1274037"
},
{
"category": "external",
"summary": "SUSE Bug 1274038 for CVE-2026-64580",
"url": "https://bugzilla.suse.com/1274038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-64580"
},
{
"cve": "CVE-2026-68376",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68376"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix auth_hmacs array size in struct sctp_cookie\n\nThe auth_hmacs array in struct sctp_cookie is supposed to store a complete\nSCTP_AUTH_HMAC_ALGO parameter, which consists of a struct sctp_paramhdr\nfollowed by N HMAC identifiers.\n\nHowever, the array size was calculated using an extra 2 bytes instead of\nsizeof(struct sctp_paramhdr), which is 4 bytes. When four HMAC identifiers\nare configured, the HMAC-ALGO parameter stored in the endpoint is larger\nthan the auth_hmacs buffer in the cookie.\n\nAs a result, sctp_association_init() copies beyond the end of auth_hmacs\nwhen initializing the association, corrupting the adjacent auth_chunks\nfield. This can lead to an invalid HMAC identifier being accepted and later\ncause an out-of-bounds read in sctp_auth_get_hmac().\n\nFix the array size calculation by including the full SCTP parameter header\nsize.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68376",
"url": "https://www.suse.com/security/cve/CVE-2026-68376"
},
{
"category": "external",
"summary": "SUSE Bug 1274836 for CVE-2026-68376",
"url": "https://bugzilla.suse.com/1274836"
},
{
"category": "external",
"summary": "SUSE Bug 1279854 for CVE-2026-68376",
"url": "https://bugzilla.suse.com/1279854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-68376"
},
{
"cve": "CVE-2026-72083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-72083"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE\n\ncore_scsi3_emulate_pro_register_and_move() maps the PERSISTENT RESERVE OUT\nparameter list with transport_kmap_data_sg() and parses the destination\nTransportID with target_parse_pr_out_transport_id(). For an iSCSI\nTransportID (FORMAT CODE 01b), iscsi_parse_pr_out_transport_id() returns\nthe ISID in iport_ptr as a raw pointer into that mapped buffer.\n\nThe function then unmaps the buffer with transport_kunmap_data_sg() before\ndereferencing iport_ptr in strcmp(), __core_scsi3_locate_pr_reg() and\ncore_scsi3_alloc_registration(). When the parameter list spans more than\none page (PARAMETER LIST LENGTH \u003e 4096), transport_kmap_data_sg() uses\nvmap() and transport_kunmap_data_sg() does vunmap(), so the kernel virtual\naddress backing iport_ptr is torn down and every subsequent dereference is\na use-after-free read of the unmapped region.\n\nKeep the parameter list mapped until iport_ptr is no longer needed: drop\nthe early transport_kunmap_data_sg() and unmap once on the success path,\nright before returning. The error paths already unmap through the existing\n\"if (buf) transport_kunmap_data_sg(cmd)\" at the out: label, which now runs\non every post-map error exit because buf is no longer cleared early. Only\nreads of the mapping happen while spinlocks are held; the map and unmap\ncalls remain outside any lock. The sibling caller\ncore_scsi3_decode_spec_i_port() already uses the buffer before unmapping it\nand is left unchanged.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-72083",
"url": "https://www.suse.com/security/cve/CVE-2026-72083"
},
{
"category": "external",
"summary": "SUSE Bug 1275535 for CVE-2026-72083",
"url": "https://bugzilla.suse.com/1275535"
},
{
"category": "external",
"summary": "SUSE Bug 1275536 for CVE-2026-72083",
"url": "https://bugzilla.suse.com/1275536"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-72083"
},
{
