{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThe SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).\n- CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133).\n- CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).\n- CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).\n- CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89932: KVM: nVMX: Always flush vpid02 on first use (bsc#1281360).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- Also reflect disabled BATMAN in supported.conf. \n- Disable CONFIG_CAN (jsc#PED-16993).\n- default_gfp(): avoid using the \u0027newfangled\u0027 __VA_OPT__ trick (bsc#1280139).\n- fbdev/sysfs: Fix locking (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218 jsc#PED-1220 jsc#PED-1222 jsc#PED-1223\n  jsc#PED-1225).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- kernel-binary.spec.in: Fix syntax error.\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-4666,SUSE-SLE-Micro-5.3-2026-4666,SUSE-SLE-Micro-5.4-2026-4666",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4666-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:4666-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264666-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:4666-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264666-1/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1216813",
        "url": "https://bugzilla.suse.com/1216813"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1235133",
        "url": "https://bugzilla.suse.com/1235133"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1251966",
        "url": "https://bugzilla.suse.com/1251966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1252682",
        "url": "https://bugzilla.suse.com/1252682"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254633",
        "url": "https://bugzilla.suse.com/1254633"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269136",
        "url": "https://bugzilla.suse.com/1269136"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271906",
        "url": "https://bugzilla.suse.com/1271906"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273290",
        "url": "https://bugzilla.suse.com/1273290"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273339",
        "url": "https://bugzilla.suse.com/1273339"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273953",
        "url": "https://bugzilla.suse.com/1273953"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274037",
        "url": "https://bugzilla.suse.com/1274037"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274836",
        "url": "https://bugzilla.suse.com/1274836"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275543",
        "url": "https://bugzilla.suse.com/1275543"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275545",
        "url": "https://bugzilla.suse.com/1275545"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275681",
        "url": "https://bugzilla.suse.com/1275681"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275972",
        "url": "https://bugzilla.suse.com/1275972"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276007",
        "url": "https://bugzilla.suse.com/1276007"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276009",
        "url": "https://bugzilla.suse.com/1276009"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276277",
        "url": "https://bugzilla.suse.com/1276277"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276287",
        "url": "https://bugzilla.suse.com/1276287"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276295",
        "url": "https://bugzilla.suse.com/1276295"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276337",
        "url": "https://bugzilla.suse.com/1276337"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276338",
        "url": "https://bugzilla.suse.com/1276338"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276340",
        "url": "https://bugzilla.suse.com/1276340"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276353",
        "url": "https://bugzilla.suse.com/1276353"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276354",
        "url": "https://bugzilla.suse.com/1276354"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276381",
        "url": "https://bugzilla.suse.com/1276381"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276475",
        "url": "https://bugzilla.suse.com/1276475"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276519",
        "url": "https://bugzilla.suse.com/1276519"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276572",
        "url": "https://bugzilla.suse.com/1276572"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276801",
        "url": "https://bugzilla.suse.com/1276801"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276803",
        "url": "https://bugzilla.suse.com/1276803"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276814",
        "url": "https://bugzilla.suse.com/1276814"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276818",
        "url": "https://bugzilla.suse.com/1276818"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276821",
        "url": "https://bugzilla.suse.com/1276821"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277129",
        "url": "https://bugzilla.suse.com/1277129"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277149",
        "url": "https://bugzilla.suse.com/1277149"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277249",
        "url": "https://bugzilla.suse.com/1277249"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277410",
        "url": "https://bugzilla.suse.com/1277410"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277489",
        "url": "https://bugzilla.suse.com/1277489"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277493",
        "url": "https://bugzilla.suse.com/1277493"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277544",
        "url": "https://bugzilla.suse.com/1277544"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277574",
        "url": "https://bugzilla.suse.com/1277574"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277590",
        "url": "https://bugzilla.suse.com/1277590"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277626",
        "url": "https://bugzilla.suse.com/1277626"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277766",
        "url": "https://bugzilla.suse.com/1277766"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277792",
        "url": "https://bugzilla.suse.com/1277792"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277820",
        "url": "https://bugzilla.suse.com/1277820"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277857",
        "url": "https://bugzilla.suse.com/1277857"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277904",
        "url": "https://bugzilla.suse.com/1277904"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1277906",
        "url": "https://bugzilla.suse.com/1277906"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278054",
        "url": "https://bugzilla.suse.com/1278054"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278094",
        "url": "https://bugzilla.suse.com/1278094"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278178",
        "url": "https://bugzilla.suse.com/1278178"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278191",
        "url": "https://bugzilla.suse.com/1278191"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278210",
        "url": "https://bugzilla.suse.com/1278210"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278211",
