{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThe SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).\n- CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).\n- CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).\n- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).\n- CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89932: KVM: nVMX: Always flush vpid02 on first use (bsc#1281360).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n- Disable BATMAN in supported.conf.\n- Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- Disable CONFIG_CAN (jsc#PED-16993). \n- default_gfp(): avoid using the \u0027newfangled\u0027 __VA_OPT__ trick (bsc#1280139).\n- fbdev/sysfs: Fix locking (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218 jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 \n  jsc#PED-1225).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- kernel-binary.spec.in: Fix syntax error.\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (bsc#1277254).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (bsc#1281085).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: fix data/file corruption on reconnects (bsc#1253005).\n- smb: client: fix stuck kworkers on reconnects during writes (bsc#1253005).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-4665,SUSE-SLE-Micro-5.5-2026-4665",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4665-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:4665-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264665-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:4665-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264665-1/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1251966",
        "url": "https://bugzilla.suse.com/1251966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1252682",
        "url": "https://bugzilla.suse.com/1252682"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1253005",
        "url": "https://bugzilla.suse.com/1253005"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254633",
        "url": "https://bugzilla.suse.com/1254633"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266008",
        "url": "https://bugzilla.suse.com/1266008"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269136",
        "url": "https://bugzilla.suse.com/1269136"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271906",
        "url": "https://bugzilla.suse.com/1271906"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273251",
        "url": "https://bugzilla.suse.com/1273251"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273290",
        "url": "https://bugzilla.suse.com/1273290"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273339",
        "url": "https://bugzilla.suse.com/1273339"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273953",
        "url": "https://bugzilla.suse.com/1273953"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274037",
        "url": "https://bugzilla.suse.com/1274037"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274836",
        "url": "https://bugzilla.suse.com/1274836"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275304",
        "url": "https://bugzilla.suse.com/1275304"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275307",
        "url": "https://bugzilla.suse.com/1275307"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275470",
        "url": "https://bugzilla.suse.com/1275470"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275535",
        "url": "https://bugzilla.suse.com/1275535"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275540",
        "url": "https://bugzilla.suse.com/1275540"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275543",
        "url": "https://bugzilla.suse.com/1275543"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275545",
        "url": "https://bugzilla.suse.com/1275545"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275681",
        "url": "https://bugzilla.suse.com/1275681"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275696",
        "url": "https://bugzilla.suse.com/1275696"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275972",
        "url": "https://bugzilla.suse.com/1275972"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275985",
        "url": "https://bugzilla.suse.com/1275985"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276006",
        "url": "https://bugzilla.suse.com/1276006"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276007",
        "url": "https://bugzilla.suse.com/1276007"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276009",
        "url": "https://bugzilla.suse.com/1276009"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276277",
        "url": "https://bugzilla.suse.com/1276277"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276287",
        "url": "https://bugzilla.suse.com/1276287"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276295",
        "url": "https://bugzilla.suse.com/1276295"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276337",
        "url": "https://bugzilla.suse.com/1276337"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276338",
        "url": "https://bugzilla.suse.com/1276338"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276340",
        "url": "https://bugzilla.suse.com/1276340"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276353",
        "url": "https://bugzilla.suse.com/1276353"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276354",
        "url": "https://bugzilla.suse.com/1276354"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276381",
        "url": "https://bugzilla.suse.com/1276381"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276388",
        "url": "https://bugzilla.suse.com/1276388"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276395",
        "url": "https://bugzilla.suse.com/1276395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276475",
        "url": "https://bugzilla.suse.com/1276475"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276519",
        "url": "https://bugzilla.suse.com/1276519"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276572",
        "url": "https://bugzilla.suse.com/1276572"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276801",
        "url": "https://bugzilla.suse.com/1276801"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276803",
        "url": "https://bugzilla.suse.com/1276803"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276814",
        "url": "https://bugzilla.suse.com/1276814"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276818",
        "url": "https://bugzilla.suse.com/1276818"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276821",
        "url": "https://bugzilla.suse.com/1276821"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277129",
        "url": "https://bugzilla.suse.com/1277129"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277149",
        "url": "https://bugzilla.suse.com/1277149"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277249",
        "url": "https://bugzilla.suse.com/1277249"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277254",
        "url": "https://bugzilla.suse.com/1277254"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277410",
        "url": "https://bugzilla.suse.com/1277410"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277489",
        "url": "https://bugzilla.suse.com/1277489"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277493",
        "url": "https://bugzilla.suse.com/1277493"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277544",
        "url": "https://bugzilla.suse.com/1277544"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277553",
        "url": "https://bugzilla.suse.com/1277553"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277561",
        "url": "https://bugzilla.suse.com/1277561"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277574",
        "url": "https://bugzilla.suse.com/1277574"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277590",
        "url": "https://bugzilla.suse.com/1277590"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277626",
        "url": "https://bugzilla.suse.com/1277626"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277766",
        "url": "https://bugzilla.suse.com/1277766"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277792",
        "url": "https://bugzilla.suse.com/1277792"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277813",
        "url": "https://bugzilla.suse.com/1277813"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277820",
        "url": "https://bugzilla.suse.com/1277820"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277837",
        "url": "https://bugzilla.suse.com/1277837"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277857",
        "url": "https://bugzilla.suse.com/1277857"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277898",
        "url": "https://bugzilla.suse.com/1277898"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277901",
        "url": "https://bugzilla.suse.com/1277901"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277904",
        "url": "https://bugzilla.suse.com/1277904"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277906",
        "url": "https://bugzilla.suse.com/1277906"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277908",
        "url": "https://bugzilla.suse.com/1277908"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278054",
        "url": "https://bugzilla.suse.com/1278054"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278094",
        "url": "https://bugzilla.suse.com/1278094"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278108",
        "url": "https://bugzilla.suse.com/1278108"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278178",
        "url": "https://bugzilla.suse.com/1278178"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278191",
        "url": "https://bugzilla.suse.com/1278191"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278210",
        "url": "https://bugzilla.suse.com/1278210"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278211",
        "url": "https://bugzilla.suse.com/1278211"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278253",
        "url": "https://bugzilla.suse.com/1278253"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278294",
        "url": "https://bugzilla.suse.com/1278294"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278315",
        "url": "https://bugzilla.suse.com/1278315"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279422",
        "url": "https://bugzilla.suse.com/1279422"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279487",
        "url": "https://bugzilla.suse.com/1279487"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279532",
        "url": "https://bugzilla.suse.com/1279532"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279619",
        "url": "https://bugzilla.suse.com/1279619"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279621",
        "url": "https://bugzilla.suse.com/1279621"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279786",
        "url": "https://bugzilla.suse.com/1279786"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279835",
        "url": "https://bugzilla.suse.com/1279835"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279875",
        "url": "https://bugzilla.suse.com/1279875"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280139",
        "url": "https://bugzilla.suse.com/1280139"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280243",
        "url": "https://bugzilla.suse.com/1280243"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280263",
        "url": "https://bugzilla.suse.com/1280263"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280350",
        "url": "https://bugzilla.suse.com/1280350"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280496",
        "url": "https://bugzilla.suse.com/1280496"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280727",
        "url": "https://bugzilla.suse.com/1280727"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280733",
        "url": "https://bugzilla.suse.com/1280733"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280758",
        "url": "https://bugzilla.suse.com/1280758"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280786",
        "url": "https://bugzilla.suse.com/1280786"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280923",
        "url": "https://bugzilla.suse.com/1280923"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280985",
        "url": "https://bugzilla.suse.com/1280985"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280993",
        "url": "https://bugzilla.suse.com/1280993"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281010",
        "url": "https://bugzilla.suse.com/1281010"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281014",
        "url": "https://bugzilla.suse.com/1281014"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281042",
        "url": "https://bugzilla.suse.com/1281042"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281046",
        "url": "https://bugzilla.suse.com/1281046"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281085",
        "url": "https://bugzilla.suse.com/1281085"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281229",
        "url": "https://bugzilla.suse.com/1281229"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281295",
        "url": "https://bugzilla.suse.com/1281295"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281360",
        "url": "https://bugzilla.suse.com/1281360"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281546",
        "url": "https://bugzilla.suse.com/1281546"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281818",
        "url": "https://bugzilla.suse.com/1281818"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282110",
        "url": "https://bugzilla.suse.com/1282110"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282113",
        "url": "https://bugzilla.suse.com/1282113"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282284",
        "url": "https://bugzilla.suse.com/1282284"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282648",
        "url": "https://bugzilla.suse.com/1282648"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282881",
        "url": "https://bugzilla.suse.com/1282881"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282906",
        "url": "https://bugzilla.suse.com/1282906"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282932",
        "url": "https://bugzilla.suse.com/1282932"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-50645 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-50645/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-39964 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-39964/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-40022 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-40022/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100075 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100075/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43502 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43502/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53266 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53266/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53400 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53400/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64279 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64279/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64319 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64319/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64422 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64422/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64556 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64556/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64580 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64580/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68155 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68155/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68158 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68158/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68159 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68159/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68376 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68376/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68445 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68445/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68451 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68451/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68452 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68452/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68454 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68454/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72051 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72051/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72052 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72052/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72053 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72053/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72054 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72054/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72055 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72055/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72061 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72061/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72066 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72066/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72083 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72083/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72084 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72084/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72098 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72098/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72129 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72129/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72136 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72136/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72157 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72157/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72164 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72164/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72322 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72322/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72323 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72323/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72339 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72339/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72348 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72348/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72351 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72351/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72383 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72383/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72398 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72398/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72434 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72434/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72449 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72449/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74267 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74267/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74283 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74283/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74330 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74330/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74388 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74388/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74398 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74398/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74406 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74406/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74443 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74443/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74444 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74444/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74453 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74453/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74469 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74469/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74473 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74473/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74479 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74479/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74480 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74480/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74492 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74492/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74493 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74493/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74540 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74540/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74556 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74556/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74586 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74586/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74588 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74588/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74589 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74589/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74597 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74597/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74609 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74609/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74615 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74615/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74616 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74616/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74630 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74630/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74688 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74688/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74700 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74700/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74719 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74719/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74737 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74737/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74743 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74743/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74744 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74744/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74752 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74752/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80540 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80540/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80580 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80580/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80714 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80714/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80716 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80716/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80737 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80737/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80785 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80785/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80789 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80789/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80840 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80840/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80841 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80841/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80844 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80844/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80852 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80852/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80909 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80909/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81000 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81000/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89479 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89479/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89482 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89482/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89532 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89532/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89533 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89533/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89544 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89544/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89551 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89551/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89569 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89569/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89603 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89603/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89631 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89631/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89636 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89636/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89638 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89638/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89674 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89674/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89932 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89932/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89968 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89968/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90003 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90003/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90104 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90104/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90198 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90198/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90413 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90413/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90414 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90414/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93104 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93104/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93782 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93782/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93787 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93787/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2026-10-15T09:48:17Z",
      "generator": {
        "date": "2026-10-14T12:53:55Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:4665-1",
      "initial_release_date": "2026-10-14T12:53:55Z",
      "revision_history": [
        {
          "date": "2026-10-14T12:53:55Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-15T09:48:17Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
                "product": {
                  "name": "kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
                  "product_id": "kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel-rt@5.14.21-150500.13.164.1?arch=noarch\u0026upstream=kernel-source-rt-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-rt-0:5.14.21-150500.13.164.1.noarch",