"cve": "CVE-2026-72322",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-72322"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: mcast: Fix potential UAF in MLD delayed work\n\nA race condition exists between device teardown and incoming MLD query\nprocessing, leading to a Use-After-Free in the MLD delayed work.\n\nDuring device destruction, the primary reference to inet6_dev is dropped,\nwhich can drop its refcount to 0. The actual freeing of inet6_dev memory\nis deferred via RCU.\n\nConcurrently, the packet receive path runs under RCU read lock and obtains\nthe inet6_dev pointer. Because the memory is RCU-protected, CPU-0 can\nsafely dereference inet6_dev even if its refcount has hit 0.\n\nHowever, if CPU-0 calls igmp6_event_query() and schedules delayed work, it\nattempts to acquire a reference using in6_dev_hold(). This increments the\nrefcount from 0 to 1, triggering a \"refcount_t: addition on 0\" warning.\nSince the inet6_dev memory is still scheduled to be freed after the RCU\ngrace period, the device is freed while the work is still scheduled.\nWhen the work runs, it accesses the freed memory, causing a kernel panic.\n\nFix this by using refcount_inc_not_zero() (via a new helper\nin6_dev_hold_safe()) to prevent acquiring a reference if the device is\nalready being destroyed. If the refcount is 0, we do not schedule the work.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-72322",
"url": "https://www.suse.com/security/cve/CVE-2026-72322"
},
{
"category": "external",
"summary": "SUSE Bug 1275972 for CVE-2026-72322",
"url": "https://bugzilla.suse.com/1275972"
},
{
"category": "external",
"summary": "SUSE Bug 1276284 for CVE-2026-72322",
"url": "https://bugzilla.suse.com/1276284"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-72322"
},
{
"cve": "CVE-2026-72323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-72323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: igmp: Fix potential UAF in igmp_gq_start_timer()\n\nA race condition exists between device teardown (inetdev_destroy) and\nincoming IGMP query processing (igmp_rcv), leading to a Use-After-Free\nin the IGMP timer callback.\n\nDuring device destruction, inetdev_destroy() drops the primary reference\nto in_device, which can drop its refcount to 0. The actual freeing of\nin_device memory is deferred via RCU (using call_rcu()).\n\nConcurrently, igmp_rcv() runs under RCU read lock and obtains the\nin_device pointer. Because the memory is RCU-protected, CPU-0 can safely\ndereference in_device even if its refcount has hit 0.\n\nHowever, if CPU-0 calls igmp_gq_start_timer() and re-arms the timer, it\nattempts to acquire a reference using in_dev_hold(). This increments the\nrefcount from 0 to 1, triggering a \"refcount_t: addition on 0\" warning.\nSince the in_device memory is still scheduled to be freed after the RCU\ngrace period (as the free callback does not check the refcount again),\nthe device is freed while the timer is still armed. When the timer\nexpires, it accesses the freed memory, causing a kernel panic.\n\nFix this by using refcount_inc_not_zero() (via a new helper\nin_dev_hold_safe()) to prevent acquiring a reference if the device is\nalready being destroyed. If the refcount is 0, we do not arm the timer.\n\nA similar issue in IPv6 MLD is fixed in a subsequent patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-72323",
"url": "https://www.suse.com/security/cve/CVE-2026-72323"
},
{
"category": "external",
"summary": "SUSE Bug 1275985 for CVE-2026-72323",
"url": "https://bugzilla.suse.com/1275985"
},
{
"category": "external",
"summary": "SUSE Bug 1275986 for CVE-2026-72323",
"url": "https://bugzilla.suse.com/1275986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-72323"
},
{
"cve": "CVE-2026-72348",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-72348"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop\n\nThe ah, hbh and rt matches check that the fixed extension header is\npresent, then use the header length field to derive the advertised\nextension header length for matching.\n\nFor the ah match, add the missing advertised-length check. For hbh\nand rt, update the existing advertised-length checks. In all three\ncases, set hotdrop to true before returning false when the advertised\nextension header length exceeds the available skb data.\n\nReturning false treats the packet as a rule mismatch. Set hotdrop to\ntrue and drop malformed packets so they cannot bypass rules intended\nto drop packets with these IPv6 extension headers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-72348",