        "url": "https://bugzilla.suse.com/1278211"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1278315",
        "url": "https://bugzilla.suse.com/1278315"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279532",
        "url": "https://bugzilla.suse.com/1279532"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279619",
        "url": "https://bugzilla.suse.com/1279619"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279621",
        "url": "https://bugzilla.suse.com/1279621"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279786",
        "url": "https://bugzilla.suse.com/1279786"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279835",
        "url": "https://bugzilla.suse.com/1279835"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1279875",
        "url": "https://bugzilla.suse.com/1279875"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280139",
        "url": "https://bugzilla.suse.com/1280139"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280243",
        "url": "https://bugzilla.suse.com/1280243"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280263",
        "url": "https://bugzilla.suse.com/1280263"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280350",
        "url": "https://bugzilla.suse.com/1280350"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280496",
        "url": "https://bugzilla.suse.com/1280496"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280727",
        "url": "https://bugzilla.suse.com/1280727"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280733",
        "url": "https://bugzilla.suse.com/1280733"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280786",
        "url": "https://bugzilla.suse.com/1280786"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280923",
        "url": "https://bugzilla.suse.com/1280923"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280985",
        "url": "https://bugzilla.suse.com/1280985"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1280993",
        "url": "https://bugzilla.suse.com/1280993"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281042",
        "url": "https://bugzilla.suse.com/1281042"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281046",
        "url": "https://bugzilla.suse.com/1281046"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281229",
        "url": "https://bugzilla.suse.com/1281229"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281295",
        "url": "https://bugzilla.suse.com/1281295"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281360",
        "url": "https://bugzilla.suse.com/1281360"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281546",
        "url": "https://bugzilla.suse.com/1281546"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1281818",
        "url": "https://bugzilla.suse.com/1281818"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282110",
        "url": "https://bugzilla.suse.com/1282110"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282113",
        "url": "https://bugzilla.suse.com/1282113"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282284",
        "url": "https://bugzilla.suse.com/1282284"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282881",
        "url": "https://bugzilla.suse.com/1282881"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282906",
        "url": "https://bugzilla.suse.com/1282906"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282932",
        "url": "https://bugzilla.suse.com/1282932"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-50645 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-50645/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-56644 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-56644/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-39964 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-39964/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-40022 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-40022/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100075 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100075/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53266 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53266/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53400 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53400/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64279 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64279/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64319 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64319/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64422 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64422/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-64580 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-64580/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68376 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68376/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68445 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68445/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68451 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68451/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68452 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68452/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72051 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72051/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72052 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72052/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72053 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72053/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72054 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72054/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72055 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72055/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72061 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72061/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72066 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72066/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72098 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72098/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72129 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72129/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72136 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72136/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72157 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72157/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72322 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72322/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72348 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72348/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72351 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72351/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72383 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72383/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72398 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72398/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72434 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72434/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74267 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74267/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74283 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74283/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74330 