                "product": {
                  "name": "kernel-source-rt-0:5.14.21-150500.13.164.1.noarch",
                  "product_id": "kernel-source-rt-0:5.14.21-150500.13.164.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source-rt@5.14.21-150500.13.164.1?arch=noarch\u0026upstream=kernel-source-rt-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cluster-md-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "cluster-md-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "cluster-md-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/cluster-md-kmp-rt@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dlm-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "dlm-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "dlm-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dlm-kmp-rt@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gfs2-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "gfs2-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "gfs2-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gfs2-kmp-rt@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-devel-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-rt-devel-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-rt-devel-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-devel@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-extra-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-rt-extra-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-rt-extra-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-extra@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-livepatch-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-rt-livepatch-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-rt-livepatch-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-livepatch@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-livepatch-devel-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-rt-livepatch-devel-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-rt-livepatch-devel-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-livepatch-devel@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-rt-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-optional-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-rt-optional-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-rt-optional-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-optional@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-rt-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-vdso-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-rt-vdso-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-rt-vdso-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-vdso@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt_debug-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-rt_debug-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-rt_debug-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt_debug@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-rt_debug-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt_debug-devel-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-rt_debug-devel-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-rt_debug-devel-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt_debug-devel@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-rt_debug-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt_debug-vdso-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-rt_debug-vdso-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-rt_debug-vdso-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt_debug-vdso@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-rt_debug-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-rt-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kernel-syms-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kernel-syms-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-syms-rt@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-syms-rt-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kselftests-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "kselftests-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "kselftests-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kselftests-kmp-rt@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-rt-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ocfs2-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "ocfs2-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "ocfs2-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/ocfs2-kmp-rt@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-rt-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "reiserfs-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                "product": {
                  "name": "reiserfs-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_id": "reiserfs-kmp-rt-0:5.14.21-150500.13.164.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/reiserfs-kmp-rt@5.14.21-150500.13.164.1?arch=x86_64\u0026upstream=kernel-rt-0:5.14.21-150500.13.164.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.5",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.5",
                  "product_id": "SUSE Linux Enterprise Micro 5.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-micro:5.5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch as component of SUSE Linux Enterprise Micro 5.5",
          "product_id": "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch"
        },
        "product_reference": "kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:5.14.21-150500.13.164.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
          "product_id": "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64"
        },
        "product_reference": "kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-rt-0:5.14.21-150500.13.164.1.noarch as component of SUSE Linux Enterprise Micro 5.5",
          "product_id": "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        },
        "product_reference": "kernel-source-rt-0:5.14.21-150500.13.164.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-50645",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-50645"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()\n\nAs the comment of pci_get_domain_bus_and_slot() says, it returns\na PCI device with refcount incremented, so it doesn\u0027t need to\ncall an extra pci_dev_get() in pci_get_dev_wrapper(), and the PCI\ndevice needs to be put in the error path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-50645",
          "url": "https://www.suse.com/security/cve/CVE-2022-50645"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254633 for CVE-2022-50645",
          "url": "https://bugzilla.suse.com/1254633"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "low"
        }
      ],
      "title": "CVE-2022-50645"
    },
    {
      "cve": "CVE-2025-39964",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-39964"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Disallow concurrent writes in af_alg_sendmsg\n\nIssuing two writes to the same af_alg socket is bogus as the\ndata will be interleaved in an unpredictable fashion.  Furthermore,\nconcurrent writes may create inconsistencies in the internal\nsocket state.\n\nDisallow this by adding a new ctx-\u003ewrite field that indiciates\nexclusive ownership for writing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-39964",
          "url": "https://www.suse.com/security/cve/CVE-2025-39964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251966 for CVE-2025-39964",
          "url": "https://bugzilla.suse.com/1251966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285060 for CVE-2025-39964",
          "url": "https://bugzilla.suse.com/1285060"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-39964"
    },
    {
      "cve": "CVE-2025-40022",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-40022"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Fix incorrect boolean values in af_alg_ctx\n\nCommit 1b34cbbf4f01 (\"crypto: af_alg - Disallow concurrent writes in\naf_alg_sendmsg\") changed some fields from bool to 1-bit bitfields of\ntype u32.\n\nHowever, some assignments to these fields, specifically \u0027more\u0027 and\n\u0027merge\u0027, assign values greater than 1.  These relied on C\u0027s implicit\nconversion to bool, such that zero becomes false and nonzero becomes\ntrue.\n\nWith a 1-bit bitfields of type u32 instead, mod 2 of the value is taken\ninstead, resulting in 0 being assigned in some cases when 1 was intended.\n\nFix this by restoring the bool type.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-40022",
          "url": "https://www.suse.com/security/cve/CVE-2025-40022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1252682 for CVE-2025-40022",
          "url": "https://bugzilla.suse.com/1252682"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-40022"
    },
    {
      "cve": "CVE-2026-100075",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100075"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters\n\nWhen srpt_alloc_rw_ctxs() fails partway through a multi-buffer indirect\ndescriptor, the unwind path destroys RDMA contexts but leaves stale\nn_rw_ctx and n_rdma values (and a dangling rw_ctxs pointer). Later\nsq_wr_avail accounting in srpt_queue_response() or srpt_write_pending()\ncan then subtract the wrong number of send queue credits.\n\nReset the counters and clear rw_ctxs after freeing the heap\nallocation before returning an error.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100075",
          "url": "https://www.suse.com/security/cve/CVE-2026-100075"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282881 for CVE-2026-100075",
          "url": "https://bugzilla.suse.com/1282881"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282882 for CVE-2026-100075",
          "url": "https://bugzilla.suse.com/1282882"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-100075"
    },
    {
      "cve": "CVE-2026-43502",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43502"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: handle zerocopy send cleanup before the message is queued\n\nA zerocopy send can fail after user pages have been pinned but before\nthe message is attached to the sending socket.\n\nThe purge path currently infers zerocopy state from rm-\u003em_rs, so an\nunqueued message can be cleaned up as if it owned normal payload pages.\nHowever, zerocopy ownership is really determined by the presence of\nop_mmp_znotifier, regardless of whether the message has reached the\nsocket queue.\n\nCapture op_mmp_znotifier up front in rds_message_purge() and use it as\nthe cleanup discriminator. If the message is already associated with a\nsocket, keep the existing completion path. Otherwise, drop the pinned\npage accounting directly and release the notifier before putting the\npayload pages.\n\nThis keeps early send failure cleanup consistent with the zerocopy\nlifetime rules without changing the normal queued completion path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43502",
          "url": "https://www.suse.com/security/cve/CVE-2026-43502"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266008 for CVE-2026-43502",
          "url": "https://bugzilla.suse.com/1266008"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279563 for CVE-2026-43502",
          "url": "https://bugzilla.suse.com/1279563"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-43502"
    },
    {
      "cve": "CVE-2026-53266",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53266"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: make ebt_snat ARP rewrite writable\n\nThe ebtables SNAT target keeps the Ethernet source address rewrite\nbehind skb_ensure_writable(skb, 0).  This is intentional: at the bridge\nebtables hooks the Ethernet header is addressed through\nskb_mac_header()/eth_hdr(), while skb-\u003edata points at the Ethernet\npayload.  Asking skb_ensure_writable() for ETH_HLEN bytes would check\nthe payload, not the Ethernet header, and would reintroduce the small\npacket regression fixed by commit 63137bc5882a.\n\nHowever, the optional ARP sender hardware address rewrite is different.\nIt writes through skb_store_bits() at an offset relative to skb-\u003edata:\n\n        skb_store_bits(skb, sizeof(struct arphdr), info-\u003emac, ETH_ALEN)\n\nskb_header_pointer() only safely reads the ARP header; it does not make\nthe later sender hardware address range writable.  If that range is\nstill held in a nonlinear skb fragment backed by a splice-imported file\npage, skb_store_bits() maps the frag page and copies the new MAC address\ndirectly into it.\n\nEnsure the ARP SHA range is writable before reading the ARP header and\nbefore calling skb_store_bits().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53266",
          "url": "https://www.suse.com/security/cve/CVE-2026-53266"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269136 for CVE-2026-53266",
          "url": "https://bugzilla.suse.com/1269136"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53266"
    },
    {
      "cve": "CVE-2026-53400",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53400"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: core: fix adapter registration race\n\nAdapters can be looked up based on their id using i2c_get_adapter()\nwhich takes a reference to the embedded struct device.\n\nMake sure that the adapter (including its struct device) has been\ninitialised before adding it to the IDR to avoid accessing uninitialised\ndata which could, for example, lead to NULL-pointer dereferences or\nuse-after-free.\n\nNote that the i2c-dev chardev, which is registered from a bus notifier,\ncurrently uses i2c_get_adapter() so the adapter needs to be added to the\nIDR before registration.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53400",
          "url": "https://www.suse.com/security/cve/CVE-2026-53400"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271906 for CVE-2026-53400",
          "url": "https://bugzilla.suse.com/1271906"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271907 for CVE-2026-53400",
          "url": "https://bugzilla.suse.com/1271907"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53400"
    },
    {
      "cve": "CVE-2026-64279",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64279"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: core: fix adapter deregistration race\n\nAdapters can be looked up by their id using i2c_get_adapter() which\ntakes a reference to the embedded struct device.\n\nRemove the adapter from the IDR before tearing it down during\nderegistration (and on registration failure) to make sure its resources\nare not accessed after having been freed (e.g. the device name).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64279",
          "url": "https://www.suse.com/security/cve/CVE-2026-64279"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273953 for CVE-2026-64279",
          "url": "https://bugzilla.suse.com/1273953"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64279"
    },
    {
      "cve": "CVE-2026-64319",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64319"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-auth: validate reply message payload bounds against transfer length\n\nnvmet_auth_reply() accesses the variable-length rval[] array using\nattacker-controlled hl (hash length) and dhvlen (DH value length) fields\nwithout verifying they fit within the allocated buffer of tl bytes.\n\nA malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a\nsmall transfer length but large hl/dhvlen values, causing out-of-bounds\nheap reads when the target processes the DH public key (rval + 2*hl) or\nperforms the host response memcmp.\n\nWith DH authentication configured, the OOB pointer is passed directly to\nsg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching\nup to 526 bytes past the buffer. This is exploitable pre-authentication.\n\nAdd bounds validation ensuring sizeof(*data) + 2*hl + dhvlen \u003c= tl before\nany access to the variable-length fields.\n\nDiscovered by Atuin - Automated Vulnerability Discovery Engine.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64319",
          "url": "https://www.suse.com/security/cve/CVE-2026-64319"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273339 for CVE-2026-64319",
          "url": "https://bugzilla.suse.com/1273339"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273419 for CVE-2026-64319",
          "url": "https://bugzilla.suse.com/1273419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-64319"
    },
    {
      "cve": "CVE-2026-64422",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64422"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes\n\nReject invalid `net.ipv4.tcp_reordering` values before they reach TCP\nsocket state. The sysctl is stored as an `int` but copied into the\n`u32` `tp-\u003ereordering` field for new sockets, so negative writes wrap\nto large values.\n\nWith `tcp_mtu_probing=2`, the wrapped value can overflow the\n`tcp_mtu_probe()` size calculation and drive the MTU probing path into\nan out-of-bounds read. Route `tcp_reordering` writes through\n`proc_dointvec_minmax()` and require it to be at least 1. Also require\n`tcp_max_reordering` to be at least 1 so the configured maximum cannot\nbecome negative either.\n\nWhen registering the table for a non-init network namespace, relocate\n`extra2` pointers that refer into `init_net.ipv4` so the\n`tcp_reordering` upper bound follows that namespace\u0027s\n`tcp_max_reordering`.\n\nHarden `tcp_mtu_probe()` itself by computing `size_needed` as `u64`.\nThis keeps the send queue and window checks from being bypassed through\nsigned integer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64422",
          "url": "https://www.suse.com/security/cve/CVE-2026-64422"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273290 for CVE-2026-64422",
          "url": "https://bugzilla.suse.com/1273290"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64422"
    },
    {
      "cve": "CVE-2026-64556",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64556"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/core: Detach event groups during remove_on_exec\n\nperf_event_remove_on_exec() removes events by calling\nperf_event_exit_event(). For top-level events, this removes the event from\nthe context with DETACH_EXIT only.\n\nThis can leave inconsistent group state when a removed event is a group\nleader and the group contains siblings without remove_on_exec. If the group\nwas active, the surviving siblings can remain active and attached to the\nremoved leader\u0027s sibling list, but are no longer represented by a valid\ngroup leader on the PMU context active lists.\n\nA later close of the removed leader uses DETACH_GROUP and can promote the\nstill-active siblings from this stale group state. The next schedule-in can\nthen add an already-linked active_list entry again, corrupting the PMU\ncontext active list.\n\nWith DEBUG_LIST enabled, this is caught as a list_add double-add in\nmerge_sched_in().\n\nFix this by detaching group relationships when remove_on_exec removes an\nevent. This preserves the existing task-exit and revoke behavior, while\nensuring surviving siblings are ungrouped before the removed event leaves\nthe context.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64556",
          "url": "https://www.suse.com/security/cve/CVE-2026-64556"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273251 for CVE-2026-64556",
          "url": "https://bugzilla.suse.com/1273251"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274648 for CVE-2026-64556",
          "url": "https://bugzilla.suse.com/1274648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-64556"
    },
    {
      "cve": "CVE-2026-64580",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64580"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()\n\nOn the error path where in6_dev_get(dev) returns NULL, xfrm6_fill_dst()\nreleases the device reference with netdev_put() but leaves\nxdst-\u003eu.dst.dev set. dst_destroy() later calls netdev_put(dst-\u003edev)\nagain, so the same net_device reference is released twice, underflowing\nits refcount (ref_tracker WARNING + \"unregister_netdevice: waiting for\n\u003cdev\u003e to become free\").\n\nClear xdst-\u003eu.dst.dev after the netdev_put(), the same way the XFRM\ndevice-offload paths xfrm_dev_state_add() and xfrm_dev_policy_add() in\nnet/xfrm/xfrm_device.c NULL -\u003edev when releasing the reference on error.\n\n  ref_tracker: reference already released.\n  ref_tracker: allocated in:\n   xfrm6_fill_dst (net/ipv6/xfrm6_policy.c:86)\n   ...\n   udpv6_sendmsg (net/ipv6/udp.c:1696)\n   ...\n  ref_tracker: freed in:\n   xfrm6_fill_dst (net/ipv6/xfrm6_policy.c:90)\n   ...\n  WARNING: lib/ref_tracker.c:322 at ref_tracker_free+0x58b/0x780\n   dst_destroy (net/core/dst.c:115)\n   rcu_core\n   handle_softirqs\n   ...",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64580",
          "url": "https://www.suse.com/security/cve/CVE-2026-64580"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274037 for CVE-2026-64580",
          "url": "https://bugzilla.suse.com/1274037"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274038 for CVE-2026-64580",
          "url": "https://bugzilla.suse.com/1274038"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-64580"
    },
    {
      "cve": "CVE-2026-68155",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68155"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: Reject monmaps advertising zero monitors\n\nA message of type CEPH_MSG_MON_MAP contains a monmap that is sent from a\nmonitor to the client. This monmap contains information about the\nexisting monitors in the cluster. Currently, a monmap indicating that\nthere are zero monitors in the cluster is treated as valid. However, it\nis impossible to have zero monitors in the cluster and still receive a\nvalid monmap from a monitor. Therefore, such a monmap must be corrupted\nand should be treated as invalid. Furthermore, a monmap with a monitor\ncount of zero can subsequently crash the client when attempting to open\na session with a monitor in __open_session(). This happens because the\n\"BUG_ON(monc-\u003emonmap-\u003enum_mon \u003c 1)\" assertion in pick_new_mon() is\ntriggered.\n\nThis patch extends a check in ceph_monmap_decode() to also reject\narriving mon_maps with num_mon == 0 rather than only with\nnum_mon \u003e CEPH_MAX_MON.\n\n[ idryomov: drop \"log output for unusual values of num_mon\" part ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68155",
          "url": "https://www.suse.com/security/cve/CVE-2026-68155"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275304 for CVE-2026-68155",
          "url": "https://bugzilla.suse.com/1275304"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276305 for CVE-2026-68155",
          "url": "https://bugzilla.suse.com/1276305"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68155"
    },
    {
      "cve": "CVE-2026-68158",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68158"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: Fix multiplication overflow in decode_new_up_state_weight()\n\nIf a message of type CEPH_MSG_OSD_MAP contains a (maliciously) corrupted\nosdmap, out-of-bounds memory accesses may occur in\ndecode_new_up_state_weight(). This happens because the bounds check for\nthe new_state part is based on calculating its length depending on a len\nvalue read from the incoming message. This calculation may overflow\nleading to an incorrect bounds check. Subsequently, out-of-bounds reads\nmay occur when decoding this part.\n\nThis patch switches the multiplication to use check_mul_overflow() to\nabort processing the osdmap if an overflow occurred. Therefore,\nosdmaps/messages containing large values for len that result in a\nmultiplication overflow are treated as invalid.\n\n[ idryomov: rename new_state_len -\u003e new_state_item_size, formatting ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68158",
          "url": "https://www.suse.com/security/cve/CVE-2026-68158"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275307 for CVE-2026-68158",
          "url": "https://bugzilla.suse.com/1275307"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276303 for CVE-2026-68158",
          "url": "https://bugzilla.suse.com/1276303"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68158"
    },
    {
      "cve": "CVE-2026-68159",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68159"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE\n\n__decode_pg_temp() decodes an user-controlled length but only rejects\nvalues large enough to overflow the allocation; it does not bound it to\nCEPH_PG_MAX_SIZE. The helper backs both pg_temp and pg_upmap decoding, and\napply_upmap()/get_temp_osds() later copy the decoded list into the fixed-size\non-stack array struct ceph_osds.osds[CEPH_PG_MAX_SIZE]. A monitor that sends\nan OSDMap with a pg_temp/pg_upmap entry longer than 32 thus causes a stack\nout-of-bounds write.\n\nAn OSD set for a single PG can never exceed CEPH_PG_MAX_SIZE, so reject longer\nentries at decode time. The bound is well below the old overflow threshold, so\nit also covers the allocation-size overflow the previous check guarded against.\n\n  BUG: KASAN: stack-out-of-bounds in ceph_pg_to_up_acting_osds\n  Write of size 4 ... by task exploit\n   kasan_report (mm/kasan/report.c:595)\n   ceph_pg_to_up_acting_osds (net/ceph/osdmap.c:2617 net/ceph/osdmap.c:2833)\n   calc_target (net/ceph/osd_client.c:1638)\n   __submit_request (net/ceph/osd_client.c:2394)\n   ceph_osdc_start_request (net/ceph/osd_client.c:2490)\n   ceph_osdc_call (net/ceph/osd_client.c:5164)\n   rbd_dev_image_probe (drivers/block/rbd.c:6899)\n   do_rbd_add (drivers/block/rbd.c:7138)\n   ...\n  kernel BUG at net/ceph/osdmap.c:2670!\n\n[ idryomov: do the same in __decode_pg_upmap_items() ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68159",
          "url": "https://www.suse.com/security/cve/CVE-2026-68159"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275470 for CVE-2026-68159",
          "url": "https://bugzilla.suse.com/1275470"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275471 for CVE-2026-68159",
          "url": "https://bugzilla.suse.com/1275471"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68159"
    },
    {
      "cve": "CVE-2026-68376",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68376"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix auth_hmacs array size in struct sctp_cookie\n\nThe auth_hmacs array in struct sctp_cookie is supposed to store a complete\nSCTP_AUTH_HMAC_ALGO parameter, which consists of a struct sctp_paramhdr\nfollowed by N HMAC identifiers.\n\nHowever, the array size was calculated using an extra 2 bytes instead of\nsizeof(struct sctp_paramhdr), which is 4 bytes. When four HMAC identifiers\nare configured, the HMAC-ALGO parameter stored in the endpoint is larger\nthan the auth_hmacs buffer in the cookie.\n\nAs a result, sctp_association_init() copies beyond the end of auth_hmacs\nwhen initializing the association, corrupting the adjacent auth_chunks\nfield. This can lead to an invalid HMAC identifier being accepted and later\ncause an out-of-bounds read in sctp_auth_get_hmac().\n\nFix the array size calculation by including the full SCTP parameter header\nsize.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68376",
          "url": "https://www.suse.com/security/cve/CVE-2026-68376"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274836 for CVE-2026-68376",
          "url": "https://bugzilla.suse.com/1274836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279854 for CVE-2026-68376",
          "url": "https://bugzilla.suse.com/1279854"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68376"
    },
    {
      "cve": "CVE-2026-68445",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68445"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Prevent shader BO mappings from becoming writable\n\nvc4_gem_object_mmap() rejects a writable mapping of a validated shader\nBO, but leaves VM_MAYWRITE set.  Userspace can map the BO read-only and\nthen turn it writable with mprotect().\n\nValidated shader BOs must stay read-only: the validator checks the\ninstructions once and the GPU trusts them afterwards.  A writable\nmapping lets userspace rewrite the code after validation, bypassing the\nvalidator.\n\nClear VM_MAYWRITE on the read-only path so the mapping cannot be\nupgraded, as i915 already does for its read-only objects.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68445",