"url": "https://www.suse.com/security/cve/CVE-2026-72348"
},
{
"category": "external",
"summary": "SUSE Bug 1276007 for CVE-2026-72348",
"url": "https://bugzilla.suse.com/1276007"
},
{
"category": "external",
"summary": "SUSE Bug 1276008 for CVE-2026-72348",
"url": "https://bugzilla.suse.com/1276008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "moderate"
}
],
"title": "CVE-2026-72348"
},
{
"cve": "CVE-2026-72398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-72398"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: add INIT verification after cookie unpacking\n\nIn SCTP handshake, the INIT chunk is initially processed by the server\nand embedded into the cookie carried in INIT-ACK. The client then\nreturns this cookie via COOKIE-ECHO, where the server unpacks it and\nreconstructs the original INIT chunk.\n\nWhen cookie authentication is enabled, the cookie contents are protected\nagainst tampering, so reusing the unpacked INIT without re-verification\nis safe.\n\nHowever, when cookie authentication is disabled, the reconstructed INIT\ncan no longer be trusted. In this case, the INIT must be explicitly\nvalidated after unpacking to avoid processing potentially tampered data.\n\nAdd sctp_verify_init() checks after cookie unpacking in COOKIE-ECHO\nprocessing paths (sctp_sf_do_5_1D_ce() and sctp_sf_do_5_2_4_dupcook())\nwhen cookie_auth_enable is disabled. On failure, the new association is\nfreed and the packet is discarded.\n\nAlso tighten cookie validation in sctp_unpack_cookie() by verifying the\nembedded chunk type is SCTP_CID_INIT before treating it as an INIT\nchunk.\n\nFinally, update sctp_verify_init() to validate parameter bounds using\nthe actual embedded INIT length instead of chunk-\u003echunk_end, since the\nINIT stored in COOKIE-ECHO may not span the entire chunk buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-72398",
"url": "https://www.suse.com/security/cve/CVE-2026-72398"
},
{
"category": "external",
"summary": "SUSE Bug 1276381 for CVE-2026-72398",
"url": "https://bugzilla.suse.com/1276381"
},
{
"category": "external",
"summary": "SUSE Bug 1276484 for CVE-2026-72398",
"url": "https://bugzilla.suse.com/1276484"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-72398"
},
{
"cve": "CVE-2026-74388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74388"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Fix UAF at handling events with embedded SysEx data\n\nThe OSS sequencer processes the input MIDI bytes into a sequencer\nevent to be dispatched later (in snd_seq_oss_midi_putc() called from\nsnd_seq_oss_process_event()). When it\u0027s a SysEx data, the event\nrecord contains data.ext.ptr pointer to the original SysEx bytes, and\nthe referred data is copied into the pool afterwards at dispatching.\nThe problem is that, if the sequencer port gets closed concurrently\nbefore the dispatch, the OSS sequencer core also releases the\nresources (in snd_seq_oss_midi_check_exit_port()), while the pending\nevent may hold a stale pointer, eventually leading to a UAF at a later\ndispatch.\n\nFortunately, there is already a refcounting mechanism (snd_use_lock_t)\nfor the OSS MIDI device access, and for addressing the issue above, we\njust need to extend the refcount until the event gets dispatched.\n\nThis patch extends snd_seq_oss_process_event() to give back the\nrefcount object, which is in turn released after calling the sequencer\ndispatcher with the given event in the caller side.\n\nAccording to the original report, KASAN report as below:\n\nKASAN slab-use-after-free in snd_seq_event_dup+0x40c/0x470\nRIP: 0033:0x7f2cb66a6340\nRead of size 6\nCall trace:\n dump_stack_lvl+0x73/0xb0 (?:?)