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74330/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74398 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74398/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74443 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74443/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74444 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74444/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74453 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74453/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74469 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74469/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74473 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74473/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74479 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74479/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74480 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74480/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74492 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74492/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74493 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74493/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74540 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74540/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74586 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74586/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74588 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74588/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74589 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74589/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74597 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74597/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74609 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74609/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74630 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74630/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74688 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74688/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74700 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74700/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74719 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74719/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74744 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74744/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-74752 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-74752/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80540 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80540/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80785 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80785/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80789 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80789/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80840 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80840/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80841 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80841/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80844 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80844/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80852 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80852/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81000 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81000/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89479 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89479/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89482 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89482/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89532 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89532/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89533 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89533/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89551 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89551/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89569 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89569/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89603 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89603/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89631 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89631/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89636 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89636/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89638 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89638/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89674 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89674/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89932 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89932/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89968 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89968/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90003 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90003/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90104 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90104/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90198 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90198/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90413 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90413/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-90414 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-90414/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93104 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93104/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93782 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93782/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93787 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93787/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2026-10-16T16:07:25Z",
      "generator": {
        "date": "2026-10-14T12:54:21Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:4666-1",
      "initial_release_date": "2026-10-14T12:54:21Z",
      "revision_history": [
        {
          "date": "2026-10-14T12:54:21Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-16T09:50:01Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-10-16T16:07:25Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-rt-0:5.14.21-150400.15.189.1.noarch",
                "product": {
                  "name": "kernel-devel-rt-0:5.14.21-150400.15.189.1.noarch",
                  "product_id": "kernel-devel-rt-0:5.14.21-150400.15.189.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel-rt@5.14.21-150400.15.189.1?arch=noarch\u0026upstream=kernel-source-rt-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
                "product": {
                  "name": "kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