          "url": "https://www.suse.com/security/cve/CVE-2026-68445"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276277 for CVE-2026-68445",
          "url": "https://bugzilla.suse.com/1276277"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276278 for CVE-2026-68445",
          "url": "https://bugzilla.suse.com/1276278"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277850 for CVE-2026-68445",
          "url": "https://bugzilla.suse.com/1277850"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68445"
    },
    {
      "cve": "CVE-2026-68451",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68451"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/zcrypt: Validate length for CCA ECC private key requests\n\ncca_ecc2protkey() derives the copy length for the CPRB parameter\nblock directly from the length field in the key token. Reject the\nrequest early if the token length exceeds the available space in the\nparameter block.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68451",
          "url": "https://www.suse.com/security/cve/CVE-2026-68451"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276287 for CVE-2026-68451",
          "url": "https://bugzilla.suse.com/1276287"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276288 for CVE-2026-68451",
          "url": "https://bugzilla.suse.com/1276288"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68451"
    },
    {
      "cve": "CVE-2026-68452",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68452"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/zcrypt: Validate length for CCA AES cipher key requests\n\ncca_cipher2protkey() derives the copy length for the CPRB parameter\nblock directly from the length field in the key token. Reject the\nrequest early if the token length exceeds the available space in the\nparameter block.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68452",
          "url": "https://www.suse.com/security/cve/CVE-2026-68452"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276295 for CVE-2026-68452",
          "url": "https://bugzilla.suse.com/1276295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276485 for CVE-2026-68452",
          "url": "https://bugzilla.suse.com/1276485"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68452"
    },
    {
      "cve": "CVE-2026-68454",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68454"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: pci: Fix handling of AIF enable without AISB\n\nWhen a guest seeks to register IRQs without a summary bit specified,\nensure that the associated GAITE then stores 0 for the guest AISB\nlocation instead of virt_to_phys(page_address(NULL)).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68454",
          "url": "https://www.suse.com/security/cve/CVE-2026-68454"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276388 for CVE-2026-68454",
          "url": "https://bugzilla.suse.com/1276388"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276390 for CVE-2026-68454",
          "url": "https://bugzilla.suse.com/1276390"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68454"
    },
    {
      "cve": "CVE-2026-72051",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72051"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink\n\nip6_tnl_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u003enet. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nGate ip6_tnl_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72051",
          "url": "https://www.suse.com/security/cve/CVE-2026-72051"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276801 for CVE-2026-72051",
          "url": "https://bugzilla.suse.com/1276801"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276805 for CVE-2026-72051",
          "url": "https://bugzilla.suse.com/1276805"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72051"
    },
    {
      "cve": "CVE-2026-72052",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72052"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink\n\nip6gre_changelink() and ip6erspan_changelink() operate on at most two\nnetns, dev_net(dev) and the tunnel link netns t-\u003enet. They differ once\nthe device is created in or moved to a netns other than the one the\nrequest runs in. The rtnl changelink path checks CAP_NET_ADMIN only\nagainst dev_net(dev), so a caller privileged there but not in t-\u003enet can\nrewrite a tunnel that lives in t-\u003enet.\n\nGate both ops on rtnl_dev_link_net_capable() at their top, before any\nattribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72052",
          "url": "https://www.suse.com/security/cve/CVE-2026-72052"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276803 for CVE-2026-72052",
          "url": "https://bugzilla.suse.com/1276803"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276806 for CVE-2026-72052",
          "url": "https://bugzilla.suse.com/1276806"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72052"
    },
    {
      "cve": "CVE-2026-72053",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72053"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipip: require CAP_NET_ADMIN in the device netns for changelink\n\nipip_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u003enet. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nGate ipip_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72053",
          "url": "https://www.suse.com/security/cve/CVE-2026-72053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276814 for CVE-2026-72053",
          "url": "https://bugzilla.suse.com/1276814"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276822 for CVE-2026-72053",
          "url": "https://bugzilla.suse.com/1276822"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72053"
    },
    {
      "cve": "CVE-2026-72054",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72054"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink\n\nvti_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u003enet. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nGate vti_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72054",
          "url": "https://www.suse.com/security/cve/CVE-2026-72054"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276818 for CVE-2026-72054",
          "url": "https://bugzilla.suse.com/1276818"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276823 for CVE-2026-72054",
          "url": "https://bugzilla.suse.com/1276823"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72054"
    },
    {
      "cve": "CVE-2026-72055",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72055"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink\n\nvti6_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u003enet. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nGate vti6_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72055",
          "url": "https://www.suse.com/security/cve/CVE-2026-72055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276821 for CVE-2026-72055",
          "url": "https://bugzilla.suse.com/1276821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276825 for CVE-2026-72055",
          "url": "https://bugzilla.suse.com/1276825"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72055"
    },
    {
      "cve": "CVE-2026-72061",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72061"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sit: require CAP_NET_ADMIN in the device netns for changelink\n\nipip6_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u003enet. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nGate ipip6_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed. sit was the one tunnel type not covered\nby the recent series that added this check to the other changelink()\nhandlers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72061",
          "url": "https://www.suse.com/security/cve/CVE-2026-72061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277249 for CVE-2026-72061",
          "url": "https://bugzilla.suse.com/1277249"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277418 for CVE-2026-72061",
          "url": "https://bugzilla.suse.com/1277418"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72061"
    },
    {
      "cve": "CVE-2026-72066",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72066"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpu: hotplug: Bound hotplug states sysfs output\n\nstates_show() adds CPU hotplug state names into a single sysfs buffer\nusing sprintf(). With enough registered states, this can write past the\nend of the PAGE_SIZE buffer.\n\nUse sysfs_emit_at() so output is bounded.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72066",
          "url": "https://www.suse.com/security/cve/CVE-2026-72066"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277149 for CVE-2026-72066",
          "url": "https://bugzilla.suse.com/1277149"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280094 for CVE-2026-72066",
          "url": "https://bugzilla.suse.com/1280094"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72066"
    },
    {
      "cve": "CVE-2026-72083",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72083"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE\n\ncore_scsi3_emulate_pro_register_and_move() maps the PERSISTENT RESERVE OUT\nparameter list with transport_kmap_data_sg() and parses the destination\nTransportID with target_parse_pr_out_transport_id(). For an iSCSI\nTransportID (FORMAT CODE 01b), iscsi_parse_pr_out_transport_id() returns\nthe ISID in iport_ptr as a raw pointer into that mapped buffer.\n\nThe function then unmaps the buffer with transport_kunmap_data_sg() before\ndereferencing iport_ptr in strcmp(), __core_scsi3_locate_pr_reg() and\ncore_scsi3_alloc_registration(). When the parameter list spans more than\none page (PARAMETER LIST LENGTH \u003e 4096), transport_kmap_data_sg() uses\nvmap() and transport_kunmap_data_sg() does vunmap(), so the kernel virtual\naddress backing iport_ptr is torn down and every subsequent dereference is\na use-after-free read of the unmapped region.\n\nKeep the parameter list mapped until iport_ptr is no longer needed: drop\nthe early transport_kunmap_data_sg() and unmap once on the success path,\nright before returning. The error paths already unmap through the existing\n\"if (buf) transport_kunmap_data_sg(cmd)\" at the out: label, which now runs\non every post-map error exit because buf is no longer cleared early. Only\nreads of the mapping happen while spinlocks are held; the map and unmap\ncalls remain outside any lock. The sibling caller\ncore_scsi3_decode_spec_i_port() already uses the buffer before unmapping it\nand is left unchanged.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72083",
          "url": "https://www.suse.com/security/cve/CVE-2026-72083"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275535 for CVE-2026-72083",
          "url": "https://bugzilla.suse.com/1275535"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275536 for CVE-2026-72083",
          "url": "https://bugzilla.suse.com/1275536"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72083"
    },
    {
      "cve": "CVE-2026-72084",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72084"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: Bound PR-OUT TransportID parsing to the received buffer\n\ncore_scsi3_decode_spec_i_port() and core_scsi3_emulate_register_and_move()\nhand the raw PERSISTENT RESERVE OUT parameter buffer to\ntarget_parse_pr_out_transport_id() without telling it how many bytes are\nvalid.  For an iSCSI TransportID (FORMAT CODE 01b),\niscsi_parse_pr_out_transport_id() locates the \",i,0x\" ISID separator with\nan unbounded strstr() (and on the error path prints the name with a further\nunbounded \"%s\").  An initiator can submit a TransportID whose iSCSI name\ncontains neither a \",i,0x\" substring nor a NUL terminator, filling the\nparameter list to its end, so the scan runs off the end of the buffer.\n\nWhen the parameter list spans more than one page the buffer is a multi-page\nvmap (transport_kmap_data_sg()), so the over-read walks into the trailing\nvmalloc guard page and oopses (KASAN: vmalloc-out-of-bounds in strstr).  It\nis reachable by any fabric that delivers a PR OUT to a device exported\nthrough an iSCSI TPG, including a guest via vhost-scsi.\n\nPass the number of received bytes down to the parser and validate the iSCSI\nTransportID\u0027s own self-described length (ADDITIONAL LENGTH + 4) once, up\nfront: reject it if it is below the spc4r17 minimum or larger than the\nreceived buffer, then bound the separator search, the ISID walk and the\nname copy by that length.  This is the length check the callers already\nperform after the parse (core_scsi3_decode_spec_i_port() compares tid_len\nagainst tpdl, core_scsi3_emulate_register_and_move() validates it against\ndata_length), moved ahead of the scan.  Also drop the unbounded \"%s\" of the\nunterminated name.\n\nAdd per-format explicit name-length checks before copying into i_str,\nrather than silently truncating with min_t: for FORMAT CODE 00b reject if\nthe descriptor body (tid_len - 4 bytes) cannot fit in\ni_str[TRANSPORT_IQN_LEN]; for FORMAT CODE 01b reject if the name portion\n(from \u0026buf[4] up to the separator) cannot fit.  Both checks make the bounds\nintent explicit at each format branch.\n\nWhile here, also reject a FORMAT CODE 01b TransportID whose \",i,0x\"\nseparator sits at the very end of the descriptor: that leaves an empty ISID\nand points the returned port nexus pointer at buf + tid_len, one past the\ndescriptor, which the registration code (__core_scsi3_locate_pr_reg(),\n__core_scsi3_alloc_registration()) then dereferences as the ISID string --\nthe same over-read of the parameter buffer for a malformed descriptor.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72084",
          "url": "https://www.suse.com/security/cve/CVE-2026-72084"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275540 for CVE-2026-72084",
          "url": "https://bugzilla.suse.com/1275540"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275541 for CVE-2026-72084",
          "url": "https://bugzilla.suse.com/1275541"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72084"
    },
    {
      "cve": "CVE-2026-72098",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72098"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity: fix buffer overflow in FEC calculation\n\nThere\u0027s a buffer overflow in dm-verity-fec:\n\nif (neras \u0026\u0026 *neras \u003c= v-\u003efec-\u003eroots)\n\tfio-\u003eerasures[(*neras)++] = i;\n\nThis allows *neras to reach roots + 1 (the post-increment pushes it past\nroots). This value is then passed as no_eras to decode_rs8(). Inside the\nRS decoder (lib/reed_solomon/decode_rs.c:113-121), the erasure locator\npolynomial loop writes lambda[j] where j can reach nroots + 1 - one\nelement past the end of lambda[] (which is sized nroots + 1, valid\nindices 0..nroots). The out-of-bounds write lands on syn[0], corrupting\nthe syndrome buffer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72098",
          "url": "https://www.suse.com/security/cve/CVE-2026-72098"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275543 for CVE-2026-72098",
          "url": "https://bugzilla.suse.com/1275543"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275544 for CVE-2026-72098",
          "url": "https://bugzilla.suse.com/1275544"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72098"
    },
    {
      "cve": "CVE-2026-72129",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72129"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-rdma: handle inline data with a nonzero offset\n\nnvmet_rdma_use_inline_sg() maps the host-controlled inline data offset\ninto the per-command inline scatterlist.  The bounds check admits any\noffset with off + len \u003c= inline_data_size, but the mapping still assumes\nthe data begins in the first inline page:\n\n\tsg-\u003eoffset = off;\n\tsg-\u003elength = min_t(int, len, PAGE_SIZE - off);\n\nWhen a port is configured with inline_data_size \u003e PAGE_SIZE (settable up\nto max(SZ_16K, PAGE_SIZE)), an offset in (PAGE_SIZE, inline_data_size]\nmakes \"PAGE_SIZE - off\" underflow, so sg-\u003elength is set to ~4 GiB and\nthe block backend reads far past the first inline page.  num_pages(len)\nalso ignores the offset, so an in-bounds offset whose [off, off+len)\nspan crosses a page boundary under-counts the scatterlist.\n\nMap the offset properly: split it into a page index and an in-page\noffset, start the scatterlist at that page, and size the page count from\npage_off + len.  Because the request scatterlist may now start at\ninline_sg[page_idx] rather than inline_sg[0], generalize the inline-SGL\nidentity test in nvmet_rdma_release_rsp() to a range test; otherwise the\npersistent inline scatterlist is mistaken for an allocated one and\nnvmet_req_free_sgls() frees an inline page (and warns in\nfree_large_kmalloc()).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72129",
          "url": "https://www.suse.com/security/cve/CVE-2026-72129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275545 for CVE-2026-72129",
          "url": "https://bugzilla.suse.com/1275545"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275546 for CVE-2026-72129",
          "url": "https://bugzilla.suse.com/1275546"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72129"
    },
    {
      "cve": "CVE-2026-72136",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72136"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink\n\nxfrmi_changelink() operates on at most two netns, dev_net(dev) and the\ninterface link netns xi-\u003enet. They differ once the device is created in\nor moved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in xi-\u003enet can rewrite an interface that\nlives in xi-\u003enet.\n\nGate xfrmi_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72136",
          "url": "https://www.suse.com/security/cve/CVE-2026-72136"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277574 for CVE-2026-72136",
          "url": "https://bugzilla.suse.com/1277574"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277577 for CVE-2026-72136",
          "url": "https://bugzilla.suse.com/1277577"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72136"
    },
    {
      "cve": "CVE-2026-72157",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72157"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: thunderbolt: Fix frags[] overflow by bounding frame_count\n\ntbnet_poll() assembles a multi-frame ThunderboltIP packet into one skb. The\nfirst frame goes into the skb linear area and every further frame is added as\na page fragment.\n\n\tskb_add_rx_frag(skb, skb_shinfo(skb)-\u003enr_frags,\n\t\t\tpage, hdr_size, frame_size,\n\t\t\tTBNET_RX_PAGE_SIZE - hdr_size);\n\nA packet of frame_count frames therefore ends up with frame_count - 1\nfragments. tbnet_check_frame() only bounds the peer supplied frame_count to\nTBNET_RING_SIZE / 4 (64), which is far above MAX_SKB_FRAGS (17 by default). A\npeer that sends a packet of 19 or more small frames pushes nr_frags past\nMAX_SKB_FRAGS, so skb_add_rx_frag() writes past skb_shinfo()-\u003efrags[] and\ncorrupts memory after the shared info.\n\nTighten the start of packet bound to MAX_SKB_FRAGS + 1 so a packet can never\nproduce more fragments than frags[] can hold. This matches the recent skb\nfrags overflow fixes in other receive paths, for example f0813bcd2d9d (\"net:\nwwan: t7xx: fix potential skb-\u003efrags overflow in RX path\") and 600dc40554dc\n(\"net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()\").",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72157",
          "url": "https://www.suse.com/security/cve/CVE-2026-72157"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277544 for CVE-2026-72157",
          "url": "https://bugzilla.suse.com/1277544"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277545 for CVE-2026-72157",
          "url": "https://bugzilla.suse.com/1277545"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72157"
    },
    {
      "cve": "CVE-2026-72164",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72164"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: avoid moving extents to occupied clusters\n\nFor non-auto OCFS2_IOC_MOVE_EXT operations, userspace supplies a physical\nme_goal.  ocfs2_move_extent() initializes new_phys_cpos from that goal and\nexpects ocfs2_probe_alloc_group() to replace it with a free run in the\ntarget block group.\n\nThe probe currently leaves *phys_cpos unchanged if the scan reaches the\nend of the group without finding a free run.  An occupied goal at the last\nbit can therefore survive the probe and be passed to\n__ocfs2_move_extent(), which copies file data into a cluster still owned\nby another inode before the bitmap is updated.\n\nWhen the probe does find a free run, it also subtracts move_len from the\nending bit.  The start of an N-bit run ending at i is i - N + 1, so the\ncurrent calculation can report the bit immediately before the free run.\n\nClear *phys_cpos before scanning and use the correct free-run start. \nCallers already treat a zero result as -ENOSPC, so failed probes no longer\ncontinue with an occupied caller-controlled goal.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72164",
          "url": "https://www.suse.com/security/cve/CVE-2026-72164"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277553 for CVE-2026-72164",
          "url": "https://bugzilla.suse.com/1277553"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277868 for CVE-2026-72164",
          "url": "https://bugzilla.suse.com/1277868"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72164"
    },
    {
      "cve": "CVE-2026-72322",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72322"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: mcast: Fix potential UAF in MLD delayed work\n\nA race condition exists between device teardown and incoming MLD query\nprocessing, leading to a Use-After-Free in the MLD delayed work.\n\nDuring device destruction, the primary reference to inet6_dev is dropped,\nwhich can drop its refcount to 0. The actual freeing of inet6_dev memory\nis deferred via RCU.\n\nConcurrently, the packet receive path runs under RCU read lock and obtains\nthe inet6_dev pointer. Because the memory is RCU-protected, CPU-0 can\nsafely dereference inet6_dev even if its refcount has hit 0.\n\nHowever, if CPU-0 calls igmp6_event_query() and schedules delayed work, it\nattempts to acquire a reference using in6_dev_hold(). This increments the\nrefcount from 0 to 1, triggering a \"refcount_t: addition on 0\" warning.\nSince the inet6_dev memory is still scheduled to be freed after the RCU\ngrace period, the device is freed while the work is still scheduled.\nWhen the work runs, it accesses the freed memory, causing a kernel panic.\n\nFix this by using refcount_inc_not_zero() (via a new helper\nin6_dev_hold_safe()) to prevent acquiring a reference if the device is\nalready being destroyed. If the refcount is 0, we do not schedule the work.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72322",
          "url": "https://www.suse.com/security/cve/CVE-2026-72322"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275972 for CVE-2026-72322",
          "url": "https://bugzilla.suse.com/1275972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276284 for CVE-2026-72322",
          "url": "https://bugzilla.suse.com/1276284"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72322"
    },
    {
      "cve": "CVE-2026-72323",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72323"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: igmp: Fix potential UAF in igmp_gq_start_timer()\n\nA race condition exists between device teardown (inetdev_destroy) and\nincoming IGMP query processing (igmp_rcv), leading to a Use-After-Free\nin the IGMP timer callback.\n\nDuring device destruction, inetdev_destroy() drops the primary reference\nto in_device, which can drop its refcount to 0. The actual freeing of\nin_device memory is deferred via RCU (using call_rcu()).\n\nConcurrently, igmp_rcv() runs under RCU read lock and obtains the\nin_device pointer. Because the memory is RCU-protected, CPU-0 can safely\ndereference in_device even if its refcount has hit 0.\n\nHowever, if CPU-0 calls igmp_gq_start_timer() and re-arms the timer, it\nattempts to acquire a reference using in_dev_hold(). This increments the\nrefcount from 0 to 1, triggering a \"refcount_t: addition on 0\" warning.\nSince the in_device memory is still scheduled to be freed after the RCU\ngrace period (as the free callback does not check the refcount again),\nthe device is freed while the timer is still armed. When the timer\nexpires, it accesses the freed memory, causing a kernel panic.\n\nFix this by using refcount_inc_not_zero() (via a new helper\nin_dev_hold_safe()) to prevent acquiring a reference if the device is\nalready being destroyed. If the refcount is 0, we do not arm the timer.\n\nA similar issue in IPv6 MLD is fixed in a subsequent patch.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72323",
          "url": "https://www.suse.com/security/cve/CVE-2026-72323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275985 for CVE-2026-72323",
          "url": "https://bugzilla.suse.com/1275985"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275986 for CVE-2026-72323",
          "url": "https://bugzilla.suse.com/1275986"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72323"
    },
    {
      "cve": "CVE-2026-72339",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72339"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nqede: fix off-by-one in BD ring consumption on build_skb failure\n\nqede_rx_build_skb() and qede_tpa_rx_build_skb() do not check for a\nNULL return from qede_build_skb(). When it returns NULL under memory\npressure, the functions still consume a BD from the ring before\nreturning NULL. The callers then recycle additional BDs, resulting in\none extra BD being consumed (off-by-one). This desynchronizes the BD\nring, which can corrupt DMA page reference counts and lead to SLUB\nfreelist corruption.\n\nCommit 4e910dbe3650 (\"qede: confirm skb is allocated before using\")\nadded a NULL check inside qede_build_skb() to prevent a NULL pointer\ndereference, but did not address the missing NULL checks in the\ncallers, making this off-by-one reachable.\n\nFix this by adding NULL checks for the return value of\nqede_build_skb() in both qede_rx_build_skb() and\nqede_tpa_rx_build_skb(), returning NULL immediately before any BD ring\nmanipulation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72339",
          "url": "https://www.suse.com/security/cve/CVE-2026-72339"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276006 for CVE-2026-72339",
          "url": "https://bugzilla.suse.com/1276006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276318 for CVE-2026-72339",
          "url": "https://bugzilla.suse.com/1276318"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72339"
    },
    {
      "cve": "CVE-2026-72348",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72348"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop\n\nThe ah, hbh and rt matches check that the fixed extension header is\npresent, then use the header length field to derive the advertised\nextension header length for matching.\n\nFor the ah match, add the missing advertised-length check. For hbh\nand rt, update the existing advertised-length checks. In all three\ncases, set hotdrop to true before returning false when the advertised\nextension header length exceeds the available skb data.\n\nReturning false treats the packet as a rule mismatch. Set hotdrop to\ntrue and drop malformed packets so they cannot bypass rules intended\nto drop packets with these IPv6 extension headers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72348",