\n print_report+0xd1/0x650 (?:?)\n srso_alias_return_thunk+0x5/0xfbef5 (?:?)\n __virt_addr_valid+0x1a7/0x340 (?:?)\n kasan_complete_mode_report_info+0x64/0x200 (?:?)\n kasan_report+0xf7/0x130 (?:?)\n snd_seq_event_dup+0x40c/0x470 (?:?)\n kasan_check_range+0x10c/0x1c0 (?:?)\n __asan_memcpy+0x27/0x70 (?:?)\n snd_seq_event_dup+0x9/0x470 (?:?)\n snd_seq_client_enqueue_event+0x139/0x240 (?:?)\n _raw_spin_unlock_irqrestore+0x4b/0x60 (?:?)\n snd_seq_kernel_client_enqueue+0x102/0x120 (?:?)\n snd_seq_oss_write+0x416/0x4e0 (?:?)\n apparmor_file_permission+0x20/0x30 (?:?)\n odev_write+0x3b/0x60 (?:?)\n vfs_write+0x1ce/0x850 (?:?)\n lock_release+0xc8/0x2a0 (?:?)\n __kasan_check_write+0x18/0x20 (?:?)\n __mutex_unlock_slowpath+0x129/0x510 (?:?)\n ksys_write+0xe1/0x180 (?:?)\n mutex_unlock+0x16/0x20 (?:?)\n odev_ioctl+0x65/0xc0 (?:?)\n __x64_sys_write+0x46/0x60 (?:?)\n x64_sys_call+0x7d/0x20d0 (?:?)\n do_syscall_64+0xc1/0x360 (arch/x86/entry/syscall_64.c:87)\n entry_SYSCALL_64_after_hwframe+0x77/0x7f (?:?)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74388",
"url": "https://www.suse.com/security/cve/CVE-2026-74388"
},
{
"category": "external",
"summary": "SUSE Bug 1278253 for CVE-2026-74388",
"url": "https://bugzilla.suse.com/1278253"
},
{
"category": "external",
"summary": "SUSE Bug 1278254 for CVE-2026-74388",
"url": "https://bugzilla.suse.com/1278254"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-74388"
},
{
"cve": "CVE-2026-74556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74556"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer\n\niscsi_tcp_hdr_dissect() receives the data segment of several PDU types\ninto the fixed-size conn-\u003edata buffer, which is allocated for\nISCSI_DEF_MAX_RECV_SEG_LEN (8192) bytes. For the LOGIN_RSP, TEXT_RSP,\nREJECT and ASYNC_EVENT opcodes the dissect path already rejects a PDU\nwhose DataSegmentLength exceeds that buffer.\n\nThe SCSI Command Response (ISCSI_OP_SCSI_CMD_RSP) path also copies its\ndata segment (sense/response data) into conn-\u003edata via\niscsi_tcp_data_recv_prep(), but it does so without the same check. The\nonly upstream bound on in.datalen is conn-\u003emax_recv_dlength, the\ninitiator\u0027s advertised MaxRecvDataSegmentLength, which is commonly\nnegotiated well above 8192 (open-iscsi defaults to 262144). A target\nthat returns a SCSI Response with a DataSegmentLength between 8193 and\nmax_recv_dlength therefore overflows the 8192-byte conn-\u003edata buffer.\n\nOnce the same bound applies, ISCSI_OP_SCSI_CMD_RSP is handled exactly\nlike those responses: bound the data segment, receive it into conn-\u003edata\nwhen present, and otherwise complete the PDU with no data. Fold the\nopcode into that case group rather than duplicating the check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74556",
"url": "https://www.suse.com/security/cve/CVE-2026-74556"
},
{
"category": "external",
"summary": "SUSE Bug 1275696 for CVE-2026-74556",
"url": "https://bugzilla.suse.com/1275696"
},
{
"category": "external",
"summary": "SUSE Bug 1275700 for CVE-2026-74556",
"url": "https://bugzilla.suse.com/1275700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-74556"
},
{
"cve": "CVE-2026-74588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74588"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: keep chunk-\u003etransport in step with the list it is queued on\n\n__sctp_outq_flush_rtx() moves a gap-acked chunk onto another transport\u0027s\ntransmitted list without updating chunk-\u003etransport:\n\n\tif (chunk-\u003etsn_gap_acked) {\n\t\tlist_move_tail(\u0026chunk-\u003etransmitted_list,\n\t\t\t \u0026transport-\u003etransmitted);\n\t\tcontinue;\n\t}\n\nThe chunk then sits on a live transport\u0027s list while chunk-\u003etransport still\nnames a different one. If that transport is removed - sctp_assoc_rm_peer()\nfrom an ASCONF Delete-IP - sctp_transport_free() RCU-frees it and the chunk\nis left with a dangling pointer. sctp_assoc_rm_peer() scrubs\npeer-\u003etransmitted and asoc-\u003eoutqueue.out_chunk_list, but the chunk is on\nneither.