                  "product_id": "kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source-rt@5.14.21-150400.15.189.1?arch=noarch\u0026upstream=kernel-source-rt-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cluster-md-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "cluster-md-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "cluster-md-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/cluster-md-kmp-rt@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dlm-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "dlm-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "dlm-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dlm-kmp-rt@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gfs2-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "gfs2-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "gfs2-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gfs2-kmp-rt@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-devel-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "kernel-rt-devel-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "kernel-rt-devel-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-devel@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-extra-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "kernel-rt-extra-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "kernel-rt-extra-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-extra@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-livepatch-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "kernel-rt-livepatch-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "kernel-rt-livepatch-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-livepatch@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-source-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-livepatch-devel-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "kernel-rt-livepatch-devel-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "kernel-rt-livepatch-devel-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-livepatch-devel@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-rt-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-optional-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "kernel-rt-optional-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "kernel-rt-optional-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt-optional@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-rt-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt_debug-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "kernel-rt_debug-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "kernel-rt_debug-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt_debug@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-rt_debug-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt_debug-devel-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "kernel-rt_debug-devel-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "kernel-rt_debug-devel-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-rt_debug-devel@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-rt_debug-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-rt-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "kernel-syms-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "kernel-syms-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-syms-rt@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-syms-rt-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kselftests-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "kselftests-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "kselftests-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kselftests-kmp-rt@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-rt-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ocfs2-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "ocfs2-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "ocfs2-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/ocfs2-kmp-rt@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-rt-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "reiserfs-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                "product": {
                  "name": "reiserfs-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_id": "reiserfs-kmp-rt-0:5.14.21-150400.15.189.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.21:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/reiserfs-kmp-rt@5.14.21-150400.15.189.1?arch=x86_64\u0026upstream=kernel-rt-0:5.14.21-150400.15.189.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.3",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.3",
                  "product_id": "SUSE Linux Enterprise Micro 5.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-micro:5.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.4",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.4",
                  "product_id": "SUSE Linux Enterprise Micro 5.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-micro:5.4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:5.14.21-150400.15.189.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
          "product_id": "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64"
        },
        "product_reference": "kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-rt-0:5.14.21-150400.15.189.1.noarch as component of SUSE Linux Enterprise Micro 5.3",
          "product_id": "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        },
        "product_reference": "kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:5.14.21-150400.15.189.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
          "product_id": "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64"
        },
        "product_reference": "kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-rt-0:5.14.21-150400.15.189.1.noarch as component of SUSE Linux Enterprise Micro 5.4",
          "product_id": "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        },
        "product_reference": "kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-50645",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-50645"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()\n\nAs the comment of pci_get_domain_bus_and_slot() says, it returns\na PCI device with refcount incremented, so it doesn\u0027t need to\ncall an extra pci_dev_get() in pci_get_dev_wrapper(), and the PCI\ndevice needs to be put in the error path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-50645",
          "url": "https://www.suse.com/security/cve/CVE-2022-50645"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254633 for CVE-2022-50645",
          "url": "https://bugzilla.suse.com/1254633"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "low"
        }
      ],
      "title": "CVE-2022-50645"
    },
    {
      "cve": "CVE-2024-56644",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-56644"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: release expired exception dst cached in socket\n\nDst objects get leaked in ip6_negative_advice() when this function is\nexecuted for an expired IPv6 route located in the exception table. There\nare several conditions that must be fulfilled for the leak to occur:\n* an ICMPv6 packet indicating a change of the MTU for the path is received,\n  resulting in an exception dst being created\n* a TCP connection that uses the exception dst for routing packets must\n  start timing out so that TCP begins retransmissions\n* after the exception dst expires, the FIB6 garbage collector must not run\n  before TCP executes ip6_negative_advice() for the expired exception dst\n\nWhen TCP executes ip6_negative_advice() for an exception dst that has\nexpired and if no other socket holds a reference to the exception dst, the\nrefcount of the exception dst is 2, which corresponds to the increment\nmade by dst_init() and the increment made by the TCP socket for which the\nconnection is timing out. The refcount made by the socket is never\nreleased. The refcount of the dst is decremented in sk_dst_reset() but\nthat decrement is counteracted by a dst_hold() intentionally placed just\nbefore the sk_dst_reset() in ip6_negative_advice(). After\nip6_negative_advice() has finished, there is no other object tied to the\ndst. The socket lost its reference stored in sk_dst_cache and the dst is\nno longer in the exception table. The exception dst becomes a leaked\nobject.