          "url": "https://www.suse.com/security/cve/CVE-2026-72348"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276007 for CVE-2026-72348",
          "url": "https://bugzilla.suse.com/1276007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276008 for CVE-2026-72348",
          "url": "https://bugzilla.suse.com/1276008"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72348"
    },
    {
      "cve": "CVE-2026-72351",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72351"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngue: validate REMCSUM private option length\n\nGUE private flags can indicate that remote checksum offload metadata is\npresent. The private flags field itself is accounted for by\nguehdr_flags_len(), but guehdr_priv_flags_len() currently returns 0 even\nwhen GUE_PFLAG_REMCSUM is set.\n\nThis lets a packet with only the private flags field pass\nvalidate_gue_flags(), after which gue_remcsum() and gue_gro_remcsum()\nread the missing REMCSUM start/offset fields from the following bytes.\n\nAccount for GUE_PLEN_REMCSUM when GUE_PFLAG_REMCSUM is present so that\nmalformed packets are rejected during option validation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72351",
          "url": "https://www.suse.com/security/cve/CVE-2026-72351"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276009 for CVE-2026-72351",
          "url": "https://bugzilla.suse.com/1276009"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276010 for CVE-2026-72351",
          "url": "https://bugzilla.suse.com/1276010"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72351"
    },
    {
      "cve": "CVE-2026-72383",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72383"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix addr_wq_timer race in sctp_free_addr_wq()\n\nsctp_free_addr_wq() previously removed addr_wq_timer using timer_delete()\nwhile holding addr_wq_lock. However, timer_delete() does not guarantee that\na currently running timer handler has completed.\n\nThis allows a race with sctp_addr_wq_timeout_handler(), where the handler\nmay still run after addr_waitq has been freed, acquire addr_wq_lock, and\naccess freed memory, leading to a use-after-free.\n\nFix this by calling timer_shutdown_sync() before taking addr_wq_lock.  This\nguarantees that any in-flight timer handler has finished and prevents the\ntimer from being re-armed during teardown, making subsequent cleanup safe.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72383",
          "url": "https://www.suse.com/security/cve/CVE-2026-72383"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277857 for CVE-2026-72383",
          "url": "https://bugzilla.suse.com/1277857"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283919 for CVE-2026-72383",
          "url": "https://bugzilla.suse.com/1283919"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72383"
    },
    {
      "cve": "CVE-2026-72398",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72398"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: add INIT verification after cookie unpacking\n\nIn SCTP handshake, the INIT chunk is initially processed by the server\nand embedded into the cookie carried in INIT-ACK. The client then\nreturns this cookie via COOKIE-ECHO, where the server unpacks it and\nreconstructs the original INIT chunk.\n\nWhen cookie authentication is enabled, the cookie contents are protected\nagainst tampering, so reusing the unpacked INIT without re-verification\nis safe.\n\nHowever, when cookie authentication is disabled, the reconstructed INIT\ncan no longer be trusted. In this case, the INIT must be explicitly\nvalidated after unpacking to avoid processing potentially tampered data.\n\nAdd sctp_verify_init() checks after cookie unpacking in COOKIE-ECHO\nprocessing paths (sctp_sf_do_5_1D_ce() and sctp_sf_do_5_2_4_dupcook())\nwhen cookie_auth_enable is disabled. On failure, the new association is\nfreed and the packet is discarded.\n\nAlso tighten cookie validation in sctp_unpack_cookie() by verifying the\nembedded chunk type is SCTP_CID_INIT before treating it as an INIT\nchunk.\n\nFinally, update sctp_verify_init() to validate parameter bounds using\nthe actual embedded INIT length instead of chunk-\u003echunk_end, since the\nINIT stored in COOKIE-ECHO may not span the entire chunk buffer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72398",
          "url": "https://www.suse.com/security/cve/CVE-2026-72398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276381 for CVE-2026-72398",
          "url": "https://bugzilla.suse.com/1276381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276484 for CVE-2026-72398",
          "url": "https://bugzilla.suse.com/1276484"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72398"
    },
    {
      "cve": "CVE-2026-72434",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72434"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: make sure gc is properly stopped\n\nSashiko noticed that when destroying a set,\ncancel_delayed_work_sync() was called while gc\ncalls queue_delayed_work() unconditionally which\ncan lead not to properly shutting down the gc.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72434",
          "url": "https://www.suse.com/security/cve/CVE-2026-72434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278054 for CVE-2026-72434",
          "url": "https://bugzilla.suse.com/1278054"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278055 for CVE-2026-72434",
          "url": "https://bugzilla.suse.com/1278055"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72434"
    },
    {
      "cve": "CVE-2026-72449",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72449"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: fix list_del corruption in kfd_criu_resume_svm\n\nThe cleanup tail of kfd_criu_resume_svm() walks\nsvms-\u003ecriu_svm_metadata_list and kfree()s each struct criu_svm_metadata\nwithout removing it from the list. The list head is left pointing at\nfreed kmalloc-96 objects.\n\nA second AMDKFD_IOC_CRIU_OP from the same process re-enters: list_empty()\nreads the dangling -\u003enext (use-after-free), the loop walks freed entries,\nand each is kfree()\u0027d again (double-free). This is reachable by an\nunprivileged render-group user via /dev/kfd with no capabilities required.\n\nAdd list_del() before the kfree() so the list is properly emptied. The\nlist_for_each_entry_safe() iterator already caches the next pointer, so\nunlinking during the walk is safe.\n\n(cherry picked from commit 6322d278a298e2c1430b9d2697743d3a04b788b1)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72449",
          "url": "https://www.suse.com/security/cve/CVE-2026-72449"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278108 for CVE-2026-72449",
          "url": "https://bugzilla.suse.com/1278108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278109 for CVE-2026-72449",
          "url": "https://bugzilla.suse.com/1278109"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72449"
    },
    {
      "cve": "CVE-2026-74267",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74267"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n\nWhenever codel drops packets during peek, it calls\nqdisc_tree_reduce_backlog. An issue arises because it calls\nqdisc_tree_reduce_backlog before it reincrements the qlen. If qlen drops\nto zero, but peek returns an skb, the parent\u0027s qlen_notify callback will\nbe executed even though codel still has 1 packet on the queue and, thus,\nwill mistakenly deactivate the parent\u0027s class causing issues like a wild\nmemory access when qfq has codel as a child:\n\n[   36.339843][  T370] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI\n[   36.340408][  T370] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127]\n[   36.340737][  T370] CPU: 2 UID: 0 PID: 370 Comm: tc Not tainted 7.1.0-rc5-00287-g66e13b626592 #87 PREEMPT(full)\n[   36.341113][  T370] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011\n[   36.341357][  T370] RIP: 0010:qfq_deactivate_agg (include/linux/list.h:1029 (discriminator 2) include/linux/list.h:1043 (discriminator 2) net/sched/sch_qfq.c:1369 (discriminator 2) net/sched/sch_qfq.c:1395 (discriminator 2)) sch_qfq\n[   36.342221][  T370] RSP: 0018:ffff8881100ef370 EFLAGS: 00010216\n[   36.342422][  T370] RAX: 0000000000000000 RBX: ffff8881058a9568 RCX: dffffc0000000000\n[   36.342664][  T370] RDX: 1ffff11021064dc3 RSI: ffff888108326e00 RDI: dffffc0000000000\n[   36.342905][  T370] RBP: ffff8881058a8280 R08: dead000000000122 R09: 1bd5a00000000024\n[   36.343140][  T370] R10: fffffbfff2940329 R11: fffffbfff2940329 R12: 0000000000000000\n[   36.343383][  T370] R13: dead000000000100 R14: ffff8881058a9580 R15: ffff8881058a9578\n[   36.343631][  T370] FS:  00007fc04b0ca780(0000) GS:ffff888184fef000(0000) knlGS:0000000000000000\n[   36.343911][  T370] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[   36.344116][  T370] CR2: 0000557c02c02000 CR3: 000000010e0ba000 CR4: 0000000000750ef0\n[   36.344359][  T370] PKRU: 55555554\n[   36.344481][  T370] Call Trace:\n...\n[   36.345054][  T370] qfq_reset_qdisc (net/sched/sch_qfq.c:357 net/sched/sch_qfq.c:1487) sch_qfq\n[   36.345222][  T370]  qdisc_reset (net/sched/sch_generic.c:1057)\n[   36.345503][  T370]  __qdisc_destroy (net/sched/sch_generic.c:1096)\n[   36.345677][  T370]  qdisc_graft (net/sched/sch_api.c:1062 net/sched/sch_api.c:1053 net/sched/sch_api.c:1159)\n[   36.346335][  T370]  tc_get_qdisc (net/sched/sch_api.c:1528 net/sched/sch_api.c:1556)\n\nFix this by only calling qdisc_tree_reduce_backlog in peek after the\nqlen is restored.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74267",
          "url": "https://www.suse.com/security/cve/CVE-2026-74267"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276519 for CVE-2026-74267",
          "url": "https://bugzilla.suse.com/1276519"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276524 for CVE-2026-74267",
          "url": "https://bugzilla.suse.com/1276524"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74267"
    },
    {
      "cve": "CVE-2026-74283",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74283"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: require net admin for TIPCv2 netlink mutators\n\nTIPCv2 registers mutating generic-netlink operations without admin\npermission flags. Generic netlink only checks CAP_NET_ADMIN when an\noperation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local\nunprivileged process can currently change TIPC state through commands\nsuch as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and\nbearer enable/disable.\n\nThe legacy TIPC netlink API already checks netlink_net_capable(...,\nCAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators\nthe equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which\nmaps to the same namespace-aware CAP_NET_ADMIN check that\nnetlink_net_capable() performs, so the behaviour matches the legacy\npath and keeps working for CAP_NET_ADMIN holders in a non-initial user\nnamespace (containers).\n\nA QEMU/KASAN repro run as uid/gid 65534 with zero effective\ncapabilities previously succeeded in changing the network id and node\nidentity, setting and flushing key material, and enabling/disabling a\nUDP bearer. With this patch applied the same operations fail with\n-EPERM.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74283",
          "url": "https://www.suse.com/security/cve/CVE-2026-74283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276475 for CVE-2026-74283",
          "url": "https://bugzilla.suse.com/1276475"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281133 for CVE-2026-74283",
          "url": "https://bugzilla.suse.com/1281133"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74283"
    },
    {
      "cve": "CVE-2026-74330",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74330"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nconfigfs: fix lockless traversals of -\u003es_children\n\nHaving the parent directory locked protects entries from removal\nby another thread, but it does *not* protect cursors from being\nmoved around by lseek() - or freed, for that matter.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74330",
          "url": "https://www.suse.com/security/cve/CVE-2026-74330"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277129 for CVE-2026-74330",
          "url": "https://bugzilla.suse.com/1277129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280275 for CVE-2026-74330",
          "url": "https://bugzilla.suse.com/1280275"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74330"
    },
    {
      "cve": "CVE-2026-74388",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74388"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Fix UAF at handling events with embedded SysEx data\n\nThe OSS sequencer processes the input MIDI bytes into a sequencer\nevent to be dispatched later (in snd_seq_oss_midi_putc() called from\nsnd_seq_oss_process_event()).  When it\u0027s a SysEx data, the event\nrecord contains data.ext.ptr pointer to the original SysEx bytes, and\nthe referred data is copied into the pool afterwards at dispatching.\nThe problem is that, if the sequencer port gets closed concurrently\nbefore the dispatch, the OSS sequencer core also releases the\nresources (in snd_seq_oss_midi_check_exit_port()), while the pending\nevent may hold a stale pointer, eventually leading to a UAF at a later\ndispatch.\n\nFortunately, there is already a refcounting mechanism (snd_use_lock_t)\nfor the OSS MIDI device access, and for addressing the issue above, we\njust need to extend the refcount until the event gets dispatched.\n\nThis patch extends snd_seq_oss_process_event() to give back the\nrefcount object, which is in turn released after calling the sequencer\ndispatcher with the given event in the caller side.\n\nAccording to the original report, KASAN report as below:\n\nKASAN slab-use-after-free in snd_seq_event_dup+0x40c/0x470\nRIP: 0033:0x7f2cb66a6340\nRead of size 6\nCall trace:\n  dump_stack_lvl+0x73/0xb0 (?:?)\n  print_report+0xd1/0x650 (?:?)\n  srso_alias_return_thunk+0x5/0xfbef5 (?:?)\n  __virt_addr_valid+0x1a7/0x340 (?:?)\n  kasan_complete_mode_report_info+0x64/0x200 (?:?)\n  kasan_report+0xf7/0x130 (?:?)\n  snd_seq_event_dup+0x40c/0x470 (?:?)\n  kasan_check_range+0x10c/0x1c0 (?:?)\n  __asan_memcpy+0x27/0x70 (?:?)\n  snd_seq_event_dup+0x9/0x470 (?:?)\n  snd_seq_client_enqueue_event+0x139/0x240 (?:?)\n  _raw_spin_unlock_irqrestore+0x4b/0x60 (?:?)\n  snd_seq_kernel_client_enqueue+0x102/0x120 (?:?)\n  snd_seq_oss_write+0x416/0x4e0 (?:?)\n  apparmor_file_permission+0x20/0x30 (?:?)\n  odev_write+0x3b/0x60 (?:?)\n  vfs_write+0x1ce/0x850 (?:?)\n  lock_release+0xc8/0x2a0 (?:?)\n  __kasan_check_write+0x18/0x20 (?:?)\n  __mutex_unlock_slowpath+0x129/0x510 (?:?)\n  ksys_write+0xe1/0x180 (?:?)\n  mutex_unlock+0x16/0x20 (?:?)\n  odev_ioctl+0x65/0xc0 (?:?)\n  __x64_sys_write+0x46/0x60 (?:?)\n  x64_sys_call+0x7d/0x20d0 (?:?)\n  do_syscall_64+0xc1/0x360 (arch/x86/entry/syscall_64.c:87)\n  entry_SYSCALL_64_after_hwframe+0x77/0x7f (?:?)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74388",
          "url": "https://www.suse.com/security/cve/CVE-2026-74388"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278253 for CVE-2026-74388",
          "url": "https://bugzilla.suse.com/1278253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278254 for CVE-2026-74388",
          "url": "https://bugzilla.suse.com/1278254"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74388"
    },
    {
      "cve": "CVE-2026-74398",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74398"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD\n\naddrconf_dad_failure() transitions ifp-\u003estate from DAD to POSTDAD\nvia addrconf_dad_end(), which drops ifp-\u003elock on return.  The lock\nis re-acquired after net_info_ratelimited().  A concurrent\nipv6_del_addr() can take the lock in that window, set ifp-\u003estate\nto DEAD and run list_del_rcu(\u0026ifp-\u003eif_list).\n\naddrconf_dad_failure() then overwrites DEAD with ERRDAD at errdad:\nand schedules a new dad_work.  The work calls ipv6_del_addr()\nagain, hitting the already-poisoned list entry:\n\n  general protection fault: 0000 [#1] SMP NOPTI\n  CPU: 4 PID: 217 Comm: kworker/4:1\n  Workqueue: ipv6_addrconf addrconf_dad_work\n  RIP: 0010:ipv6_del_addr+0xe9/0x280\n  RAX: dead000000000122\n  Call Trace:\n   addrconf_dad_stop+0x113/0x140\n   addrconf_dad_work+0x28c/0x430\n   process_one_work+0x1eb/0x3b0\n   worker_thread+0x4d/0x400\n   kthread+0x104/0x140\n   ret_from_fork+0x35/0x40\n\nFold the addrconf_dad_end() logic into addrconf_dad_failure() under\na single ifp-\u003elock critical section.  The STABLE_PRIVACY branch\ntemporarily drops ifp-\u003elock around address regeneration, so at\nlock_errdad: verify the state is still POSTDAD before transitioning\nto ERRDAD; bail out otherwise to avoid overwriting a state set by\nanother path while the lock was released.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74398",
          "url": "https://www.suse.com/security/cve/CVE-2026-74398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277410 for CVE-2026-74398",
          "url": "https://bugzilla.suse.com/1277410"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277411 for CVE-2026-74398",
          "url": "https://bugzilla.suse.com/1277411"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74398"
    },
    {
      "cve": "CVE-2026-74406",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74406"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().\n\nudp_tunnel_sock_release() could set sk-\u003esk_user_data to NULL\nwhile vxlan_gro_prepare_receive() is running.\n\nLet\u0027s check if rcu_dereference_sk_user_data() is NULL after\nskb_gro_remcsum_init().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74406",
          "url": "https://www.suse.com/security/cve/CVE-2026-74406"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276395 for CVE-2026-74406",
          "url": "https://bugzilla.suse.com/1276395"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280096 for CVE-2026-74406",
          "url": "https://bugzilla.suse.com/1280096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74406"
    },
    {
      "cve": "CVE-2026-74443",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74443"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: bound DMA command body size against suffix pointer\n\nvmw_cmd_dma() locates the DMA suffix at\n\n\t(unsigned long) \u0026cmd-\u003ebody + header-\u003esize - sizeof(*suffix)\n\nwithout checking that header-\u003esize is large enough to contain both\ncmd-\u003ebody and the suffix.  An undersized header makes the suffix\npointer underflow back into the previous command in the bounce\nbuffer.  The verifier later writes suffix-\u003emaximumOffset, clobbering\nverified fields of an already-relocated earlier command -- a TOCTOU\non the device-visible command stream that lets one command rewrite\nanother\u0027s GMR id, surface id, or other authenticated fields.\n\nReject the command if the body is too small for the suffix to fit.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74443",
          "url": "https://www.suse.com/security/cve/CVE-2026-74443"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278210 for CVE-2026-74443",
          "url": "https://bugzilla.suse.com/1278210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278243 for CVE-2026-74443",
          "url": "https://bugzilla.suse.com/1278243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74443"
    },
    {
      "cve": "CVE-2026-74444",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74444"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: validate DRAW_PRIMITIVES header size before division\n\nvmw_cmd_draw() computes\n\n\tmaxnum = (header-\u003esize - sizeof(cmd-\u003ebody)) / sizeof(*decl);\n\nwhere header-\u003esize is u32 and is taken straight from the user-supplied\ncommand stream.  When header-\u003esize is less than sizeof(cmd-\u003ebody) the\nunsigned subtraction wraps to nearly 4 GiB, producing a huge maxnum.\nAny user-controlled cmd-\u003ebody.numVertexDecls then passes the bound and\nthe loop dereferences decl[i] far past the end of the kernel command\nbounce buffer, producing an out-of-bounds read of kernel memory.\n\nReject undersized headers up front.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74444",
          "url": "https://www.suse.com/security/cve/CVE-2026-74444"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278211 for CVE-2026-74444",
          "url": "https://bugzilla.suse.com/1278211"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280092 for CVE-2026-74444",
          "url": "https://bugzilla.suse.com/1280092"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74444"
    },
    {
      "cve": "CVE-2026-74453",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74453"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Zero the tile state data array before each BIN job\n\nThe binner BO is a single 16MB buffer split into 512KB slots that are\nhanded out to jobs at submission time and recycled as jobs complete,\nwithout ever being cleared. Each slot holds the job\u0027s Tile State Data\nArray (TSDA) at its start, followed by the tile allocation pool.\n\nWhile the tile allocation pool is only walked by the render thread\nthrough branches the binner generated during the current job, the\nTSDA is the PTB\u0027s own per-tile bookkeeping and is consumed by the\nhardware itself. Although the kernel sets the \"Auto-initialise Tile\nState Data Array\" flag in the tile binning mode configuration, the\nPTB demonstrably still acts on stale tile state left by the slot\u0027s\nprevious user: the binner ends up creating invalid command streams\nwith invalid primitive streams and branches, which can cause GPU hangs\nas observed in [1][2].\n\nZero the TSDA when the job\u0027s binning slot is configured. This clears\n48 bytes per tile (~24KB for a 1080p frame) in the submission path, and\nguarantees the PTB never sees another job\u0027s tile state.\n\nThe tile count is only checked for being non-zero today, so the 8-bit\nfields it comes from can describe a tile state array almost six times\nlarger than the slot it has to live in. Bound it before the slot is\nhanded out, since such size decides how much of the slot is left for\nthe tile alloc pool.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74453",
          "url": "https://www.suse.com/security/cve/CVE-2026-74453"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278178 for CVE-2026-74453",
          "url": "https://bugzilla.suse.com/1278178"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280258 for CVE-2026-74453",
          "url": "https://bugzilla.suse.com/1280258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74453"
    },
    {
      "cve": "CVE-2026-74469",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74469"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: prevent peer transport count overflow\n\nsctp_assoc_add_peer() increments the association\u0027s 16-bit transport_count\nfor every new unique peer. Adding the 65,536th transport wraps the count to\nzero.\n\nSCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload,\nthen copies one sockaddr_storage for every entry in transport_addr_list.\nAfter the wrap, a diagnostic dump reserves an empty payload and writes\n8 MiB of peer addresses past the skb tail.\n\nReject a new unique peer when transport_count has reached U16_MAX. Perform\nthe check after the existing-peer lookup so a duplicate address continues\nto return its existing transport at the limit.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74469",
          "url": "https://www.suse.com/security/cve/CVE-2026-74469"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277792 for CVE-2026-74469",
          "url": "https://bugzilla.suse.com/1277792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280693 for CVE-2026-74469",
          "url": "https://bugzilla.suse.com/1280693"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282936 for CVE-2026-74469",
          "url": "https://bugzilla.suse.com/1282936"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74469"
    },
    {
      "cve": "CVE-2026-74473",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74473"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: use pskb_network_may_pull() in route_shortcircuit()\n\nroute_shortcircuit() currently calls pskb_may_pull(skb, sizeof(struct iphdr))\n(or ipv6hdr), which checks if bytes are available starting from skb-\u003edata.\n\nHowever, in vxlan_xmit(), skb-\u003edata points to the MAC header, so\nskb_network_offset(skb) is ETH_HLEN (14 bytes). Using pskb_may_pull(skb, 20)\nonly checks 20 bytes from skb-\u003edata (which is 14 bytes MAC header + 6 bytes of\nIP header), leaving the rest of the IP header potentially un-pulled in non-linear\nfrags. Subsequent dereferences of ip_hdr(skb)-\u003edaddr can read beyond the pulled\nlinear buffer length.\n\nFix this by using pskb_network_may_pull(), which adds skb_network_offset(skb) to\nthe length check to ensure the full network header is present in the linear buffer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74473",
          "url": "https://www.suse.com/security/cve/CVE-2026-74473"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276340 for CVE-2026-74473",
          "url": "https://bugzilla.suse.com/1276340"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276356 for CVE-2026-74473",
          "url": "https://bugzilla.suse.com/1276356"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74473"
    },
    {
      "cve": "CVE-2026-74479",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74479"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: pktgen: fix proc entry use-after-free\n\npktgen_change_name() replaces pkt_dev-\u003eentry while holding t-\u003eif_lock.\npktgen_remove_device() removes the same entry before\n_rem_dev_from_if_list() takes that lock.\n\nThis allows the following interleaving:\n\n  CPU 0 (NETDEV_CHANGENAME)       CPU 1 (kpktgend)\n  if_lock(t)\n  proc_remove(pkt_dev-\u003eentry)\n                                  proc_remove(pkt_dev-\u003eentry)\n  pkt_dev-\u003eentry = proc_create_data(...)\n  if_unlock(t)\n\nThe kthread can pass the stale proc_dir_entry to proc_remove() after the\nrename path has freed it. A reproducer with a widened race window reports:\n\n  BUG: KASAN: slab-use-after-free in proc_remove+0x78/0x80\n  Read of size 8 at addr ffff8881478fea70 by task kpktgend_0/67\n  Call Trace:\n   proc_remove+0x78/0x80\n   pktgen_remove_device.isra.0+0x11c/0x4c0\n   pktgen_thread_worker+0x1214/0x6bc0\n   kthread+0x2c6/0x3b0\n  Allocated by task 95:\n   __proc_create+0x204/0x790\n   proc_create_data+0x72/0xe0\n   pktgen_thread_write+0xd61/0x1510\n  Freed by task 28:\n   kmem_cache_free+0xcb/0x3d0\n   proc_free_inode+0x5b/0x80\n   rcu_core+0x50a/0x1850\n  The buggy address belongs to the object at ffff8881478fea00\n   which belongs to the cache proc_dir_entry of size 192\n\nMove proc_remove() into the if_lock-protected list removal helper. Keep it\nbefore list_del_rcu() to preserve the ordering required by add_device().\nThe rename path must then finish replacing the entry before removal, or\nit observes that the device is no longer on the list.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74479",
          "url": "https://www.suse.com/security/cve/CVE-2026-74479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276354 for CVE-2026-74479",
          "url": "https://bugzilla.suse.com/1276354"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277290 for CVE-2026-74479",
          "url": "https://bugzilla.suse.com/1277290"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74479"
    },
    {
      "cve": "CVE-2026-74480",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74480"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: stop fast-leave after deleting a port group\n\nbr_multicast_leave_group() iterates mp-\u003eports with pp = \u0026p-\u003enext in\nits fast-leave path. After br_multicast_del_pg() removes p,\ncontinuing the loop advances pp through the deleted entry.\n\nIf multicast-to-unicast was enabled, the bridge can hold multiple port\ngroups for the same port and group with different source MAC\naddresses. Once multicast-to-unicast is disabled,\nbr_port_group_equal() matches those entries by port only. A fast leave\ncan then delete one entry and continue from its stale next pointer,\nleaving mp-\u003eports pointing at a deleted port group.\n\nFast leave only needs to remove one matching port group. Break after\nbr_multicast_del_pg() so the loop stops before dereferencing the\nremoved entry.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74480",