\n\nThe pointer is not followed while tsn_gap_acked is set. A SACK that\nreneges on the TSN clears the flag, and the next SACK reaches\n\n\ttchunk-\u003etransport-\u003eflight_size -= sctp_data_size(tchunk);\n\ninside the freed transport. KASAN reports a slab-use-after-free read in\nsctp_check_transmitted(), freed from sctp_assoc_rm_peer(). Both the\nremoval and the SACKs come from the association peer.\n\nSet chunk-\u003etransport at the move. The ordinary resend path needs nothing:\nit reaches its list_move_tail() only after sctp_packet_append_chunk()\nreturned SCTP_XMIT_OK, and __sctp_packet_append_chunk() has rebound the\nchunk by then.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74588",
"url": "https://www.suse.com/security/cve/CVE-2026-74588"
},
{
"category": "external",
"summary": "SUSE Bug 1277766 for CVE-2026-74588",
"url": "https://bugzilla.suse.com/1277766"
},
{
"category": "external",
"summary": "SUSE Bug 1277768 for CVE-2026-74588",
"url": "https://bugzilla.suse.com/1277768"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-74588"
},
{
"cve": "CVE-2026-74597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74597"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: clear skb2-\u003ecb[] in ip6ip6_err()\n\nip6ip6_err() clones an outer IPv6 ICMP error skb, pulls it to the\nquoted inner IPv6 packet, and then passes the clone to icmpv6_send().\nThe clone still carries the outer packet\u0027s inet6_skb_parm in skb-\u003ecb.\n\nIf the outer packet had a Home Address Option, IP6CB(skb2)-\u003edsthao\nremains non-zero after skb_pull(). icmpv6_send() later calls\nmip6_addr_swap(), which uses that stale dsthao offset against the quoted\ninner packet. A malformed inner destination-options header can then make\nthe HAO lookup and address swap run past the end of the quoted packet\nand corrupt skb_shared_info.\n\nClear skb2-\u003ecb[] before pulling the quoted inner IPv6 packet so the\nreply path does not reuse metadata left by the outer IPv6 stack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74597",
"url": "https://www.suse.com/security/cve/CVE-2026-74597"
},
{
"category": "external",
"summary": "SUSE Bug 1277493 for CVE-2026-74597",
"url": "https://bugzilla.suse.com/1277493"
},
{
"category": "external",
"summary": "SUSE Bug 1277495 for CVE-2026-74597",
"url": "https://bugzilla.suse.com/1277495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-74597"
},
{
"cve": "CVE-2026-74630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74630"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: prevent in6_dev_get() from resurrecting inet6_dev\n\nin6_dev_get() reads dev-\u003eip6_ptr under RCU and then unconditionally\nincrements its refcount. Device teardown can clear the pointer and drop\nthe last reference between these operations. The increment then\nresurrects an object whose RCU free has already been queued, so callers\ncan use it after it is freed.\n\nUse refcount_inc_not_zero() and return NULL when the object has already\nreached zero. RCU keeps the memory accessible through the attempted\nreference acquisition, and a successful increment pins the object for\nthe caller.\n\nAn independent run on the exact unpatched 6f5156d7a31a (v7.2-rc3)\nkernel reproduced the invalid reference acquisition as UID 1000:\n\n refcount_t: addition on 0; use-after-free.\n ip6_mc_source+0xef4/0x17e0\n\nIt was followed by the corresponding reference underflow in\nip6_mc_source(). The supplied trace from the same unpatched revision\nadditionally shows the access after the RCU read-side section ends:\n\n BUG: KASAN: slab-use-after-free in mutex_lock+0x76/0xe0\n Write of size 8 at addr ffff888015b50240 by task poc/1219\n\nBug found and triaged by OpenAI Security Research and\nvalidated by Trail of Bits.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74630",
"url": "https://www.suse.com/security/cve/CVE-2026-74630"
},
{
"category": "external",
"summary": "SUSE Bug 1278191 for CVE-2026-74630",
"url": "https://bugzilla.suse.com/1278191"
},
{
"category": "external",
"summary": "SUSE Bug 1278192 for CVE-2026-74630",
"url": "https://bugzilla.suse.com/1278192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-74630"
},
{
"cve": "CVE-2026-74641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74641"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usx2y: bound the hwdep mmap fault offset\n\nsnd_us428ctls_vm_fault() turns the faulting page offset into a kernel\naddress with no bound of any kind:\n\n\toffset = vmf-\u003epgoff \u003c\u003c PAGE_SHIFT;\n\tvaddr = (char *)(...)-\u003eus428ctls_sharedmem + offset;\n\tpage = virt_to_page(vaddr);\n\tget_page(page);\n\tvmf-\u003epage = page;\n\n\treturn 0;\n\nsnd_us428ctls_mmap() checks only the length of the mapping, never the\noffset, and us428ctls_sharedmem is a single page from\nalloc_pages_exact(). For a character device file_mmap_size_max()\nreturns ULONG_MAX, so the mm layer imposes no ceiling either. Every page\noffset above zero resolves to a struct page outside the object, and the\nhandler installs it into the caller\u0027s address space read-write; the vma\nis not marked read-only.\n\nThe caller picks the page frame with a single mmap() argument and gets\nread-write access to a page of kernel memory it does not own; an offset\nthat lands in an unpopulated vmemmap region oopses instead.\n\nA process that can open the hwdep node of an attached US-X2Y reaches\nthis after loading the FPGA image through the same node; no capability\ncheck is involved.\n\nOn 7.2.0-rc5 (arm64), mmap() with a large offset:\n\n Unable to handle kernel paging request at virtual address fffffdffc45d5ac8\n pc : snd_us428ctls_vm_fault+0x68/0x140 [snd_usb_usx2y]\n Call trace:\n snd_us428ctls_vm_fault+0x68/0x140 [snd_usb_usx2y]\n __do_fault\n __handle_mm_fault\n handle_mm_fault\n el0_da\n\nReject any offset outside the shared region. The pcm hwdep handler in\nusx2yhwdeppcm.c computes its address the same way and needs the same\nbound.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74641",
"url": "https://www.suse.com/security/cve/CVE-2026-74641"
},
{
"category": "external",
"summary": "SUSE Bug 1278310 for CVE-2026-74641",
"url": "https://bugzilla.suse.com/1278310"
},
{
"category": "external",
"summary": "SUSE Bug 1278312 for CVE-2026-74641",
"url": "https://bugzilla.suse.com/1278312"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-74641"
},
{
"cve": "CVE-2026-74743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74743"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: inherit needed_headroom and needed_tailroom from lowerdev\n\nmacvlan devices inherit hard_header_len from lowerdev during macvlan_init(),\nbut leave needed_headroom and needed_tailroom set to 0.\n\nWhen the underlying lowerdev requires extra headroom or tailroom for\nheaders/trailers (e.g. macsec, ipsec, wireguard, tunnels, or veth with rx\nheadroom), upper layers calculating packet headroom and tailroom fail to\nreserve sufficient space.\n\nThis can result in reallocation overhead, skb headroom underflows, or KASAN\nslab-use-after-free crashes when dev_hard_header() / macvlan_hard_header()\nprepends header data or when lower devices append tailroom.\n\nFix this by:\n1. Inheriting needed_headroom and needed_tailroom from lowerdev in macvlan_init().\n2. Propagating needed_headroom and needed_tailroom updates to attached macvlans\n in macvlan_device_event() when receiving NETDEV_FEAT_CHANGE events.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74743",
"url": "https://www.suse.com/security/cve/CVE-2026-74743"
},
{
"category": "external",
"summary": "SUSE Bug 1277908 for CVE-2026-74743",
"url": "https://bugzilla.suse.com/1277908"
},
{
"category": "external",
"summary": "SUSE Bug 1277909 for CVE-2026-74743",