          "url": "https://www.suse.com/security/cve/CVE-2026-74480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276353 for CVE-2026-74480",
          "url": "https://bugzilla.suse.com/1276353"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279853 for CVE-2026-74480",
          "url": "https://bugzilla.suse.com/1279853"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74480"
    },
    {
      "cve": "CVE-2026-74492",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74492"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: do not update comments from kernel-side hash adds\n\nmtype_resize() copies comment pointers with memcpy(), not the comment\nobjects themselves. During the window after an entry has been copied but\nbefore the table swap and backlog replay, the old table is still\npublished for packet-side updates while the replacement-table entry\nalready holds the same ip_set_comment_rcu pointer.\n\nIf xt_SET --add-set ... --exist hits that old entry in this window,\nmtype_add() calls ip_set_init_comment() even though packet-side adds\ncarry no comment payload. That call frees the shared comment through the\nold entry, so the replacement-table entry now holds a stale pointer.\nWhen the queued add is replayed on the new table, mtype_add() calls\nip_set_init_comment() again and strlen() dereferences the stale pointer.\n\nFix this in mtype_add() by skipping ip_set_init_comment() when\next-\u003etarget marks a packet-side add. Userspace adds still update\ncomments, while packet-side adds can no longer free comment storage\nshared with a resize copy.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74492",
          "url": "https://www.suse.com/security/cve/CVE-2026-74492"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276337 for CVE-2026-74492",
          "url": "https://bugzilla.suse.com/1276337"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280903 for CVE-2026-74492",
          "url": "https://bugzilla.suse.com/1280903"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74492"
    },
    {
      "cve": "CVE-2026-74493",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74493"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix socket use-after-free during link group termination\n\n__smc_lgr_terminate() drops conns_lock after finding a connection in\nlgr-\u003econns_all, but before taking a reference on its socket. The connection\nis embedded in the socket, and its registration reference protects it only\nwhile the connection remains in the tree.\n\nA concurrent close can unregister the connection and drop that reference,\nfreeing the socket before the termination worker reaches sock_hold().\n\nThe race is reachable when close overlaps link group termination.\nLocal stress testing reproduced the use-after-free and KASAN reported:\n\n  BUG: KASAN: slab-use-after-free in __smc_lgr_terminate.part.0 [smc]\n  Write of size 4 by task kworker/3:3\n  Workqueue: events smc_lgr_terminate_work [smc]\n  __smc_lgr_terminate.part.0 [smc]\n\nThe socket was allocated by smc_create(), freed through\nslab_free_after_rcu_debug(), and was followed by:\n\n  refcount_t: addition on 0; use-after-free.\n  __smc_lgr_terminate.part.0 [smc]\n\nTake the socket reference while conns_lock still protects the tree entry.\nThe unregister path then cannot drop the last reference until termination\nhas finished using the socket.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74493",
          "url": "https://www.suse.com/security/cve/CVE-2026-74493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276338 for CVE-2026-74493",
          "url": "https://bugzilla.suse.com/1276338"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276358 for CVE-2026-74493",
          "url": "https://bugzilla.suse.com/1276358"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74493"
    },
    {
      "cve": "CVE-2026-74540",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74540"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp\n\nl2cap_le_connect_rsp() obtains a channel via\n__l2cap_get_chan_by_ident() but neither holds a reference nor uses\nl2cap_chan_hold_unless_zero() before locking and operating on it.\nA concurrent l2cap_chan_del() triggered by a remote disconnect can\nfree the channel between the lookup and l2cap_chan_lock(), causing\na use-after-free.\n\nThe BR/EDR counterpart l2cap_connect_rsp() and the sibling handler\nl2cap_le_command_rej() already use l2cap_chan_hold_unless_zero()\nto safely hold a reference, but l2cap_le_connect_rsp() was left\nunprotected.\n\nFix by adding l2cap_chan_hold_unless_zero() after the ident lookup\nand l2cap_chan_put() on the exit path, consistent with other L2CAP\nresponse handlers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74540",
          "url": "https://www.suse.com/security/cve/CVE-2026-74540"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275681 for CVE-2026-74540",
          "url": "https://bugzilla.suse.com/1275681"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275699 for CVE-2026-74540",
          "url": "https://bugzilla.suse.com/1275699"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74540"
    },
    {
      "cve": "CVE-2026-74556",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74556"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer\n\niscsi_tcp_hdr_dissect() receives the data segment of several PDU types\ninto the fixed-size conn-\u003edata buffer, which is allocated for\nISCSI_DEF_MAX_RECV_SEG_LEN (8192) bytes.  For the LOGIN_RSP, TEXT_RSP,\nREJECT and ASYNC_EVENT opcodes the dissect path already rejects a PDU\nwhose DataSegmentLength exceeds that buffer.\n\nThe SCSI Command Response (ISCSI_OP_SCSI_CMD_RSP) path also copies its\ndata segment (sense/response data) into conn-\u003edata via\niscsi_tcp_data_recv_prep(), but it does so without the same check.  The\nonly upstream bound on in.datalen is conn-\u003emax_recv_dlength, the\ninitiator\u0027s advertised MaxRecvDataSegmentLength, which is commonly\nnegotiated well above 8192 (open-iscsi defaults to 262144).  A target\nthat returns a SCSI Response with a DataSegmentLength between 8193 and\nmax_recv_dlength therefore overflows the 8192-byte conn-\u003edata buffer.\n\nOnce the same bound applies, ISCSI_OP_SCSI_CMD_RSP is handled exactly\nlike those responses: bound the data segment, receive it into conn-\u003edata\nwhen present, and otherwise complete the PDU with no data.  Fold the\nopcode into that case group rather than duplicating the check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74556",
          "url": "https://www.suse.com/security/cve/CVE-2026-74556"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275696 for CVE-2026-74556",
          "url": "https://bugzilla.suse.com/1275696"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275700 for CVE-2026-74556",
          "url": "https://bugzilla.suse.com/1275700"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74556"
    },
    {
      "cve": "CVE-2026-74586",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74586"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: clear new_transport when removing a peer\n\nsctp_process_asconf_param() stores a newly added peer transport in\nasoc-\u003enew_transport. After all parameters in the ASCONF chunk have been\nprocessed, sctp_sf_do_asconf() uses this pointer to send a HEARTBEAT to the\nnew transport.\n\nAn authenticated ASCONF from a remote SCTP peer can add a transport and\nremove it again with a wildcard DEL-IP parameter in the same chunk. The\nwildcard deletion preserves the transport on which the ASCONF arrived, but\nremoves the newly added transport through\nsctp_assoc_del_nonprimary_peers(). The removal does not clear\nasoc-\u003enew_transport, leaving it pointing to the removed transport.\n\nsctp_sf_do_asconf() then creates a HEARTBEAT whose chunk-\u003etransport points\nto the removed transport without holding a transport reference. During\nlocal address replacement, src_out_of_asoc_ok keeps this HEARTBEAT on\ncontrol_chunk_list. After the transport is freed by RCU, a successful\nASCONF_ACK for the replacement address releases the queued HEARTBEAT and\nsctp_outq_select_transport() reads the freed transport\u0027s state.\n\nThe issue was found during a static audit of SCTP objects. With an\nauthenticated peer, the reproducer triggered the same KASAN report in 2\nof 2 unpatched runs on a KASAN-enabled netdev/main kernel:\n\n  BUG: KASAN: slab-use-after-free in sctp_outq_select_transport\n  Read of size 4 at addr ffff88800b9bd95c by task python3/197\n\n  Call Trace:\n   sctp_outq_select_transport+0x549/0x8b0 [sctp]\n   sctp_outq_flush+0x306/0x2c60 [sctp]\n   sctp_transport_immediate_rtx+0xaf/0x260 [sctp]\n   sctp_process_asconf_ack+0xa48/0xf70 [sctp]\n\n  Allocated by task 197:\n   sctp_transport_new+0x68/0x650 [sctp]\n   sctp_assoc_add_peer+0x258/0x12a0 [sctp]\n   sctp_process_asconf+0x5e9/0x1090 [sctp]\n\n  Last potentially related work creation:\n   __call_rcu_common.constprop.0+0x77/0xb70\n   sctp_assoc_del_nonprimary_peers+0x7c/0xd0 [sctp]\n   sctp_process_asconf+0xd9c/0x1090 [sctp]\n\nThe first invalid access was a four-byte read of transport-\u003estate at\nnet/sctp/outqueue.c:833. The same reproducer completed the full\nauthenticated ASCONF and local-address replacement sequence with this\nchange without a KASAN report or oops.\n\nClear new_transport when its peer is removed, before it can be used to\ncreate the HEARTBEAT.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74586",
          "url": "https://www.suse.com/security/cve/CVE-2026-74586"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277820 for CVE-2026-74586",
          "url": "https://bugzilla.suse.com/1277820"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74586"
    },
    {
      "cve": "CVE-2026-74588",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74588"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: keep chunk-\u003etransport in step with the list it is queued on\n\n__sctp_outq_flush_rtx() moves a gap-acked chunk onto another transport\u0027s\ntransmitted list without updating chunk-\u003etransport:\n\n\tif (chunk-\u003etsn_gap_acked) {\n\t\tlist_move_tail(\u0026chunk-\u003etransmitted_list,\n\t\t\t       \u0026transport-\u003etransmitted);\n\t\tcontinue;\n\t}\n\nThe chunk then sits on a live transport\u0027s list while chunk-\u003etransport still\nnames a different one.  If that transport is removed - sctp_assoc_rm_peer()\nfrom an ASCONF Delete-IP - sctp_transport_free() RCU-frees it and the chunk\nis left with a dangling pointer.  sctp_assoc_rm_peer() scrubs\npeer-\u003etransmitted and asoc-\u003eoutqueue.out_chunk_list, but the chunk is on\nneither.\n\nThe pointer is not followed while tsn_gap_acked is set.  A SACK that\nreneges on the TSN clears the flag, and the next SACK reaches\n\n\ttchunk-\u003etransport-\u003eflight_size -= sctp_data_size(tchunk);\n\ninside the freed transport.  KASAN reports a slab-use-after-free read in\nsctp_check_transmitted(), freed from sctp_assoc_rm_peer().  Both the\nremoval and the SACKs come from the association peer.\n\nSet chunk-\u003etransport at the move.  The ordinary resend path needs nothing:\nit reaches its list_move_tail() only after sctp_packet_append_chunk()\nreturned SCTP_XMIT_OK, and __sctp_packet_append_chunk() has rebound the\nchunk by then.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74588",
          "url": "https://www.suse.com/security/cve/CVE-2026-74588"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277766 for CVE-2026-74588",
          "url": "https://bugzilla.suse.com/1277766"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277768 for CVE-2026-74588",
          "url": "https://bugzilla.suse.com/1277768"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74588"
    },
    {
      "cve": "CVE-2026-74589",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74589"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix sk_redir use-after-free in send verdict\n\nsk_psock_msg_verdict() takes a socket reference for psock-\u003esk_redir.\ntcp_bpf_send_verdict() copies that pointer while holding the source socket\nlock, but does not take a reference for the local copy before dropping the\nlock around tcp_bpf_sendmsg_redir().\n\nWhen apply_bytes keeps the cached verdict active, another sendmsg() on the\nsame source socket can consume the remaining bytes and release the cached\nreference while the first thread still holds only the raw local pointer:\n\n  CPU 0                                  CPU 1\n  sk_redir = psock-\u003esk_redir\n  apply_bytes remains nonzero\n  release_sock(sk)\n                                         lock_sock(sk)\n                                         apply_bytes reaches zero\n                                         psock-\u003esk_redir = NULL\n                                         release_sock(sk)\n                                         tcp_bpf_sendmsg_redir(sk_redir)\n                                         sock_put(sk_redir)\n  tcp_bpf_sendmsg_redir(sk_redir)\n\nThe final sock_put() can free sk_redir before CPU 0 dereferences it.\n\nKASAN reported:\n\n  BUG: KASAN: slab-use-after-free in tcp_bpf_sendmsg_redir+0xf39/0x1020\n  Read of size 8 at addr ffff888108537090 by task poc/87\n  Call Trace:\n   tcp_bpf_sendmsg_redir+0xf39/0x1020\n   tcp_bpf_sendmsg+0x977/0x1a50\n   __sys_sendto+0x32c/0x3a0\n   __x64_sys_sendto+0xdb/0x1b0\n  Allocated by task 85:\n   sk_prot_alloc+0x56/0x210\n   sk_clone+0x6f/0x14b0\n   inet_csk_clone_lock+0x24/0x740\n   tcp_create_openreq_child+0x25/0x2710\n   tcp_v4_syn_recv_sock+0x10a/0xe00\n  Freed by task 0:\n   __kasan_slab_free+0x43/0x70\n   slab_free_after_rcu_debug+0xa6/0x1e0\n   rcu_core+0x50a/0x1850\n  Last potentially related work creation:\n   __sk_destruct+0x3da/0x540\n   sk_psock_destroy+0x81e/0xab0\n   process_one_work+0x63a/0x1070\n\nTake a temporary socket reference while the source socket lock still\nprotects psock-\u003esk_redir, and drop it after tcp_bpf_sendmsg_redir()\nreturns.  This keeps each unlocked use independent of cached-verdict\nownership.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74589",
          "url": "https://www.suse.com/security/cve/CVE-2026-74589"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277904 for CVE-2026-74589",
          "url": "https://bugzilla.suse.com/1277904"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74589"
    },
    {
      "cve": "CVE-2026-74597",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74597"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: clear skb2-\u003ecb[] in ip6ip6_err()\n\nip6ip6_err() clones an outer IPv6 ICMP error skb, pulls it to the\nquoted inner IPv6 packet, and then passes the clone to icmpv6_send().\nThe clone still carries the outer packet\u0027s inet6_skb_parm in skb-\u003ecb.\n\nIf the outer packet had a Home Address Option, IP6CB(skb2)-\u003edsthao\nremains non-zero after skb_pull(). icmpv6_send() later calls\nmip6_addr_swap(), which uses that stale dsthao offset against the quoted\ninner packet. A malformed inner destination-options header can then make\nthe HAO lookup and address swap run past the end of the quoted packet\nand corrupt skb_shared_info.\n\nClear skb2-\u003ecb[] before pulling the quoted inner IPv6 packet so the\nreply path does not reuse metadata left by the outer IPv6 stack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74597",
          "url": "https://www.suse.com/security/cve/CVE-2026-74597"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277493 for CVE-2026-74597",
          "url": "https://bugzilla.suse.com/1277493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277495 for CVE-2026-74597",
          "url": "https://bugzilla.suse.com/1277495"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74597"
    },
    {
      "cve": "CVE-2026-74609",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74609"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: read le-\u003elink under the node lock in tipc_node_link_down()\n\ntipc_node_link_down() caches the link pointer before taking n-\u003elock:\n\n\tstruct tipc_link *l = le-\u003elink;\t\t/* unlocked */\n\n\tif (!l)\n\t\treturn;\n\ttipc_node_write_lock(n);\n\tif (!tipc_link_is_establishing(l)) {\t/* deref l */\n\t...\n\t\ttipc_link_reset(l);\t\t/* write into l */\n\tif (delete) {\n\t\tkfree(l);\n\t\tle-\u003elink = NULL;\n\nThe delete=true caller frees that very object under n-\u003elock, so the lock\ndoes not protect the cached pointer against it:\n\n - CPU A, delete=false: tipc_rcv() on TIPC_LINK_DOWN_EVT, or the link\n   supervision timer via tipc_node_timeout(), reads l unlocked and then\n   dereferences it under n-\u003elock;\n - CPU B, delete=true: netlink TIPC_NL_BEARER_DISABLE -\u003e bearer_disable()\n   -\u003e tipc_node_delete_links() -\u003e tipc_node_link_down(n, bearer_id, true)\n   -\u003e kfree(l).\n\nThe link is freed with plain kfree(), not kfree_rcu(), and for UDP bearers\ndisable_media() only schedules the asynchronous cleanup_bearer() work, so\nits synchronize_net() runs after the links are already gone.  An in-flight\nCPU A that has read l therefore dereferences freed memory once B frees it:\na use-after-free read in tipc_link_is_establishing(), and a use-after-free\nwrite via tipc_link_reset() on the establishing branch.\n\nThe following trace was captured on 7.2.0-rc5-00284-gaf39eb111ce6:\n\n  BUG: KASAN: slab-use-after-free in tipc_link_is_establishing (net/tipc/link.c:285)\n  Read of size 4 at addr ffff88802e2aa068 by task swapper/2/0\n   tipc_link_is_establishing (net/tipc/link.c:285)\n   tipc_node_link_down (net/tipc/node.c:1076)\n   tipc_node_timeout (net/tipc/node.c:843)\n  Allocated by task 9549:\n   tipc_link_create (net/tipc/link.c:490)\n   tipc_node_check_dest (net/tipc/node.c:1279)\n   tipc_disc_rcv (net/tipc/discover.c:252)\n   tipc_udp_recv (net/tipc/udp_media.c:389)\n  Freed by task 9549:\n   tipc_node_link_down (net/tipc/node.c:1084)\n   tipc_node_delete_links (net/tipc/node.c:1320)\n   bearer_disable (net/tipc/bearer.c:414)\n   __tipc_nl_bearer_disable (net/tipc/bearer.c:992)\n\nMove the le-\u003elink read inside tipc_node_write_lock(), so it is serialised\nagainst the kfree() in the delete path.  A racing teardown now either has\nnot run yet, and we see a valid link, or has already run, and we see NULL.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74609",
          "url": "https://www.suse.com/security/cve/CVE-2026-74609"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277906 for CVE-2026-74609",
          "url": "https://bugzilla.suse.com/1277906"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277907 for CVE-2026-74609",
          "url": "https://bugzilla.suse.com/1277907"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74609"
    },
    {
      "cve": "CVE-2026-74615",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74615"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: do not arm the ageing timer on a device that is down\n\nvxlan_changelink() arms vxlan-\u003eage_timer whenever the requested ageing\ninterval differs from the configured one:\n\n\tif (conf.age_interval != vxlan-\u003ecfg.age_interval)\n\t\tmod_timer(\u0026vxlan-\u003eage_timer, jiffies);\n\nThere is no netif_running() test, so the timer is armed even on a device\nthat was never brought up.  The only synchronous cancel in the driver is\nthe timer_delete_sync() in vxlan_stop(), which is .ndo_stop.\nnetif_close_many() drops devices without IFF_UP before\n__dev_close_many() runs, so that cancel is skipped for such a device.\n\nvxlan_setup() sets dev-\u003eneeds_free_netdev = true and age_timer is a\nmember of struct vxlan_dev, so free_netdev() releases the allocation the\ntimer lives in while it is still queued on a timer_base.\nexpire_timers() unlinks the entry before it loads timer-\u003efunction, so\nthe timer core writes through the freed object\u0027s list pointers:\n\n  BUG: KASAN: slab-use-after-free in __run_timers+0x208/0x654\n  Write of size 8 at addr ffff00001adace68 by task true/192\n   __asan_store8+0x84/0xac\n   __run_timers+0x208/0x654\n   run_timer_softirq+0x154/0x18c\n  Allocated by task 189:\n   alloc_netdev_mqs+0x64/0x720\n   rtnl_create_link+0x4ac/0x520\n   rtnl_newlink+0x758/0xd00\n  Freed by task 191:\n   netdev_release+0x40/0x58\n   netdev_run_todo+0x4a4/0x8c0\n   rtnl_dellink+0x200/0x4e8\n\nThe rtnl operations involved are netns-scoped, so an unprivileged user\ncan perform them in a new user and network namespace.\n\nArming the timer on a down device never had an effect: vxlan_cleanup()\nreturns early on !netif_running(), and vxlan_open() arms the timer for\nany non-zero interval once the device is brought up.  Add the missing\ntest.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74615",
          "url": "https://www.suse.com/security/cve/CVE-2026-74615"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277901 for CVE-2026-74615",
          "url": "https://bugzilla.suse.com/1277901"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277902 for CVE-2026-74615",
          "url": "https://bugzilla.suse.com/1277902"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74615"
    },
    {
      "cve": "CVE-2026-74616",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74616"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxdp: reject clones that overrun skb_shared_info tailroom\n\nxdpf_clone() clones broadcast copies into a single page and sets\nframe_sz to PAGE_SIZE. __xdp_build_skb_from_frame() later treats that\npage like a normal XDP frame and expects the usual skb_shared_info\ntailroom at the end of the buffer.\n\nThe current check only rejects frames whose linear xdp_frame header,\nheadroom, and packet data exceed PAGE_SIZE. A source frame backed by a\nlarger allocation can still satisfy that check while extending into the\nclone\u0027s required shared-info area. When such a clone is converted back\ninto an skb, build_skb_around() places skb_shared_info over live packet\nbytes and later writes can corrupt XDP return metadata.\n\nReject clones unless their linear area fits inside\nSKB_WITH_OVERHEAD(PAGE_SIZE), matching the tailroom requirement already\nenforced by the XDP-to-skb conversion path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74616",
          "url": "https://www.suse.com/security/cve/CVE-2026-74616"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277813 for CVE-2026-74616",
          "url": "https://bugzilla.suse.com/1277813"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277814 for CVE-2026-74616",
          "url": "https://bugzilla.suse.com/1277814"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74616"
    },
    {
      "cve": "CVE-2026-74630",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74630"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: prevent in6_dev_get() from resurrecting inet6_dev\n\nin6_dev_get() reads dev-\u003eip6_ptr under RCU and then unconditionally\nincrements its refcount. Device teardown can clear the pointer and drop\nthe last reference between these operations. The increment then\nresurrects an object whose RCU free has already been queued, so callers\ncan use it after it is freed.\n\nUse refcount_inc_not_zero() and return NULL when the object has already\nreached zero. RCU keeps the memory accessible through the attempted\nreference acquisition, and a successful increment pins the object for\nthe caller.\n\nAn independent run on the exact unpatched 6f5156d7a31a (v7.2-rc3)\nkernel reproduced the invalid reference acquisition as UID 1000:\n\n  refcount_t: addition on 0; use-after-free.\n  ip6_mc_source+0xef4/0x17e0\n\nIt was followed by the corresponding reference underflow in\nip6_mc_source(). The supplied trace from the same unpatched revision\nadditionally shows the access after the RCU read-side section ends:\n\n  BUG: KASAN: slab-use-after-free in mutex_lock+0x76/0xe0\n  Write of size 8 at addr ffff888015b50240 by task poc/1219\n\nBug found and triaged by OpenAI Security Research and\nvalidated by Trail of Bits.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74630",
          "url": "https://www.suse.com/security/cve/CVE-2026-74630"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278191 for CVE-2026-74630",
          "url": "https://bugzilla.suse.com/1278191"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278192 for CVE-2026-74630",
          "url": "https://bugzilla.suse.com/1278192"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74630"
    },
    {
      "cve": "CVE-2026-74688",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74688"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: clear control chunk transport if it is being removed\n\nsctp_make_heartbeat_ack() caches the destination transport in\nchunk-\u003etransport without taking a reference. When src_out_of_asoc_ok is\nenabled, the HEARTBEAT ACK may remain queued on control_chunk_list instead\nof being transmitted immediately.\n\nIf the peer transport is removed while the chunk is still queued,\nsctp_assoc_rm_peer() drops the transport and schedules it for RCU freeing,\nbut only clears cached transport pointers in out_chunk_list.  The queued\ncontrol chunk therefore retains a dangling transport pointer.\n\nOnce an ASCONF_ACK clears the suppression and the queued control chunk is\ntransmitted, SCTP dereferences the stale transport pointer, leading to a\nuse-after-free.\n\nFix this by also clearing chunk-\u003etransport for queued control chunks in\ncontrol_chunk_list when removing the transport.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74688",
          "url": "https://www.suse.com/security/cve/CVE-2026-74688"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277489 for CVE-2026-74688",
          "url": "https://bugzilla.suse.com/1277489"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277490 for CVE-2026-74688",
          "url": "https://bugzilla.suse.com/1277490"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74688"
    },
    {
      "cve": "CVE-2026-74700",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74700"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers\n\nAnother challenge with unlocked filters.\nThere is a short window in tc_new_tfilter where a tcf_proto can be found\nand briefly referenced by a totally unrelated, unlocked classifier\u0027s request\nand cause a race.\n\nFeng created a poc which created this race with two threads, one creating a\nu32 filter and other a flower filter in the same chain/prio:\n\n1. Both threads enter tc_new_tfilter, both find the chain empty, both\n   drop filter_chain_lock\n2. u32 finishes tcf_proto_create(\"u32\") first, calls\n   tcf_chain_tp_insert_unique() -\u003e inserts u32_tp into the chain\n3. flower finishes tcf_proto_create(\"flower\") later, calls\n   tcf_chain_tp_insert_unique() -\u003e tcf_chain_tp_find() now sees u32_tp\n   already there, takes a reference on it, destroys flower\u0027s own tp_new\n   and returns u32_tp to the caller.\n\nFlower then hits the kind mismatch check (because it requested for kind\n\"flower\" but tp-\u003eops-\u003ekind is \"u32\") and goes through the errout path\nwhich calls tcf_proto_put() on u32_tp. If the u32 thread has already\ngone through its own errout (its change() call failed on the PoC\u0027s empty\noptions) and dropped its create and insert refs, flower\u0027s put is the\nlast one and drops u32_tp\u0027s refcnt to zero.\n\nAt this point tp-\u003eops-\u003edestroy() runs in a context that never took\nrtnl_lock. When that happens, it might cause a UAF like the following\n(illustrated by the PoC):\n\n[  +0.000710] BUG: KASAN: slab-use-after-free in u32_init (net/sched/cls_u32.c:393)\n[  +0.000281] Read of size 8 at addr ffff888120022f00 by task poc_feng_xue/524\n\n  Call Trace:\n   u32_init (net/sched/cls_u32.c:393)\n   tc_new_tfilter (net/sched/cls_api.c:2378)\n\n  Allocated by task 526:\n   u32_init (net/sched/cls_u32.c:378)\n   tc_new_tfilter (net/sched/cls_api.c:2378)\n\n  Freed by task 522:\n   kfree\n   u32_destroy (net/sched/cls_u32.c:662)\n   tcf_proto_destroy (net/sched/cls_api.c:446)\n   tcf_proto_put (net/sched/cls_api.c:459)\n   tc_new_tfilter (net/sched/cls_api.c:2459)\n\nFix this by having tcf_proto_destroy() take rtnl_lock around\ntp-\u003eops-\u003edestroy() for locked classifiers whenever rtnl is not held.\n\nTo explain why I used a temp variable \"not_lockless\" I\u0027d like to point to a\nsemi-related note on rtnl_held vs TCF_PROTO_OPS_DOIT_UNLOCKED (adding here\nfor future cleanup if deemed necessary):\nThe rtnl_held parameter and the TCF_PROTO_OPS_DOIT_UNLOCKED flag are\nredundant sources of truth for whether rtnl_lock is held. Among the nine\nclassifier destroy(..rtnl_held..) callbacks, only flower consults the\nrtnl_held parameter which it propagates to tc_setup_cb_destroy()\nand tc_setup_cb_call(). The other eight (u32, flow, bpf, cgroup, route, basic,\nfw, mall) ignore it entirely;-\u003e those that call tc_setup_cb_destroy()\n(u32, bpf, mall) hardcode true always instead of forwarding the parameter.\n\nA future cleanup should remove the rtnl_held parameter from the destroy callback\nsignature entirely and have callers rely solely on their knowledge whether\nthey are running in an unlocked context.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74700",
          "url": "https://www.suse.com/security/cve/CVE-2026-74700"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277626 for CVE-2026-74700",
          "url": "https://bugzilla.suse.com/1277626"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277631 for CVE-2026-74700",
          "url": "https://bugzilla.suse.com/1277631"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74700"
    },
    {
      "cve": "CVE-2026-74719",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74719"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n\nThe SMC_LLC_CONFIRM_LINK / SMC_LLC_ADD_LINK_CONT branch in\nsmc_llc_event_handler() stores an incoming qentry into the local LLC flow\nwithout first checking whether a qentry is already pending. If a malicious or\nbuggy peer sends a second CONFIRM_LINK or ADD_LINK_CONT request while a flow is\nactive and flow-\u003eqentry is already set, smc_llc_flow_qentry_set() overwrites the\npointer without freeing the previous allocation, leaking one kmalloc-96 object\nper spurious message.\n\nThe sibling SMC_LLC_DELETE_LINK branch already has the correct !flow-\u003eqentry\nguard. Apply the same guard to the CONFIRM_LINK/ADD_LINK_CONT branch so that a\nduplicate message when qentry is already occupied falls through to break and is\nfreed by the kfree(qentry) at the out: label, rather than silently leaking the\nexisting allocation.\n\nThe response direction (smc_llc_rx_response()) is unaffected: it already guards\nwith flow-\u003eqentry at the equivalent site and drops duplicate responses\ncorrectly.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74719",
          "url": "https://www.suse.com/security/cve/CVE-2026-74719"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276572 for CVE-2026-74719",
          "url": "https://bugzilla.suse.com/1276572"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276582 for CVE-2026-74719",
          "url": "https://bugzilla.suse.com/1276582"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74719"
    },
    {
      "cve": "CVE-2026-74737",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74737"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG\n\nOn the packet reception path, the ID of the MAC Port on which the packet\nwas received, is embedded in the RX DMA Descriptor\u0027s metadata. The ID is\nextracted using the helper function cppi5_desc_get_tags_ids() which fills\nin the 16-bit Source Tag into the \u0027port_id\u0027 variable. However, it is only\nthe lower 8-bits of the 16-bit Source Tag that represent the MAC Port ID,\nwhile the upper 8-bits are Hardware-Reserved and carry an arbitrary value.\nWith the existing logic, sporadic kernel crash is observed due to the\nsubsequent driver code accessing out-of-bound memory because of an invalid\nport_id.\n\nHence, fix the port_id extraction logic to use only the lower 8-bits of the\nSource Tag as the MAC Port ID.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74737",
          "url": "https://www.suse.com/security/cve/CVE-2026-74737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277898 for CVE-2026-74737",
          "url": "https://bugzilla.suse.com/1277898"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277899 for CVE-2026-74737",
          "url": "https://bugzilla.suse.com/1277899"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74737"
    },
    {
      "cve": "CVE-2026-74743",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74743"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: inherit needed_headroom and needed_tailroom from lowerdev\n\nmacvlan devices inherit hard_header_len from lowerdev during macvlan_init(),\nbut leave needed_headroom and needed_tailroom set to 0.\n\nWhen the underlying lowerdev requires extra headroom or tailroom for\nheaders/trailers (e.g. macsec, ipsec, wireguard, tunnels, or veth with rx\nheadroom), upper layers calculating packet headroom and tailroom fail to\nreserve sufficient space.\n\nThis can result in reallocation overhead, skb headroom underflows, or KASAN\nslab-use-after-free crashes when dev_hard_header() / macvlan_hard_header()\nprepends header data or when lower devices append tailroom.\n\nFix this by:\n1. Inheriting needed_headroom and needed_tailroom from lowerdev in macvlan_init().\n2. Propagating needed_headroom and needed_tailroom updates to attached macvlans\n   in macvlan_device_event() when receiving NETDEV_FEAT_CHANGE events.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74743",
          "url": "https://www.suse.com/security/cve/CVE-2026-74743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277908 for CVE-2026-74743",
          "url": "https://bugzilla.suse.com/1277908"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277909 for CVE-2026-74743",
          "url": "https://bugzilla.suse.com/1277909"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74743"
    },
    {
      "cve": "CVE-2026-74744",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74744"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: inherit needed_headroom and needed_tailroom from phy_dev\n\nipvlan devices inherit hard_header_len from phy_dev during ipvlan_init(),\nbut leave needed_headroom and needed_tailroom set to 0.\n\nWhen the underlying phy_dev (or stacked lower device) requires extra headroom\nor tailroom for headers/trailers (e.g. macsec, ipsec, wireguard, tunnels, or\nveth with rx headroom), upper layers calculating packet headroom and tailroom\nfail to reserve sufficient space.\n\nThis can result in reallocation overhead, skb headroom underflows, or KASAN\nslab-use-after-free crashes when dev_hard_header() / ipvlan_hard_header()\nprepends header data or when lower devices append tailroom.\n\nFix this by:\n1. Inheriting needed_headroom and needed_tailroom from phy_dev in ipvlan_init().\n2. Propagating needed_headroom and needed_tailroom updates to attached ipvlans\n   in ipvlan_device_event() when receiving NETDEV_FEAT_CHANGE events.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74744",
          "url": "https://www.suse.com/security/cve/CVE-2026-74744"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278094 for CVE-2026-74744",
          "url": "https://bugzilla.suse.com/1278094"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278096 for CVE-2026-74744",
          "url": "https://bugzilla.suse.com/1278096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74744"
    },
    {
      "cve": "CVE-2026-74752",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74752"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate cookie AUTH state before use\n\nWhen cookie authentication is disabled, COOKIE_ECHO restores fixed-size\nAUTH fields directly from peer-controlled cookie bytes.  A forged RANDOM\nlength, HMAC list, or CHUNKS list can then reach association consumers\nwith lengths or identifiers that were never validated against the local\nbacking arrays.\n\nA forged RANDOM length can cause out-of-bounds reads during key-vector\nconstruction.  A forged HMAC identifier also caused a 32-byte write past\na zero-length AUTH chunk, providing a primitive for a local privilege\nescalation chain.\n\nValidate the cookie\u0027s RANDOM, HMACS, and CHUNKS parameters at the cookie\ntrust boundary before copying them into the association.  Reject invalid\ntypes, malformed lengths, unsupported HMAC identifiers, HMAC lists\nwithout SHA1, and forbidden chunk ids.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74752",
          "url": "https://www.suse.com/security/cve/CVE-2026-74752"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278315 for CVE-2026-74752",
          "url": "https://bugzilla.suse.com/1278315"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278316 for CVE-2026-74752",
          "url": "https://bugzilla.suse.com/1278316"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283110 for CVE-2026-74752",
          "url": "https://bugzilla.suse.com/1283110"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74752"
    },
    {
      "cve": "CVE-2026-80540",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80540"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix UVD decode image min size calculation\n\nThis needs to use pitch instead of width. Also reject pitch\nover 4096 to avoid overflow.\n\n(cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80540",
          "url": "https://www.suse.com/security/cve/CVE-2026-80540"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277590 for CVE-2026-80540",
          "url": "https://bugzilla.suse.com/1277590"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80540"
    },
    {
      "cve": "CVE-2026-80580",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80580"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: bound mode sysfs output to the sysfs buffer\n\nmode_string() uses snprintf() which can return a value larger than the\nremaining buffer space. show_modes() accumulates the return value into i\nwithout checking whether i has reached PAGE_SIZE, causing the offset to\nadvance past the sysfs buffer if the modelist is long enough.\n\nAdd a size parameter to mode_string() and use scnprintf() to return\nonly the bytes actually written. Add an early return when offset\nalready exceeds the buffer. In show_modes(), stop accumulating once\nthe buffer is full.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80580",
          "url": "https://www.suse.com/security/cve/CVE-2026-80580"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278294 for CVE-2026-80580",
          "url": "https://bugzilla.suse.com/1278294"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278295 for CVE-2026-80580",
          "url": "https://bugzilla.suse.com/1278295"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80580"
    },
    {
      "cve": "CVE-2026-80714",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80714"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: do not propagate one-packet flag to synced conns\n\nSynced connections can be created before their destination exists. When\nthe destination is later added, ip_vs_bind_dest() copies connection flags\nfrom the destination into cp-\u003eflags.\n\nIP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced\nconnection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed,\nexpiry can treat it as a one-packet connection and skip unlinking the\nexisting conn_tab node, leaving stale hash nodes pointing at a freed\nstruct ip_vs_conn.\n\nDrop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced\nconnections.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80714",
          "url": "https://www.suse.com/security/cve/CVE-2026-80714"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277561 for CVE-2026-80714",
          "url": "https://bugzilla.suse.com/1277561"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277583 for CVE-2026-80714",
          "url": "https://bugzilla.suse.com/1277583"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80714"
    },
    {
      "cve": "CVE-2026-80716",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80716"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: wake linked drain waiters on unlink\n\nsnd_pcm_drain() on a linked stream parks an on-stack wait entry on the\ndrained peer\u0027s runtime-\u003esleep, and after schedule_timeout() removes it\nonly if that peer is still found in the caller\u0027s group.  If group\nmembership changes during the wait and the sleep ends by signal or\ntimeout (so autoremove_wake_function() does not run), finish_wait() is\nskipped and snd_pcm_drain() returns with the entry still queued on that\nstream\u0027s sleep list; a later wake_up() then walks a freed stack frame.\nThis is reachable by unlinking either the drained or the draining stream.\n\nUnlike the close path (snd_pcm_drop() -\u003e snd_pcm_post_stop()),\nsnd_pcm_unlink() never wakes the sleep queues.  Wake every group member\nunder the group lock before the membership change, so a linked drainer is\nreleased and drops its entry while the streams are still grouped.\n\nThe window was opened when snd_pcm_link_rwsem stopped being held across\nthe wait and the removal became conditional on group membership (see\nFixes). The later switch to finish_wait() kept that conditional removal,\nso the signal/timeout case remained.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80716",
          "url": "https://www.suse.com/security/cve/CVE-2026-80716"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277837 for CVE-2026-80716",
          "url": "https://bugzilla.suse.com/1277837"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277838 for CVE-2026-80716",
          "url": "https://bugzilla.suse.com/1277838"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80716"
    },
    {
      "cve": "CVE-2026-80737",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80737"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: amba-pl011: synchronize DMA teardown\n\ndmaengine_terminate_all() does not wait for a running callback, so the TX\ncallback can still touch the TX buffer after it is freed. The RX poll\ntimer reads the RX buffers without the port lock.\n\nSwitch to dmaengine_terminate_sync() and delete the RX timer before\nfreeing the buffers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80737",
          "url": "https://www.suse.com/security/cve/CVE-2026-80737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279487 for CVE-2026-80737",
          "url": "https://bugzilla.suse.com/1279487"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279488 for CVE-2026-80737",
          "url": "https://bugzilla.suse.com/1279488"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80737"
    },
    {
      "cve": "CVE-2026-80785",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80785"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: serialize mode sysfs access with lock_fb_info()\n\nshow_mode(), show_modes(), and store_mode() access fb_info-\u003emodelist\nand fb_info-\u003emode without holding lock_fb_info(). store_modes() takes\nlock_fb_info() while replacing the modelist and freeing the old one.\n\nA concurrent reader or writer can load a pointer to an old modelist\nentry before store_modes() frees it, then dereference freed memory or\nstore a stale freed pointer in fb_info-\u003emode.\n\nTake lock_fb_info() in show_mode(), show_modes(), and store_mode() to\nserialize with store_modes(). In show_mode(), copy the mode to the\nstack and format after dropping the lock. In store_mode(), split\nactivate() into a _locked variant to avoid double-locking, and hold\nthe locks for the modelist walk, mode conversion, activation, and\nfb_info-\u003emode assignment together.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80785",
          "url": "https://www.suse.com/security/cve/CVE-2026-80785"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279619 for CVE-2026-80785",
          "url": "https://bugzilla.suse.com/1279619"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279620 for CVE-2026-80785",
          "url": "https://bugzilla.suse.com/1279620"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80785"
    },
    {
      "cve": "CVE-2026-80789",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80789"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: bound SGL data length before allocating command buffers\n\nnvmet_tcp_map_data() reads the host-controlled 32-bit sgl-\u003elength\nand, for the in-capsule offset descriptor (type 0x01), checks it\nagainst port-\u003einline_data_size before use. Any other SGL descriptor\ntype -- including the non-inline transport SGL data-block descriptor\n(type (NVME_TRANSPORT_SGL_DATA_DESC \u003c\u003c 4) | NVME_SGL_FMT_TRANSPORT_A,\nthe type a real host uses for out-of-capsule writes) skips that check\nentirely and falls straight through to:\n\n\tcmd-\u003ereq.sg = sgl_alloc(len, GFP_KERNEL, \u0026cmd-\u003ereq.sg_cnt);\n\nwith len taken directly from the wire, unbounded up to 4 GiB.\n\nnvmet_req_init() only parses the command and never inspects\nsgl-\u003elength, and nvmet_check_transfer_len() -- the only other place\ntransfer_len is validated -- runs later, from req-\u003eexecute(), after\nthe allocation has already happened. For a write command the target\nresponds with an R2T and parks the command waiting for the host to\nsend the data; if the host (or an unauthenticated peer that simply\nnever follows up) never does, the sgl_alloc() buffer stays resident\nfor the life of the command. NVMe/TCP has no mandatory authentication\nin the default configuration, so any peer able to reach the target\nportal and complete a Fabrics connect can drive this with a single\ncrafted command, repeatable across queues and connections for\namplification. This is unbounded kernel memory allocation\ntriggered by a remote, effectively unauthenticated peer.\n\nValidate len against the same NVMET_TCP_MAXH2CDATA ceiling this file\nalready uses to bound per-PDU H2C data, for every SGL descriptor type,\nbefore doing any allocation. This closes the gap for the non-inline\ndescriptor while leaving the existing, tighter inline_data_size check\nin place for the in-capsule case.\n\nRuntime-verified on a v6.19 KASAN stand: with this bound in place, a\ncrafted write command carrying an oversized non-inline SGL length is\nrejected before sgl_alloc() runs, where the same request previously\ndrove an unbounded ~256 MiB kernel allocation (up to 4 GiB) that\nstayed resident pending an R2T the host never satisfies.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80789",
          "url": "https://www.suse.com/security/cve/CVE-2026-80789"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279621 for CVE-2026-80789",
          "url": "https://bugzilla.suse.com/1279621"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279622 for CVE-2026-80789",
          "url": "https://bugzilla.suse.com/1279622"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80789"
    },
    {
      "cve": "CVE-2026-80840",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80840"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: seg6: clear IPv4 control block on IPIP decapsulation\n\nEnd.DX4 and End.DT4 decapsulate an IPv4 packet through\ndecap_and_validate() and send it directly to IPv4 routing. The inner\npacket therefore bypasses ip_rcv_core(), which normally clears IPCB\nbefore IPv4 interprets skb-\u003ecb.\n\nThe skb instead retains IP6CB data from the outer packet. IP6CB and\nIPCB use the same skb-\u003ecb storage, so IP6CB(skb)-\u003elastopt overlaps\nIPCB(skb)-\u003eopt.optlen and srr, while IP6CB(skb)-\u003enhoff overlaps rr and\nts.\n\nThe sender can make the stale optlen byte nonzero with a valid outer\nextension-header chain. The reproducers put an eight-byte Destination\nOptions header immediately after the 40-byte IPv6 header and before the\nSegment Routing Header. ipv6_destopt_rcv() records the sender-controlled\nDestination Options offset in both lastopt and nhoff, setting them to\n40. On the reproduced little-endian x86-64 kernel, IPv4 therefore sees\noptlen = 40 and rr = 40.\n\nBoth tcp_v4_save_options() and __ip_options_echo() skip option copying\nwhen optlen is zero. Here optlen is 40, so the TCP SYN path allocates\nroom for 40 bytes of option data and calls __ip_options_echo(). The\nstale rr value makes that function read inner packet byte 41 as the\nRecord Route option length. The reproducers set that sender-controlled\nbyte to 255, so __ip_options_echo() copies 255 bytes into the 40-byte\noption-data area.\n\nSeparate End.DX4 and End.DT4 reproducers on the unpatched v7.2-rc5\nkernel both produced:\n\n  BUG: KASAN: slab-out-of-bounds in __ip_options_echo()\n  Write of size 255\n\nThe relevant End.DX4 call path is:\n\n  __ip_options_echo\n  tcp_v4_route_req\n  tcp_conn_request\n  tcp_v4_conn_request\n  tcp_rcv_state_process\n  tcp_v4_do_rcv\n  tcp_v4_rcv\n  ip_protocol_deliver_rcu\n  ip_local_deliver_finish\n  ip_local_deliver\n  input_action_end_dx4_finish\n  input_action_end_dx4\n\nThe relevant End.DT4 call path is:\n\n  __ip_options_echo\n  tcp_v4_route_req\n  tcp_conn_request\n  tcp_v4_conn_request\n  tcp_rcv_state_process\n  tcp_v4_do_rcv\n  tcp_v4_rcv\n  ip_protocol_deliver_rcu\n  ip_local_deliver_finish\n  ip_local_deliver\n  input_action_end_dt4\n\ntcp_v4_save_options() is inlined into the tcp_v4_route_req() path, so\nit does not appear as a separate frame.\n\nWhen decap_and_validate() handles IPPROTO_IPIP, save the ingress\ninterface from IP6CB, clear IPCB, and restore the saved value. Doing\nthis in the common decapsulation path covers End.DX4, End.DT4, and\nEnd.DT46\u0027s IPv4 arm.\n\nUse IP6CB(skb)-\u003eiif rather than skb-\u003eskb_iif. These actions run after\nl3mdev processing, which can replace skb_iif with the L3 master;\nIP6CB iif still records the receiving interface set at IPv6 ingress.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80840",
          "url": "https://www.suse.com/security/cve/CVE-2026-80840"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279875 for CVE-2026-80840",
          "url": "https://bugzilla.suse.com/1279875"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279876 for CVE-2026-80840",
          "url": "https://bugzilla.suse.com/1279876"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80840"
    },
    {
      "cve": "CVE-2026-80841",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80841"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/packet: defer vmalloc TX_RING free until skbs finish\n\nAF_PACKET TX_RING skbs keep a raw pointer to their ring frame. The skb\npage references preserve page-backed ring blocks after pg_vec is freed,\nbut they do not preserve a vmalloc mapping.\n\ntpacket_destruct_skb() currently drops the pending reference before\nwriting the timestamp and TP_STATUS_AVAILABLE to the frame. Move the\ndecrement after those stores. The smp_wmb() in __packet_set_status()\norders the frame stores before the decrement.\n\nAlso recheck pending TX frames under pg_vec_lock before non-closing\nring replacement, so a racing send cannot add a pending skb between\nthe initial check and the ring swap.\n\nRing allocation can produce a mixture of page-backed and vmalloc-backed\nblocks. Allocate deferred-work storage during TX ring setup when the\nfirst vmalloc-backed block is encountered, and keep its pointer in the\npg_vec allocation header. If allocation fails, return -ENOMEM from ring\nsetup. On socket close, a non-NULL pointer identifies a vmalloc-backed\nvector without a scan. If TX skbs remain, defer the whole vector to\nsystem_long_wq.\n\nAfter pg_vec is detached, a late destructor can skip the pending\ndecrement. Use socket write-memory accounting as the deferred lifetime\ngate instead: an skb remains charged through its final sock_wfree(),\nafter all ring-frame accesses. The delayed work retains a socket\nreference and reschedules itself until no TX skbs remain.\n\nMove pending_refcnt release to packet_sock_destruct() so late skb\ndestructors and deferred cleanup can safely use it after\npacket_release(). Page-backed teardown remains synchronous, and no lock\nis added to the TX completion hot path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80841",
          "url": "https://www.suse.com/security/cve/CVE-2026-80841"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279835 for CVE-2026-80841",
          "url": "https://bugzilla.suse.com/1279835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279836 for CVE-2026-80841",
          "url": "https://bugzilla.suse.com/1279836"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80841"
    },
    {
      "cve": "CVE-2026-80844",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80844"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: ah6: validate routing header segments_left\n\nAH6 rearranges routing-header addresses before computing or verifying the\nICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than\nthe number of addresses described by the routing header\u0027s hdrlen field.\n\nThat assumption does not hold for raw IPv6 HDRINCL packets. A packet with\nhdrlen equal to 2 describes one address, but can carry an arbitrary\nsegments_left value. With segments_left equal to 255, the function moves\nits address pointer 4,064 bytes backwards and passes a 4,064-byte length to\nmemmove(), resulting in an out-of-bounds access.\n\nValidate the invariant locally before modifying the routing header or\nperforming any address-pointer arithmetic, and propagate malformed-header\nerrors to the existing AH6 input and output error paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80844",
          "url": "https://www.suse.com/security/cve/CVE-2026-80844"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279786 for CVE-2026-80844",
          "url": "https://bugzilla.suse.com/1279786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280695 for CVE-2026-80844",
          "url": "https://bugzilla.suse.com/1280695"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282938 for CVE-2026-80844",
          "url": "https://bugzilla.suse.com/1282938"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80844"
    },
    {
      "cve": "CVE-2026-80852",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80852"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: device: fix out-of-bounds write in tls_append_frag()\n\nFound with syzkaller and a local syzbot instance running on top of a\nnetdevsim TLS offload emulation; tls_device.c is otherwise only reachable\non a machine with a NIC that implements the offload.\n\ntls_push_data() only checks whether the open record still has room for\nanother frag at the bottom of its loop, and the MSG_MORE early break\nskips that check.  The record survives to the next syscall with the frag\ncount it already had, and tls_append_frag() does not check either, so\nwith TLS_TX_ZEROCOPY_RO every splice(SPLICE_F_MORE) of a byte or two adds\na non-coalescing pipe page and num_frags walks off the end of\ntls_record_info.frags[MAX_SKB_FRAGS].  Once the record is pushed,\ntls_push_record() runs the same index over sg_tx_data[MAX_SKB_FRAGS] and\nthe sg_set_page() writes land on the destruct_work that follows it, which\nthe workqueue then calls.\n\nThe byte limit is fine because copy drops to 0 and the loop falls through\nto the same check; the frag count has no such feedback.\n\nPush the record rather than keep a full one open, which is what a plain\nTCP socket does - tcp_sendmsg_locked() uses tcp_mark_push() and\nnew_segment in both the copy and the MSG_SPLICE_PAGES paths, and tls_sw\nalready sets full_record when the sk_msg ring fills up, MSG_MORE or not.\n\n  BUG: KASAN: slab-out-of-bounds in tls_append_frag ( net/tls/tls_device.c:269)\n  Write of size 8 at addr ffff8881104d1530 by task tls_oob/450\n\n  CPU: 2 UID: 0 PID: 450 Comm: tls_oob Not tainted 7.2.0-rc7+ #329 PREEMPT\n  Call Trace:\n   \u003cTASK\u003e\n   dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)\n   print_report (mm/kasan/report.c:378 mm/kasan/report.c:482)\n   kasan_report (mm/kasan/report.c:595)\n   tls_append_frag (net/tls/tls_device.c:269)\n   tls_push_data (net/tls/tls_device.c:518)\n   tls_device_sendmsg (net/tls/tls_device.c:583)\n   inet_sendmsg (net/ipv4/af_inet.c:865)\n   sock_sendmsg (net/socket.c:775 net/socket.c:790 net/socket.c:813)\n   splice_to_socket (fs/splice.c:884)\n   do_splice (fs/splice.c:936 fs/splice.c:1349)\n   __do_splice (fs/splice.c:1431)\n   __x64_sys_splice (fs/splice.c:1634 fs/splice.c:1616)\n   do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\n   entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)\n   \u003c/TASK\u003e\n\nand, once the record is pushed:\n\n  UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:300:24\n  index 18 is out of range for type \u0027skb_frag_t [17]\u0027\n  UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:301:41\n  index 18 is out of range for type \u0027scatterlist [17]\u0027\n  UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:302:39\n  index 18 is out of range for type \u0027scatterlist [17]\u0027\n  UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:307:38\n  index 26 is out of range for type \u0027scatterlist [17]\u0027\n\n  kernel tried to execute NX-protected page - exploit attempt? (uid: 0)\n  BUG: unable to handle page fault for address: ffffea000411a680\n  #PF: supervisor instruction fetch in kernel mode\n  #PF: error_code(0x0011) - permissions violation\n  Oops: Oops: 0011 [#1] SMP KASAN PTI\n  Workqueue: ktls_device_destruct 0xffffea000411a680\n  RIP: 0010:0xffffea000411a680\n  Call Trace:\n   \u003cTASK\u003e\n   worker_thread (kernel/workqueue.c:3405 kernel/workqueue.c:3486)\n   kthread (kernel/kthread.c:436)\n   ret_from_fork (arch/x86/kernel/process.c:158)\n   ret_from_fork_asm (arch/x86/entry/entry_64.S:245)\n   \u003c/TASK\u003e",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80852",