"url": "https://bugzilla.suse.com/1277909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-74743"
},
{
"cve": "CVE-2026-74752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74752"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate cookie AUTH state before use\n\nWhen cookie authentication is disabled, COOKIE_ECHO restores fixed-size\nAUTH fields directly from peer-controlled cookie bytes. A forged RANDOM\nlength, HMAC list, or CHUNKS list can then reach association consumers\nwith lengths or identifiers that were never validated against the local\nbacking arrays.\n\nA forged RANDOM length can cause out-of-bounds reads during key-vector\nconstruction. A forged HMAC identifier also caused a 32-byte write past\na zero-length AUTH chunk, providing a primitive for a local privilege\nescalation chain.\n\nValidate the cookie\u0027s RANDOM, HMACS, and CHUNKS parameters at the cookie\ntrust boundary before copying them into the association. Reject invalid\ntypes, malformed lengths, unsupported HMAC identifiers, HMAC lists\nwithout SHA1, and forbidden chunk ids.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74752",
"url": "https://www.suse.com/security/cve/CVE-2026-74752"
},
{
"category": "external",
"summary": "SUSE Bug 1278315 for CVE-2026-74752",
"url": "https://bugzilla.suse.com/1278315"
},
{
"category": "external",
"summary": "SUSE Bug 1278316 for CVE-2026-74752",
"url": "https://bugzilla.suse.com/1278316"
},
{
"category": "external",
"summary": "SUSE Bug 1283110 for CVE-2026-74752",
"url": "https://bugzilla.suse.com/1283110"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-74752"
},
{
"cve": "CVE-2026-80785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80785"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: serialize mode sysfs access with lock_fb_info()\n\nshow_mode(), show_modes(), and store_mode() access fb_info-\u003emodelist\nand fb_info-\u003emode without holding lock_fb_info(). store_modes() takes\nlock_fb_info() while replacing the modelist and freeing the old one.\n\nA concurrent reader or writer can load a pointer to an old modelist\nentry before store_modes() frees it, then dereference freed memory or\nstore a stale freed pointer in fb_info-\u003emode.\n\nTake lock_fb_info() in show_mode(), show_modes(), and store_mode() to\nserialize with store_modes(). In show_mode(), copy the mode to the\nstack and format after dropping the lock. In store_mode(), split\nactivate() into a _locked variant to avoid double-locking, and hold\nthe locks for the modelist walk, mode conversion, activation, and\nfb_info-\u003emode assignment together.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80785",
"url": "https://www.suse.com/security/cve/CVE-2026-80785"
},
{
"category": "external",
"summary": "SUSE Bug 1279619 for CVE-2026-80785",
"url": "https://bugzilla.suse.com/1279619"
},
{
"category": "external",
"summary": "SUSE Bug 1279620 for CVE-2026-80785",
"url": "https://bugzilla.suse.com/1279620"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-80785"
},
{
"cve": "CVE-2026-89479",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-89479"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: stop processing a packet once its association is deleted\n\nsctp_endpoint_bh_rcv() looks the association up only when chunk-\u003easoc is\nNULL, and caches the result in chunk-\u003easoc and chunk-\u003etransport without\ntaking a reference.\n\nA packet that matches no association is handed to the endpoint, so a peer\ncan bundle COOKIE ECHO, SHUTDOWN and SHUTDOWN ACK in one packet. The\nCOOKIE ECHO creates the association, the SHUTDOWN chunk caches it, and\nwith the outqueue empty the SHUTDOWN ACK reaches sctp_sf_do_9_2_final(),\nso the association and its transports are freed.\n\nThe endpoint loop has no counterpart to the asoc-\u003ebase.dead check in\nsctp_assoc_bh_rcv(). The next chunk writes to last_time_heard in the freed\ntransport and is then passed to sctp_do_sm() with the freed association.\nThe transport is freed through RCU, so this needs the packet to come off\nthe socket backlog, where the loop runs in task context.\n\nThe endpoint loop cannot do the same check: it holds no reference on the\nassociation, so reading asoc-\u003ebase.dead would itself be a use-after-free.\nMark the packet for discard in the command interpreter, just before it\ndeletes the association. That is also before sctp_inq_free() releases the\nchunk on the association receive path.\n\nsctp_sf_do_5_2_4_dupcook() issues SCTP_CMD_DELETE_TCB for the temporary\nassociation, while the one the packet belongs to stays alive. A restarting\npeer can bundle DATA behind its COOKIE ECHO, so compare against\nchunk-\u003easoc and leave that case alone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-89479",
"url": "https://www.suse.com/security/cve/CVE-2026-89479"
},
{
"category": "external",
"summary": "SUSE Bug 1280786 for CVE-2026-89479",
"url": "https://bugzilla.suse.com/1280786"
},
{
"category": "external",
"summary": "SUSE Bug 1282909 for CVE-2026-89479",
"url": "https://bugzilla.suse.com/1282909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-89479"
},
{
"cve": "CVE-2026-90088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-90088"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop\n\nrfcomm_apply_pn() accepts the MTU value from a remote PN (Parameter\nNegotiation) frame without checking for zero. When the remote peer\nsends an MTU of zero, d-\u003emtu is set to 0. This causes the sendmsg\npath to enter an infinite loop when fragmenting data, as each fragment\nhas size == min_t(size_t, len, 0) == 0, so the remaining length never\ndecreases. The infinite allocation of zero-length skbs exhausts all\nsystem memory.\n\nFix by clamping d-\u003emtu to RFCOMM_DEFAULT_MTU when the negotiated\nvalue is zero, consistent with the initial value assigned in\nrfcomm_dlc_alloc().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-90088",
"url": "https://www.suse.com/security/cve/CVE-2026-90088"
},
{
"category": "external",
"summary": "SUSE Bug 1281397 for CVE-2026-90088",
"url": "https://bugzilla.suse.com/1281397"
},
{
"category": "external",
"summary": "SUSE Bug 1281398 for CVE-2026-90088",
"url": "https://bugzilla.suse.com/1281398"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-90088"
},
{
"cve": "CVE-2026-90104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-90104"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4.1: zero referring call lists before decoding\n\ndecode_cb_sequence_args() allocates csa_rclists with kmalloc_objs(), so\neach referring_call_list starts uninitialized. decode_rc_list() assigns\nrcl_refcalls only when rcl_nrefcalls is nonzero. A valid list with zero\nreferring calls therefore leaves the pointer uninitialized, and\nnfs4_callback_sequence() later passes stale slab contents to kfree().\n\nAllocate csa_rclists with kzalloc_objs() so every rcl_refcalls member is\nNULL from the beginning, including valid empty referring call lists.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-90104",
"url": "https://www.suse.com/security/cve/CVE-2026-90104"
},
{
"category": "external",
"summary": "SUSE Bug 1281546 for CVE-2026-90104",
"url": "https://bugzilla.suse.com/1281546"
},
{
"category": "external",
"summary": "SUSE Bug 1281585 for CVE-2026-90104",
"url": "https://bugzilla.suse.com/1281585"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-docs-0:3.0.101-108.223.1.noarch",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-ec2-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-syms-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-trace-devel-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-base-0:3.0.101-108.223.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-xen-devel-0:3.0.101-108.223.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-13T11:51:49Z",
"details": "important"
}
],
"title": "CVE-2026-90104"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.