          "url": "https://www.suse.com/security/cve/CVE-2026-80852"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279532 for CVE-2026-80852",
          "url": "https://bugzilla.suse.com/1279532"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279534 for CVE-2026-80852",
          "url": "https://bugzilla.suse.com/1279534"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80852"
    },
    {
      "cve": "CVE-2026-80909",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80909"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Reject UVD message with invalid number of h265 refs\n\nSame change as for h264, avoids overflow later when calculating\nmin dpb size.\n\n(cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80909",
          "url": "https://www.suse.com/security/cve/CVE-2026-80909"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279422 for CVE-2026-80909",
          "url": "https://bugzilla.suse.com/1279422"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279423 for CVE-2026-80909",
          "url": "https://bugzilla.suse.com/1279423"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80909"
    },
    {
      "cve": "CVE-2026-81000",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81000"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: bound receive headroom\n\ntun_get_user() uses tun-\u003ealign both as skb headroom and when choosing how\nmuch packet data to keep linear. OVS can propagate an oversized headroom\nrequest from another port to TUN or TAP.\n\nWhen align is larger than the usable space in a one-page skb head,\nSKB_MAX_HEAD(align) underflows and the result becomes negative when stored\nin good_linear. That value later wraps when assigned to the size_t linear\nvariable, and tun_alloc_skb() can place skb-\u003edata outside the allocated\nhead.\n\nBound the headroom stored by TUN to the one-page skb-head budget and the\nlargest non-sentinel 16-bit skb header offset. Leave one linear byte for\nraw TUN and a complete Ethernet header for TAP, including NET_IP_ALIGN.\n\nAlso pull the raw-TUN protocol byte and the TAP Ethernet header before\naccessing them, so these checks remain safe for nonlinear skbs supplied by\nother allocation paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81000",
          "url": "https://www.suse.com/security/cve/CVE-2026-81000"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280263 for CVE-2026-81000",
          "url": "https://bugzilla.suse.com/1280263"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280265 for CVE-2026-81000",
          "url": "https://bugzilla.suse.com/1280265"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282946 for CVE-2026-81000",
          "url": "https://bugzilla.suse.com/1282946"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-81000"
    },
    {
      "cve": "CVE-2026-89479",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89479"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: stop processing a packet once its association is deleted\n\nsctp_endpoint_bh_rcv() looks the association up only when chunk-\u003easoc is\nNULL, and caches the result in chunk-\u003easoc and chunk-\u003etransport without\ntaking a reference.\n\nA packet that matches no association is handed to the endpoint, so a peer\ncan bundle COOKIE ECHO, SHUTDOWN and SHUTDOWN ACK in one packet. The\nCOOKIE ECHO creates the association, the SHUTDOWN chunk caches it, and\nwith the outqueue empty the SHUTDOWN ACK reaches sctp_sf_do_9_2_final(),\nso the association and its transports are freed.\n\nThe endpoint loop has no counterpart to the asoc-\u003ebase.dead check in\nsctp_assoc_bh_rcv(). The next chunk writes to last_time_heard in the freed\ntransport and is then passed to sctp_do_sm() with the freed association.\nThe transport is freed through RCU, so this needs the packet to come off\nthe socket backlog, where the loop runs in task context.\n\nThe endpoint loop cannot do the same check: it holds no reference on the\nassociation, so reading asoc-\u003ebase.dead would itself be a use-after-free.\nMark the packet for discard in the command interpreter, just before it\ndeletes the association. That is also before sctp_inq_free() releases the\nchunk on the association receive path.\n\nsctp_sf_do_5_2_4_dupcook() issues SCTP_CMD_DELETE_TCB for the temporary\nassociation, while the one the packet belongs to stays alive. A restarting\npeer can bundle DATA behind its COOKIE ECHO, so compare against\nchunk-\u003easoc and leave that case alone.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89479",
          "url": "https://www.suse.com/security/cve/CVE-2026-89479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280786 for CVE-2026-89479",
          "url": "https://bugzilla.suse.com/1280786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282909 for CVE-2026-89479",
          "url": "https://bugzilla.suse.com/1282909"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89479"
    },
    {
      "cve": "CVE-2026-89482",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89482"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone\n\nCommit 25e5cb780e62 (\"nvme-tcp: fix possible crash in write_zeroes\nprocessing\") established that blk_rq_payload_bytes() must not be read\nwithout first checking blk_rq_nr_phys_segments(), and recorded the\nresult in nvme_tcp_setup_cmd_pdu() as req-\u003edata_len. The receive side\nwas left as it was.\n\nThe two differ for REQ_OP_WRITE_ZEROES, which has no physical segments\nbut a non-zero blk_rq_bytes(), so setup leaves req-\u003eiter untouched\nwhile the receive gate lets a C2HData through and nvme_tcp_recv_data()\ncopies into whatever the previous command on that tag left there. The\ndriver-private area is zeroed only when the tag set is allocated.\n\nReproduced with a test target that leaves a residual iterator on a tag\nand then sends a C2HData for a WRITE_ZEROES command on the same tag:\n\nBUG: KASAN: wild-memory-access in _copy_to_iter+0x642/0x1330\nWrite of size 512 at addr ffe728c2175dfa81 by task kworker/0:1H/103\n\nCPU: 0 UID: 0 PID: 103 Comm: kworker/0:1H Not tainted 7.2.0-rc5-NVMETCP-gf5098b6bae76 #1 PREEMPT(lazy)\nHardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nWorkqueue: nvme_tcp_wq nvme_tcp_io_work\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x53/0x70\n kasan_report+0xce/0x100\n ? _copy_to_iter+0x642/0x1330\n kasan_check_range+0x105/0x1b0\n __asan_memcpy+0x3c/0x60\n _copy_to_iter+0x642/0x1330\n ? __pfx_sock_has_perm+0x10/0x10\n ? worker_thread+0x45b/0xd10\n ? __pfx__copy_to_iter+0x10/0x10\n ? _raw_spin_lock_bh+0x83/0xe0\n ? __pfx__raw_spin_lock_bh+0x10/0x10\n __skb_datagram_iter+0xf3/0x820\n ? __pfx_simple_copy_to_iter+0x10/0x10\n ? __asan_memcpy+0x3c/0x60\n ? skb_copy_bits+0x58d/0x830\n skb_copy_datagram_iter+0x37/0x120\n nvme_tcp_recv_skb+0xa07/0x4320\n ? __pfx_nvme_tcp_recv_skb+0x10/0x10\n __tcp_read_sock+0x1ab/0x810\n ? __pfx_nvme_tcp_recv_skb+0x10/0x10\n ? __pfx_lock_sock_nested+0x10/0x10\n ? __pfx___tcp_read_sock+0x10/0x10\n nvme_tcp_try_recv+0x152/0x1e0\n ? __pfx_nvme_tcp_try_recv+0x10/0x10\n ? __pfx_mutex_unlock+0x10/0x10\n nvme_tcp_io_work+0x1e4/0x6c0\n ? __schedule+0x181a/0x49f0\n ? __pfx_nvme_tcp_io_work+0x10/0x10\n process_one_work+0x633/0x1030\n\nKeep the blk_rq_payload_bytes() test and add req-\u003edata_len to it. The\nold test is what rejects a C2HData naming a tag that is no longer in\nflight, because blk_update_request() zeroes rq-\u003e__data_len on\ncompletion; req-\u003edata_len and req-\u003ecurr_bio are driver-private and\nsurvive completion, so they cannot stand in for it. Setup initialises\nthe iterator only when both req-\u003ecurr_bio and req-\u003edata_len are set, so\nthe gate now tests the same two.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89482",
          "url": "https://www.suse.com/security/cve/CVE-2026-89482"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280350 for CVE-2026-89482",
          "url": "https://bugzilla.suse.com/1280350"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280351 for CVE-2026-89482",
          "url": "https://bugzilla.suse.com/1280351"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89482"
    },
    {
      "cve": "CVE-2026-89532",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89532"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Fix pcl_for_each_segment for empty chunks\n\nWhen a parsed chunk list contains a chunk whose ch_segcount is zero,\npcl_for_each_segment computes its inclusive upper bound as\n\u0026chunk-\u003ech_segments[ch_segcount - 1]. ch_segcount is u32, so the\nsubtraction wraps to 0xFFFFFFFF and the bound lands far past the\nch_segments flex array. The loop body then walks unrelated memory at\nsizeof(struct svc_rdma_segment) stride until it faults.\n\nA zero-segcount chunk is reachable from the wire:\nxdr_check_write_chunk() only rejects segcount values greater than\nrc_maxpages, and pcl_alloc_write() links a freshly allocated chunk\nonto rc_write_pcl/rc_reply_pcl before its segment-fill loop runs,\nso a Write or Reply chunk advertising zero segments leaves\nch_segcount == 0 on the list. When the transport has negotiated\nSend-With-Invalidate, svc_rdma_get_inv_rkey() iterates all four\nPCLs with pcl_for_each_segment and dereferences segment-\u003ers_handle\non each iteration, turning the underflow into an out-of-bounds read\nand a general protection fault.\n\n    xdr_check_write_list / xdr_check_reply_chunk\n      pcl_alloc_write()\n        chunk = pcl_alloc_chunk(...)  /* ch_segcount = 0 */\n        list_add_tail(\u0026chunk-\u003ech_list, \u0026pcl-\u003ecl_chunks)\n        /* fill loop iterates zero times for wire segcount 0 */\n\n    svc_rdma_get_inv_rkey()\n      pcl_for_each_chunk(rc_write_pcl)\n        pcl_for_each_segment(segment, chunk)\n          pos \u003c= \u0026ch_segments[0u - 1u]  /* 0xFFFFFFFF */\n          segment-\u003ers_handle            /* OOB read -\u003e GPF */\n\nFix by switching the macro to a half-open upper bound that uses\nch_segcount directly. For ch_segcount == 0 the loop start equals the\nloop end and the body is skipped; for ch_segcount \u003e 0 the iteration\nrange is unchanged. All six existing call sites in\nnet/sunrpc/xprtrdma/svc_rdma_recvfrom.c and\nnet/sunrpc/xprtrdma/svc_rdma_rw.c remain correct under the new bound,\nso no caller changes are needed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89532",
          "url": "https://www.suse.com/security/cve/CVE-2026-89532"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280985 for CVE-2026-89532",
          "url": "https://bugzilla.suse.com/1280985"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280989 for CVE-2026-89532",
          "url": "https://bugzilla.suse.com/1280989"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89532"
    },
    {
      "cve": "CVE-2026-89533",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89533"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Fix offset arithmetic in read_chunk_range\n\nsvc_rdma_read_chunk_range() walks a Read chunk\u0027s segment list to\nbuild a sub-range starting at byte offset and spanning length bytes\nfor a Position-Zero or Call chunk. Two arithmetic defects in the\nper-segment loop produce wrong DMA lengths and a u32 underflow:\n\n    pcl_for_each_segment(segment, chunk) {\n            if (offset \u003e segment-\u003ers_length) {\n                    offset -= segment-\u003ers_length;\n                    continue;\n            }\n\n            dummy.rs_handle = segment-\u003ers_handle;\n            dummy.rs_length = min_t(u32, length,\n                                    segment-\u003ers_length) - offset;\n            dummy.rs_offset = segment-\u003ers_offset + offset;\n\nFirst, the skip predicate uses \u0027\u003e\u0027 instead of \u0027\u003e=\u0027. When offset\nequals the segment\u0027s full rs_length, the segment is fully consumed\nand should be skipped, but the loop falls through into the body.\nThe resulting dummy.rs_length is min_t(u32, length, rs_length) -\nrs_length, which underflows to a near-UINT_MAX u32 when length is\nsmaller than rs_length, or is zero otherwise.\n\nSecond, the length formula subtracts offset from the min_t() result\nrather than from segment-\u003ers_length before the cap. For offset \u003e 0\nthe segment\u0027s residual is rs_length - offset, not rs_length, so the\ncap must be applied to the residual. With the current bracketing,\nwhenever length is smaller than rs_length - offset the per-segment\nlength becomes length - offset instead of length, silently dropping\noffset bytes from the rebuilt chunk. Combined with the boundary\ncase above it also enables the u32 underflow path, which propagates\na huge nr_bvec into svc_rdma_build_read_segment() and a multi-MiB\nkmalloc_array_node() in svc_rdma_get_rw_ctxt().\n\nAdditionally, svc_rdma_read_call_chunk() can invoke this function\nwith length == 0 when the last Read chunk ends exactly at the end\nof the Call chunk. With the corrected \u003e= predicate, every segment\nis skipped and the function returns the initial -EINVAL, rejecting\na valid request. Return success immediately when length is zero.\nAlso break out of the loop once length is fully consumed to avoid\npassing zero-length segments to svc_rdma_build_read_segment().\n\nFix by using \u0027\u003e=\u0027 so a fully-consumed segment is skipped, by\nmoving \u0027- offset\u0027 inside min_t() so the cap is applied to the\nsegment\u0027s residual length, by returning success for zero-length\nrequests, and by stopping iteration when the requested range has\nbeen consumed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89533",
          "url": "https://www.suse.com/security/cve/CVE-2026-89533"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280993 for CVE-2026-89533",
          "url": "https://bugzilla.suse.com/1280993"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280995 for CVE-2026-89533",
          "url": "https://bugzilla.suse.com/1280995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89533"
    },
    {
      "cve": "CVE-2026-89544",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89544"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: fix gssx_dec_option_array error path bugs\n\nFour coupled defects in the gssx XDR option-array decoder make the\nerror paths unsafe: a NULL deref in the caller, a refcount leak on\nthe decoded group_info, and a latent use-after-free that the leak\nfix would otherwise expose.\n\ngssx_dec_option_array() sets oa-\u003ecount = 1 before allocating\noa-\u003edata.  If that allocation fails, -ENOMEM is returned with\noa-\u003ecount == 1 and oa-\u003edata == NULL.  All other error paths jump\nto free_oa: which frees oa-\u003edata and NULLs it but also leaves\noa-\u003ecount == 1.  The caller trusts the count:\n\n    gssp_accept_sec_context_upcall()\n      gssx_dec_accept_sec_context()\n        gssx_dec_option_array()        /* fails, count=1 data=NULL */\n      data = res.options.data[0].value /* NULL deref */\n\nIndependently, free_creds: releases the partially decoded svc_cred\nwith a bare kfree(creds).  gssx_dec_linux_creds() installs a\ngroups_alloc() result into creds-\u003ecr_group_info; that object is\nkvmalloc-backed and refcounted, and only put_group_info() reaches\nkvfree().  A plain kfree(creds) drops the wrapper and leaks the\ngroup_info allocation.\n\nThe natural fix for the leak is to call free_svc_cred(creds) before\nkfree(creds), but free_svc_cred() invokes put_group_info() on\ncreds-\u003ecr_group_info unconditionally when non-NULL.  The existing\nout_free_groups: path in gssx_dec_linux_creds() already called\ngroups_free() on that pointer without clearing it, so once\nfree_svc_cred() is wired in, the subsequent put_group_info() would\ntouch freed memory.\n\nFix all four together:\n\n  - Move the oa-\u003ecount = 1 assignment below the oa-\u003edata allocation\n    so it is never set when oa-\u003edata is NULL.\n  - Reset oa-\u003ecount to 0 at free_oa: so count and data stay\n    coherent and the caller sees an empty option array.\n  - Call free_svc_cred(creds) before kfree(creds) at free_creds:\n    so the refcounted cr_group_info is released.  free_svc_cred()\n    either NULL-guards each field explicitly (cr_group_info has\n    an if() check) or delegates to a helper that is NULL-safe\n    itself (kfree for the string fields, gss_mech_put() which\n    guards with if(gm) at gss_mech_switch.c:342), so it is safe\n    to call on a partially decoded svc_cred where only\n    cr_uid/cr_gid/cr_group_info have been written and everything\n    else is zero from kzalloc.\n  - In gssx_dec_linux_creds()\u0027s out_free_groups: path, release\n    cr_group_info with put_group_info() rather than groups_free()\n    so the teardown matches free_svc_cred()\u0027s refcount-aware path,\n    and clear the pointer so a later free_svc_cred() on the same\n    creds does not release it a second time.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89544",
          "url": "https://www.suse.com/security/cve/CVE-2026-89544"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280758 for CVE-2026-89544",
          "url": "https://bugzilla.suse.com/1280758"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280760 for CVE-2026-89544",
          "url": "https://bugzilla.suse.com/1280760"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89544"
    },
    {
      "cve": "CVE-2026-89551",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89551"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow\n\nxdr_buf_trim() trims `len` bytes from the tail of an xdr_buf by\nwalking the tail, pages, and head iovecs.  Each per-section step\nuses min_t() so it never removes more bytes than that section\nholds, but the final accounting at the fix_len label subtracts the\ntotal bytes actually consumed from buf-\u003elen without any clamp:\n\n    fix_len:\n            buf-\u003elen -= (len - trim);\n\nWhen the caller has set buf-\u003elen to a value smaller than the sum\nof the iov_lens, (len - trim) can exceed buf-\u003elen and the unsigned\nsubtraction wraps to near UINT_MAX.  gss_krb5_unwrap_v2() reaches\nxdr_buf_trim() in exactly that state:\n\n    buf-\u003ehead[0].iov_len -= GSS_KRB5_TOK_HDR_LEN + headskip;\n    buf-\u003elen = len - (GSS_KRB5_TOK_HDR_LEN + headskip);\n    xdr_buf_trim(buf, ec + GSS_KRB5_TOK_HDR_LEN + tailskip);\n\nbuf-\u003elen is a small wire-derived value while the iov_lens are at\npage scale, so the per-section loops legitimately consume far more\nbytes than buf-\u003elen records.  The wrapped buf-\u003elen then propagates\nas the authoritative stream bound into every downstream XDR\ndecoder.\n\nFix by clamping the decrement so buf-\u003elen bottoms out at zero:\n\n    buf-\u003elen -= min_t(unsigned int, buf-\u003elen, len - trim);\n\nOn the normal path where the iov_lens sum to buf-\u003elen, (len - trim)\nis always \u003c= buf-\u003elen and the result is identical to before.  No\ncallers change behavior outside the underflow case.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89551",
          "url": "https://www.suse.com/security/cve/CVE-2026-89551"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280727 for CVE-2026-89551",
          "url": "https://bugzilla.suse.com/1280727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280728 for CVE-2026-89551",
          "url": "https://bugzilla.suse.com/1280728"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89551"
    },
    {
      "cve": "CVE-2026-89569",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89569"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: serialize security confirmation handling\n\nrfcomm_security_cfm() looks up a session on session_list and then walks\nits DLC list without holding rfcomm_mutex. Since RFCOMM session teardown\nuses rfcomm_mutex, krfcommd can close and free the same session and DLCs\nconcurrently:\n\n  hci_rx_work                    krfcommd\n  -----------                    ---------\n  rfcomm_session_get()\n                                 rfcomm_lock()\n                                 rfcomm_session_close()\n                                   rfcomm_dlc_unlink()\n                                   rfcomm_session_del()\n                                     kfree(s)\n                                 rfcomm_unlock()\n  walk s-\u003edlcs\n\nThe callback can then read a freed session list head and touch freed DLCs\nwhile updating their flags or timers.\n\nSerialize the session lookup and DLC traversal in rfcomm_security_cfm()\nwith rfcomm_mutex. This matches the existing RFCOMM session lifetime\nrules and prevents concurrent rfcomm_session_del() / rfcomm_dlc_unlink()\nfrom tearing the objects down while the callback is using them.\n\nKASAN reported:\n\n  BUG: KASAN: slab-use-after-free in rfcomm_security_cfm+0x41c/0x440\n  Read of size 8 at addr ffff888111fb3960 by task kworker/u17:1/89\n  Workqueue: hci0 hci_rx_work\n  Call Trace:\n   rfcomm_security_cfm+0x41c/0x440\n   hci_encrypt_cfm+0x139/0x590\n   hci_encrypt_change_evt+0x37b/0xc40\n   hci_event_packet+0x71b/0xb20\n   hci_rx_work+0x293/0x730\n  Allocated by task 69:\n   rfcomm_session_add+0x9e/0x2f0\n   rfcomm_run+0x44b/0x41e0\n  Freed by task 69:\n   kfree+0x131/0x3c0\n   rfcomm_session_del+0x188/0x220\n   rfcomm_run+0x1985/0x41e0",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89569",
          "url": "https://www.suse.com/security/cve/CVE-2026-89569"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280733 for CVE-2026-89569",
          "url": "https://bugzilla.suse.com/1280733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280738 for CVE-2026-89569",
          "url": "https://bugzilla.suse.com/1280738"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89569"
    },
    {
      "cve": "CVE-2026-89603",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89603"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nentry: Fix seccomp bypass after ptrace with TSYNC\n\nSashiko review pointed out the following issue.\n\nIf a thread is stopped in syscall_trace_enter() for ptrace, another\nthread can install a seccomp filter with SECCOMP_FILTER_FLAG_TSYNC\n(e.g., via seccomp_attach_filter()). This will successfully set\nSYSCALL_WORK_SECCOMP on the stopped thread, but syscall_trace_enter()\nevaluates a cached \u0027work\u0027 variable sampled on entry. Consequently,\nthe subsequent check for SYSCALL_WORK_SECCOMP misses the newly\nassigned flag, and the filter is silently bypassed.\n\nThis race condition could allow an unprivileged process to execute\na prohibited system call (e.g., execve) that the newly installed filter\nwas intended to block, especially since the tracer might have modified\nthe system call number during the ptrace stop.\n\nFix this by re-reading the syscall_work flags after ptrace handling,\nso that any new SYSCALL_WORK_SECCOMP flag set by another thread via\nTSYNC during the ptrace stop is observed before the subsequent\nseccomp check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89603",
          "url": "https://www.suse.com/security/cve/CVE-2026-89603"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280923 for CVE-2026-89603",
          "url": "https://bugzilla.suse.com/1280923"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280924 for CVE-2026-89603",
          "url": "https://bugzilla.suse.com/1280924"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89603"
    },
    {
      "cve": "CVE-2026-89631",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89631"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject a tree connect response whose byte count is too small\n\nCIFSTCon() bounds its strnlen() over the byte area with the server\u0027s\nByteCount minus two, which for ByteCount 0 or 1 goes negative as an int\nand converts to a huge size_t.  The later subtraction wraps the __u16\nbytes_left, and that is what bounds cifs_strndup_from_utf16(): a bound of\nup to 65535 against a ~16 KB cifs_req_poolp object runs off the end of the\nslab object, and the bytes reach userspace through tcon-\u003enativeFileSystem\nin /proc/fs/cifs/DebugData.\n\nReject a byte area too small for what the parser consumes.  Two bytes is\nthe least it can consume, and no conformant response carries fewer.  The\nnew trace point is the 129th smb_eio_trace entry, which __mode(byte)\ncannot represent, so the attribute goes with it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89631",
          "url": "https://www.suse.com/security/cve/CVE-2026-89631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280496 for CVE-2026-89631",
          "url": "https://bugzilla.suse.com/1280496"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280498 for CVE-2026-89631",
          "url": "https://bugzilla.suse.com/1280498"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89631"
    },
    {
      "cve": "CVE-2026-89636",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89636"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: clear ce-\u003etgthint in free_tgts()\n\nWhen free_tgts() frees all structures in ce-\u003etlist, ce-\u003etgthint\nis left pointing to one of the freed cache_dfs_tgt structures.\n\nIf ce-\u003etgthint is not reset before it is used later, it results\nin a use-after-free.\n\nSet ce-\u003etgthint to NULL in free_tgts() after the elements are\nfreed to reflect that no elements remain.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89636",
          "url": "https://www.suse.com/security/cve/CVE-2026-89636"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281042 for CVE-2026-89636",
          "url": "https://bugzilla.suse.com/1281042"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281043 for CVE-2026-89636",
          "url": "https://bugzilla.suse.com/1281043"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89636"
    },
    {
      "cve": "CVE-2026-89638",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89638"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions\n\nWhen a file has the setuid or setgid bit set and is written to, the VFS\nstrips those bits and issues a setattr with ATTR_KILL_SUID/ATTR_KILL_SGID\ntogether with an ATTR_MODE carrying the already-cleared mode.\n\nBoth cifs_setattr_unix() and cifs_setattr_nounix() unconditionally dropped\nATTR_MODE in that case:\n\n\t/* skip mode change if it\u0027s just for clearing setuid/setgid */\n\tif (attrs-\u003eia_valid \u0026 (ATTR_KILL_SUID|ATTR_KILL_SGID))\n\t\tattrs-\u003eia_valid \u0026= ~ATTR_MODE;\n\nThis is fine for the default mount, where the mode is only emulated via\nthe DOS read-only attribute and cannot represent the setuid/setgid bits\nanyway.  However, with the \"cifsacl\" or \"modefromsid\" mount options the\nmode is stored on the server through an ACL (id_mode_to_cifs_acl()), with\nthe SMB3.1.1 POSIX extensions the mode is sent to the server directly,\nand with the SMB1 Unix extensions (cifs_setattr_unix) the mode is sent\nvia CIFSSMBUnixSetPathInfo().  In all those cases dropping ATTR_MODE means\nthe cleared mode is never pushed to the server, so the setuid/setgid bit\nsurvives the write.\n\nThis is a security issue: on local filesystems the setuid bit is stripped\nwhen a file is written, but over these cifs.ko mounts the bit persists on\nthe server, potentially allowing an unexpected privilege escalation on\nsubsequent execution.\n\nFix this in two places:\n\n  1. cifs_setattr_nounix(): only take the \"skip mode change\" shortcut\n     when the mode is emulated via the DOS read-only attribute (i.e.\n     neither cifsacl/modefromsid nor the SMB3.1.1 POSIX extensions are\n     in effect), so that the cleared mode is propagated to the server\n     in the ACL / POSIX cases.\n\n  2. cifs_setattr_unix(): this function is only called when Unix\n     extensions are in effect, so the mode is always stored on the\n     server.  Remove the shortcut entirely so that the cleared mode is\n     always pushed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89638",
          "url": "https://www.suse.com/security/cve/CVE-2026-89638"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281046 for CVE-2026-89638",
          "url": "https://bugzilla.suse.com/1281046"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281047 for CVE-2026-89638",
          "url": "https://bugzilla.suse.com/1281047"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89638"
    },
    {
      "cve": "CVE-2026-89674",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89674"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget\n\nThe XDR buffer size calculation in nfsd4_ff_encode_layoutget() has\nmultiple errors that can result in either an out-of-bounds write or\nleaking uninitialized kernel memory to the client:\n\n - fh_len doesn\u0027t account for XDR padding on the file handle data\n - uid and gid lengths use \"8 + len\" but xdr_encode_opaque() actually\n   writes \"4 + xdr_align_size(len)\" bytes\n - ds_len omits the flags and stats_collect_hint fields (8 bytes),\n   while len\u0027s header constant overestimates by 8 bytes -- these\n   partially cancel but leave a net mismatch\n\nThe worst case occurs with short strings (e.g. uid=0, gid=0 with an\nodd-sized file handle), where the function writes up to 5 bytes past\nthe reserved XDR buffer. Conversely, when string lengths happen to be\n4-byte aligned, the reservation is too large and stale buffer content\nis sent to the client.\n\nFix this by breaking out every encoded field explicitly in the ds_len\ncalculation, using xdr_align_size() for all variable-length opaque\nfields, and correcting the header constants.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89674",
          "url": "https://www.suse.com/security/cve/CVE-2026-89674"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280243 for CVE-2026-89674",
          "url": "https://bugzilla.suse.com/1280243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280285 for CVE-2026-89674",
          "url": "https://bugzilla.suse.com/1280285"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89674"
    },
    {
      "cve": "CVE-2026-89932",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89932"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nVMX: Always flush vpid02 on first use\n\nMake sure vpid02 is always flushed on first use by setting last_vpid=0\nwhen allocating vpid02.  nested_vmx_transition_tlb_flush() will always\ndetect a VPID change on first VM-Enter after VMXON, because VPID=0 in\nvmcs12 is not allowed if L1 enables VPID.\n\nThis avoids using stale TLB entries from a previous lifetime of the\nVPID, that might have been associated with a different vCPU (or a\ncompletely different VM).\n\nNote that last_vpid is already being initialized as 0 when the vCPU is\ncreated, but it is not reset when vpid02 is freed on VMXOFF. Hence, the\nproblem can only occur if L1 does VMXOFF -\u003e VMXON, runs an L2, and KVM\nhappens to reuse a VPID that has TLB entries on the physical CPU.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89932",
          "url": "https://www.suse.com/security/cve/CVE-2026-89932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281360 for CVE-2026-89932",
          "url": "https://bugzilla.suse.com/1281360"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281362 for CVE-2026-89932",
          "url": "https://bugzilla.suse.com/1281362"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89932"
    },
    {
      "cve": "CVE-2026-89968",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89968"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: reject unsolicited H2CData PDUs\n\nnvmet_tcp_handle_h2c_data_pdu() accepts an H2CData PDU after only checking\nthat its TTAG is a valid in-range command index and that the command\u0027s\ndata buffers are mapped. It never checks that the target has actually\nsolicited that data by sending an R2T for the command.\n\nA remote host can abuse this. It submits a write command that takes the\nR2T path and, before the target transmits the R2T, sends an H2CData PDU\nfor that command\u0027s tag. The data completes the command early, and when\nthe command then fails synchronously (e.g. a length mismatch caught by\nnvmet_check_transfer_len()), it is completed a second time. Each\ncompletion calls nvmet_tcp_queue_response(), so the same command is added\nto queue-\u003eresp_list twice while it is still linked; the second llist_add()\nmakes the node point to itself (lentry-\u003enext == lentry).\n\nnvmet_tcp_process_resp_list() then walks that self-referential node and\nadds the command to resp_send_list twice. With CONFIG_DEBUG_LIST this\ntrips the \"list_add double add\" check (kernel BUG); without it the loop\nnever terminates and the nvmet_tcp workqueue wedges (soft-lockup). It is\nremotely triggerable and needs no authentication on an allow_any_host\nsubsystem.\n\nTrack whether an R2T has been transmitted for a command and reject an\nH2CData PDU that arrives before it. The flag is cleared on command reuse\n(nvmet_tcp_get_cmd() zeroes cmd-\u003eflags) and stays set across the multiple\nH2CData PDUs of a single solicited transfer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89968",
          "url": "https://www.suse.com/security/cve/CVE-2026-89968"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281229 for CVE-2026-89968",
          "url": "https://bugzilla.suse.com/1281229"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281235 for CVE-2026-89968",
          "url": "https://bugzilla.suse.com/1281235"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89968"
    },
    {
      "cve": "CVE-2026-90003",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90003"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfutex: Prevent rcuwait use-after-free during requeue PI\n\nOn PREEMPT_RT, FUTEX_CMP_REQUEUE_PI can trigger a KASAN report\n(slab-out-of-bounds) in futex_requeue_pi_complete() invocation of\nrcuwait_wake_up().\n\nThe futex_q used by futex_wait_requeue_pi() is allocated on the waiter\u0027s\nstack. An early wakeup can race with a PI requeue as follows:\n\n        waiter                          requeue task\n        ------                          ------------\nfutex_wait_requeue_pi()\n  futex_do_wait()\n    schedule()\n                                       futex_requeue\n                                         futex_proxy_trylock_atomic()\n                                           futex_requeue_pi_prepare()\n                                            Q_REQUEUE_PI_NONE -\u003e Q_REQUEUE_PI_IN_PROGRESS\n* timeout/ signal wakes waiter *\n  futex_requeue_pi_wakeup_sync()\n   Q_REQUEUE_PI_IN_PROGRESS -\u003e Q_REQUEUE_PI_WAIT\n                                           requeue_pi_wake_futex\n                                             futex_requeue_pi_complete()\n                                               cmpxchg Q_REQUEUE_PI_WAIT -\u003e Q_REQUEUE_PI_LOCKED\n    rcuwait_wait_event()\n      if (atomic_read(\u0026q-\u003erequeue_state) != Q_REQUEUE_PI_WAIT)\n       break /* no schedule() */\n\n /* q.pi_state-\u003eowner == current */\n futex_private_hash_put()\n /* return from syscall */\n                                              rcuwait_wake_up(\u0026q-\u003erequeue_wait)\n                                                /* q is gone */\n\nfutex_requeue_pi_complete() publishes Q_REQUEUE_PI_LOCKED before\ncalling rcuwait_wake_up(). The waiter observes this state in\nrcuwait_wait_event() before invoking schedule() in rcuwait_wait_event().\nHere, the waiter is free leave the syscall before requeue task can\ncomplete the wake.\n\nTo address this race skip rcuwait_wake_up() in the Q_REQUEUE_PI_LOCKED\ncase.\nThis state is only published by requeue_pi_wake_futex(), which saves\nq-\u003etask before futex_requeue_pi_complete() and wakes the waiter via\nwake_up_state().\n\nThis wake is intended to wake the waiter from its futex_do_wait() sleep.\nIf the waiter is still sleeping there, it can not get into the\nQ_REQUEUE_PI_WAIT state (and require this removed wake).\nShould the waiter be woken up from futex_do_wait() by other means (as in\nthis example) and sleep in futex_requeue_pi_wakeup_sync() then the\nwake_up_state() from requeue_pi_wake_futex() will wake it, too.\nShould the waiter task terminate before wake_up_state() had a chance to\nwake the task then the task pointer does not become invalid because the\nfutex_hash_bucket::lock is held and the task pointer is RCU protected.\n\n[bigeasy: Updated comment and commit message]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90003",
          "url": "https://www.suse.com/security/cve/CVE-2026-90003"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281295 for CVE-2026-90003",
          "url": "https://bugzilla.suse.com/1281295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281296 for CVE-2026-90003",
          "url": "https://bugzilla.suse.com/1281296"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90003"
    },
    {
      "cve": "CVE-2026-90104",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90104"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4.1: zero referring call lists before decoding\n\ndecode_cb_sequence_args() allocates csa_rclists with kmalloc_objs(), so\neach referring_call_list starts uninitialized. decode_rc_list() assigns\nrcl_refcalls only when rcl_nrefcalls is nonzero. A valid list with zero\nreferring calls therefore leaves the pointer uninitialized, and\nnfs4_callback_sequence() later passes stale slab contents to kfree().\n\nAllocate csa_rclists with kzalloc_objs() so every rcl_refcalls member is\nNULL from the beginning, including valid empty referring call lists.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90104",
          "url": "https://www.suse.com/security/cve/CVE-2026-90104"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281546 for CVE-2026-90104",
          "url": "https://bugzilla.suse.com/1281546"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281585 for CVE-2026-90104",
          "url": "https://bugzilla.suse.com/1281585"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90104"
    },
    {
      "cve": "CVE-2026-90198",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90198"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: core: Fix use-after-free in snd_card_do_free()\n\nA use-after-free was detected in snd_card_do_free() when a sound card\nmanaged by devres is unbound while a user-space application still holds an\nopen file descriptor.\n\nFor managed cards, the memory is allocated using devres_alloc(), and its\nrelease function is set to __snd_card_release(), which calls\nsnd_card_free(). When the device is unbound, the unbind thread calls\nsnd_card_free(), which drops a reference to the card\u0027s device. If the user\nthread still has an open file descriptor, the reference count does not\nreach zero, and the unbind thread blocks on wait_for_completion(\u0026released).\n\nWhen the user thread closes the file descriptor, it drops the final\nreference, invoking the device release callback release_card_device(),\nwhich calls snd_card_do_free(). snd_card_do_free() performs cleanup and\ncalls complete(card-\u003erelease_completion). This wakes up the unbind thread,\nwhich returns from snd_card_free() and __snd_card_release(). The devres\ncore then immediately frees the memory block containing the snd_card\nstructure.\n\nMeanwhile, the user thread continues execution in snd_card_do_free() and\nevaluates `if (!card-\u003emanaged)`. It reads the `managed` boolean from the\nsnd_card structure that was just freed by the unbind thread, triggering a\nKASAN use-after-free.\n\nFix this by caching the value of card-\u003emanaged in a local variable before\ncalling complete(). This ensures that the card pointer is not dereferenced\nafter the unbind thread has been woken up and potentially freed the card.\n\nBUG: KASAN: use-after-free in snd_card_do_free sound/core/init.c:604\n[inline]\nBUG: KASAN: use-after-free in release_card_device+0x1ab/0x1b0\nsound/core/init.c:153\nRead of size 1 at addr ffff8881912ec909 by task syz-executor130/5857\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120\n print_address_description+0x55/0x1e0 mm/kasan/report.c:378\n print_report+0x58/0x70 mm/kasan/report.c:482\n kasan_report+0x117/0x150 mm/kasan/report.c:595\n snd_card_do_free sound/core/init.c:604 [inline]\n release_card_device+0x1ab/0x1b0 sound/core/init.c:153\n device_release+0xc4/0x1f0 drivers/base/core.c:-1\n kobject_cleanup lib/kobject.c:689 [inline]\n kobject_release lib/kobject.c:720 [inline]\n kref_put include/linux/kref.h:65 [inline]\n kobject_put+0x222/0x550 lib/kobject.c:737\n snd_card_file_remove+0x331/0x390 sound/core/init.c:1125\n snd_pcm_release+0x12c/0x160 sound/core/pcm_native.c:2986\n __fput+0x418/0xa50 fs/file_table.c:512\n fput_close_sync+0x11f/0x240 fs/file_table.c:617\n __do_sys_close fs/open.c:1511 [inline]\n __se_sys_close fs/open.c:1496 [inline]\n __x64_sys_close+0x7e/0x110 fs/open.c:1496\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90198",
          "url": "https://www.suse.com/security/cve/CVE-2026-90198"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281818 for CVE-2026-90198",
          "url": "https://bugzilla.suse.com/1281818"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281820 for CVE-2026-90198",
          "url": "https://bugzilla.suse.com/1281820"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90198"
    },
    {
      "cve": "CVE-2026-90413",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90413"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/isert: reject login PDUs declaring more data than was received\n\nisert_login_recv_done() records how many bytes the HCA actually placed in\nthe login buffer, but nothing compares that against the length the login\nPDU\u0027s BHS declares.  isert_rx_login_req() copies min(login_req_len,\nMAX_KEY_VALUE_PAIRS) bytes into login-\u003ereq_buf, and the login code then\nreads the declared length back out of that buffer - for the first PDU in\niscsi_target_locate_portal(),\n\n\tpayload_length = ntoh24(login_req-\u003edlength);\n\ttmpbuf = kmemdup_nul(login-\u003ereq_buf, payload_length, GFP_KERNEL);\n\nand for the ones after it in iscsi_decode_text_input(), reached from\niscsi_target_do_login().\n\nlogin-\u003ereq_buf is a fixed MAX_KEY_VALUE_PAIRS (8192) byte allocation, so\nan initiator that declares more than it sends reads off the end of it,\nbefore authentication and with the length under its control:\n\n  BUG: KASAN: slab-out-of-bounds in kmemdup_nul+0x43/0x80\n  Read of size 8193 at addr ffff8881056a8000 by task iscsi_np/167\n   __asan_memcpy+0x23/0x60\n   kmemdup_nul+0x43/0x80\n   iscsi_target_locate_portal+0x48d/0x1180\n   iscsi_target_login_thread+0x19a9/0x3350\n  Allocated by task 167:\n   __kmalloc_cache_noprof+0x158/0x370\n   iscsi_target_login_thread+0x971/0x3350\n  which belongs to the cache kmalloc-8k of size 8192\n  allocated 8192-byte region\n\nFalsifying the second login PDU instead reaches the other reader, on the\nsame buffer:\n\n  BUG: KASAN: slab-out-of-bounds in kmemdup_nul+0x43/0x80\n  Read of size 8193 at addr ffff888104d10000 by task kworker/1:1/50\n  Workqueue: isert_login_wq iscsi_target_do_login_rx\n   __asan_memcpy+0x23/0x60\n   kmemdup_nul+0x43/0x80\n   iscsi_decode_text_input+0xc6/0x11c0\n   iscsi_target_do_login+0x261/0x1470\n   iscsi_target_do_login_rx+0x51d/0x7d0\n\niscsit over TCP is not exposed: iscsit_get_login_rx() validates the\ndeclared length with iscsi_target_check_login_request() and then reads\nexactly that many bytes off the socket, so the declared length governs\nhow much arrives rather than how much is copied out of an already-filled\nbuffer.  isert does not call iscsi_target_check_login_request() at all.\n\nReject a login PDU whose declared DataSegmentLength exceeds what was\nreceived, in both paths that reach isert_rx_login_req():\nisert_get_login_rx() for the first login PDU and isert_login_recv_done()\nfor the ones after it.  dlength \u003c= login_req_len is allowed because the\nreceived count can include up to three bytes of iSCSI padding.\n\nOnce the check is in place the copy out can no longer exceed the copy in:\nthe posted login SGE is ISER_RX_PAYLOAD_SIZE, so login_req_len cannot\nexceed MAX_KEY_VALUE_PAIRS and the min() in isert_rx_login_req() is\nlogin_req_len.\n\nLike the existing short-PDU check added by 29e7b925ae6d, the reject in\nisert_login_recv_done() returns without completing login_req_comp, so a\nmalformed subsequent PDU leaves the login to be torn down by the login\ntimer rather than failing immediately.  The first-PDU path returns an\nerror and fails straight away.\n\nReproduced on 7.2.0-rc4 with soft-RoCE (rdma_rxe) under KASAN, using an\ninitiator that sends the real key=value payload while declaring 8193 in\nthe BHS, on the first login PDU and on the second in separate runs.  The\nreported read size tracks the declared value exactly; 16384 and 61440\nbehave the same.  Unpatched 3 of 3 runs report on each of the two paths,\npatched 0 of 3 on both, run alternately in a single session, and a normal\nlogin still completes on the patched build.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90413",
          "url": "https://www.suse.com/security/cve/CVE-2026-90413"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282113 for CVE-2026-90413",
          "url": "https://bugzilla.suse.com/1282113"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282118 for CVE-2026-90413",
          "url": "https://bugzilla.suse.com/1282118"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90413"
    },
    {
      "cve": "CVE-2026-90414",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90414"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/isert: reject PDUs declaring more data than was received\n\nisert_recv_done() hands each received PDU to the opcode handlers without\never looking at wc-\u003ebyte_len, the number of bytes the HCA actually placed\nin the receive descriptor. The handlers then copy that many bytes - the\ndata-segment length the initiator declared in the BHS\n(ntoh24(hdr-\u003edlength), via the derived unsol_data_len / imm_data_len) -\nout of the fixed-size descriptor:\n\n  isert_handle_iscsi_dataout():\n        sg_copy_from_buffer(sg_start, sg_nents, isert_get_data(rx_desc),\n                            unsol_data_len);\n  isert_handle_scsi_cmd():\n        sg_copy_from_buffer(cmd-\u003ese_cmd.t_data_sg, sg_nents,\n                            isert_get_data(rx_desc), imm_data_len);\n\nBecause the declared length is never checked against wc-\u003ebyte_len, an\ninitiator can declare a data segment larger than the bytes it actually\nsent (and larger than the descriptor) and cause an out-of-bounds read of\nthe receive buffer.\n\nNothing upstream of isert closes this door:\n\n  - __iscsit_check_dataout_hdr() bounds the inbound payload against\n    conn_ops-\u003eMaxXmitDataSegmentLength (MXDSL) - a transmit parameter,\n    used here for the inbound check.\n  - iscsi_set_connection_parameters() sets\n    ops-\u003eMaxXmitDataSegmentLength = ops-\u003eTargetRecvDataSegmentLength;\n    and TARGETRECVDATASEGMENTLENGTH is absent from the min()-clamp list in\n    iscsi_check_acceptor_state(), so the value the initiator declares is\n    adopted verbatim (type range 512..16777215). The initiator effectively\n    raises its own ceiling.\n  - isert never clamps the negotiated value to its own fixed receive\n    descriptor (ISER_RX_SIZE, 9216 bytes), so the target core\u0027s bound and\n    the descriptor size are unrelated.\n\nThe imm_data_len == data_len path is more than an over-read: it aliases\nthe receive descriptor via sg_set_buf() and passes it to the backend as\nthe data source for the SCSI WRITE, so an over-declared length causes heap\ncontents past the descriptor to be written through the backend to the\nbacking store. The backend is the victim of the oversized scatterlist\nisert hands it, not the cause; no read-back of the written bytes was\ndemonstrated.\n\nTrigger: after login completes (full feature phase), an initiator that has\ndeclared a large TargetRecvDataSegmentLength and a FirstBurstLength that\npermits unsolicited/immediate data sends a PDU whose declared data-segment\nlength exceeds what was received. With KASAN:\n\n  BUG: KASAN: slab-out-of-bounds in sg_copy_buffer+0x150/0x1c0\n  Read of size 4096 at addr ffff888109720800 by task kworker/1:0H/25\n  Workqueue: ib-comp-wq ib_cq_poll_work\n  Call Trace:\n   sg_copy_buffer+0x150/0x1c0\n   isert_recv_done+0xba6/0x2390\n   __ib_process_cq+0xe1/0x390\n   ib_cq_poll_work+0x46/0x150\n\nisert_recv_done+0xba6 resolves to isert_handle_iscsi_dataout()\n(ib_isert.c:1160), inlined through isert_rx_opcode().\n\nValidate wc-\u003ebyte_len against the framing in isert_recv_done() before the\nPDU reaches any handler, and reinstate the connection if it is short.\nBecause the test compares without subtracting the header length, it also\nrejects PDUs shorter than the iSER and iSCSI headers, which would otherwise\nbe parsed out of stale descriptor contents. The login handler rejects PDUs\nshorter than ISER_HEADERS_LEN (commit 29e7b925ae6d (\"IB/isert: Reject login\nPDUs shorter than ISER_HEADERS_LEN\")) but does not bound the declared\nlength either; that is fixed in the next patch. The data handlers had no\nlength check at all.\n\nisert reads the data segment from a fixed offset: isert_get_data()\nreturns the iSER header plus ISER_HEADERS_LEN and makes no adjustment for\nan AHS.  The bytes the handlers touch are therefore exactly\n[ISER_HEADERS_LEN, ISER_HEADERS_LEN + dlength), and comparing that sum\nagainst wc-\u003ebyte_len bounds precisely the region that is read.  An AHS\nterm would only make the test stricter without bounding anything furth\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90414",
          "url": "https://www.suse.com/security/cve/CVE-2026-90414"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282110 for CVE-2026-90414",
          "url": "https://bugzilla.suse.com/1282110"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282111 for CVE-2026-90414",
          "url": "https://bugzilla.suse.com/1282111"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90414"
    },
    {
      "cve": "CVE-2026-93104",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93104"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rvt: Return NULL after port allocation failure\n\nrvt_alloc_device() deallocates the IB device when its port array cannot\nbe allocated but then returns the pointer to the released allocation.\nCallers treat any non-NULL value as valid and dereference it, resulting\nin a use-after-free.\n\nReturn NULL immediately after deallocation so callers can propagate the\nallocation failure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93104",
          "url": "https://www.suse.com/security/cve/CVE-2026-93104"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282284 for CVE-2026-93104",
          "url": "https://bugzilla.suse.com/1282284"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282285 for CVE-2026-93104",
          "url": "https://bugzilla.suse.com/1282285"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-93104"
    },
    {
      "cve": "CVE-2026-93782",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93782"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvhost-scsi: flush backend after device ioctls\n\nvhost-scsi translates guest response descriptors into userspace iovecs\nwhen commands are submitted.  Target-core completes those commands\nasynchronously, so VHOST_SET_MEM_TABLE can replace the memory table while\nan in-flight command still retains response iovecs translated through the\nold table.\n\nIf the old mapping is reused after VHOST_SET_MEM_TABLE returns, command\ncompletion can write the response to an unrelated userspace object.\n\nFlush the vhost-scsi backend after vhost_dev_ioctl() handles a device\nioctl.  This waits for in-flight commands that can still use the old\nresponse iovecs before the ioctl returns.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93782",
          "url": "https://www.suse.com/security/cve/CVE-2026-93782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282906 for CVE-2026-93782",
          "url": "https://bugzilla.suse.com/1282906"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282907 for CVE-2026-93782",
          "url": "https://bugzilla.suse.com/1282907"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-93782"
    },
    {
      "cve": "CVE-2026-93787",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93787"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: bound dirent name against end of SMB response in cifs_filldir\n\ncifs_filldir() copies the entry name out of an SMB1 TRANS2_FIND_FIRST /\nFIND_NEXT response using a length (de.namelen) supplied by the server.\nThe kmalloc\u0027d SMB response buffer is bounded, but nothing checks that\nde.name + de.namelen still lies inside that buffer before the eventual\nfilldir64() -\u003e verify_dirent_name() -\u003e memchr() reads namelen bytes.\n\nA hostile SMB1 server that returns an oversized FileNameLength in a\ndirectory entry therefore causes memchr() to read past the end of the\nresponse slab buffer. Reachable from any user who can list a directory\non a CIFS mount served by an attacker-controlled server (getdents64()\non the mounted directory):\n\n  BUG: KASAN: slab-out-of-bounds in memchr+0x71/0x80\n  Read of size 1 at addr ffff88800e0640cc by task poc/115\n  Call Trace:\n   dump_stack_lvl+0x64/0x80\n   print_report+0xce/0x620\n   kasan_report+0xec/0x120\n   memchr+0x71/0x80\n   filldir64+0x4c/0x6a0\n   cifs_filldir.constprop.0+0x9bb/0x1e00\n   cifs_readdir+0x2101/0x3380\n   iterate_dir+0x19c/0x520\n   __x64_sys_getdents64+0x126/0x210\n   do_syscall_64+0x107/0x5a0\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nPass the end-of-response pointer down to cifs_filldir() and reject\nentries whose name would extend past that boundary.\n\nThis bug was discovered by Artiphishell\u0027s vTriage pipeline, which\ngenerated a userspace reproducer (an emulated hostile SMB1 server plus\na getdents64() client) that reliably triggers the KASAN report on an\nunpatched kernel. The fix below was drafted with the Claude coding\nassistant; a userspace reproducer is available on request.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
          "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
          "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93787",
          "url": "https://www.suse.com/security/cve/CVE-2026-93787"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282932 for CVE-2026-93787",
          "url": "https://bugzilla.suse.com/1282932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282933 for CVE-2026-93787",
          "url": "https://bugzilla.suse.com/1282933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.5:kernel-devel-rt-0:5.14.21-150500.13.164.1.noarch",
            "SUSE Linux Enterprise Micro 5.5:kernel-rt-0:5.14.21-150500.13.164.1.x86_64",
            "SUSE Linux Enterprise Micro 5.5:kernel-source-rt-0:5.14.21-150500.13.164.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:53:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-93787"
    }
  ]
}