\n\nAs a result of this dst leak, an unbalanced refcount is reported for the\nloopback device of a net namespace being destroyed under kernels that do\nnot contain e5f80fcf869a (\"ipv6: give an IPv6 dev to blackhole_netdev\"):\nunregister_netdevice: waiting for lo to become free. Usage count = 2\n\nFix the dst leak by removing the dst_hold() in ip6_negative_advice(). The\npatch that introduced the dst_hold() in ip6_negative_advice() was\n92f1655aa2b22 (\"net: fix __dst_negative_advice() race\"). But 92f1655aa2b22\nmerely refactored the code with regards to the dst refcount so the issue\nwas present even before 92f1655aa2b22. The bug was introduced in\n54c1a859efd9f (\"ipv6: Don\u0027t drop cache route entry unless timer actually\nexpired.\") where the expired cached route is deleted and the sk_dst_cache\nmember of the socket is set to NULL by calling dst_negative_advice() but\nthe refcount belonging to the socket is left unbalanced.\n\nThe IPv4 version - ipv4_negative_advice() - is not affected by this bug.\nWhen the TCP connection times out ipv4_negative_advice() merely resets the\nsk_dst_cache of the socket while decrementing the refcount of the\nexception dst.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-56644",
          "url": "https://www.suse.com/security/cve/CVE-2024-56644"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1235133 for CVE-2024-56644",
          "url": "https://bugzilla.suse.com/1235133"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "low"
        }
      ],
      "title": "CVE-2024-56644"
    },
    {
      "cve": "CVE-2025-39964",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-39964"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Disallow concurrent writes in af_alg_sendmsg\n\nIssuing two writes to the same af_alg socket is bogus as the\ndata will be interleaved in an unpredictable fashion.  Furthermore,\nconcurrent writes may create inconsistencies in the internal\nsocket state.\n\nDisallow this by adding a new ctx-\u003ewrite field that indiciates\nexclusive ownership for writing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-39964",
          "url": "https://www.suse.com/security/cve/CVE-2025-39964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251966 for CVE-2025-39964",
          "url": "https://bugzilla.suse.com/1251966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285060 for CVE-2025-39964",
          "url": "https://bugzilla.suse.com/1285060"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-39964"
    },
    {
      "cve": "CVE-2025-40022",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-40022"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Fix incorrect boolean values in af_alg_ctx\n\nCommit 1b34cbbf4f01 (\"crypto: af_alg - Disallow concurrent writes in\naf_alg_sendmsg\") changed some fields from bool to 1-bit bitfields of\ntype u32.\n\nHowever, some assignments to these fields, specifically \u0027more\u0027 and\n\u0027merge\u0027, assign values greater than 1.  These relied on C\u0027s implicit\nconversion to bool, such that zero becomes false and nonzero becomes\ntrue.\n\nWith a 1-bit bitfields of type u32 instead, mod 2 of the value is taken\ninstead, resulting in 0 being assigned in some cases when 1 was intended.\n\nFix this by restoring the bool type.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-40022",
          "url": "https://www.suse.com/security/cve/CVE-2025-40022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1252682 for CVE-2025-40022",
          "url": "https://bugzilla.suse.com/1252682"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-40022"
    },
    {
      "cve": "CVE-2026-100075",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100075"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters\n\nWhen srpt_alloc_rw_ctxs() fails partway through a multi-buffer indirect\ndescriptor, the unwind path destroys RDMA contexts but leaves stale\nn_rw_ctx and n_rdma values (and a dangling rw_ctxs pointer). Later\nsq_wr_avail accounting in srpt_queue_response() or srpt_write_pending()\ncan then subtract the wrong number of send queue credits.\n\nReset the counters and clear rw_ctxs after freeing the heap\nallocation before returning an error.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100075",
          "url": "https://www.suse.com/security/cve/CVE-2026-100075"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282881 for CVE-2026-100075",
          "url": "https://bugzilla.suse.com/1282881"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282882 for CVE-2026-100075",
          "url": "https://bugzilla.suse.com/1282882"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-100075"
    },
    {
      "cve": "CVE-2026-53266",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53266"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: make ebt_snat ARP rewrite writable\n\nThe ebtables SNAT target keeps the Ethernet source address rewrite\nbehind skb_ensure_writable(skb, 0).  This is intentional: at the bridge\nebtables hooks the Ethernet header is addressed through\nskb_mac_header()/eth_hdr(), while skb-\u003edata points at the Ethernet\npayload.  Asking skb_ensure_writable() for ETH_HLEN bytes would check\nthe payload, not the Ethernet header, and would reintroduce the small\npacket regression fixed by commit 63137bc5882a.\n\nHowever, the optional ARP sender hardware address rewrite is different.\nIt writes through skb_store_bits() at an offset relative to skb-\u003edata:\n\n        skb_store_bits(skb, sizeof(struct arphdr), info-\u003emac, ETH_ALEN)\n\nskb_header_pointer() only safely reads the ARP header; it does not make\nthe later sender hardware address range writable.  If that range is\nstill held in a nonlinear skb fragment backed by a splice-imported file\npage, skb_store_bits() maps the frag page and copies the new MAC address\ndirectly into it.\n\nEnsure the ARP SHA range is writable before reading the ARP header and\nbefore calling skb_store_bits().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53266",
          "url": "https://www.suse.com/security/cve/CVE-2026-53266"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269136 for CVE-2026-53266",
          "url": "https://bugzilla.suse.com/1269136"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1285059 for CVE-2026-53266",
          "url": "https://bugzilla.suse.com/1285059"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53266"
    },
    {
      "cve": "CVE-2026-53400",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53400"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: core: fix adapter registration race\n\nAdapters can be looked up based on their id using i2c_get_adapter()\nwhich takes a reference to the embedded struct device.\n\nMake sure that the adapter (including its struct device) has been\ninitialised before adding it to the IDR to avoid accessing uninitialised\ndata which could, for example, lead to NULL-pointer dereferences or\nuse-after-free.\n\nNote that the i2c-dev chardev, which is registered from a bus notifier,\ncurrently uses i2c_get_adapter() so the adapter needs to be added to the\nIDR before registration.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53400",
          "url": "https://www.suse.com/security/cve/CVE-2026-53400"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271906 for CVE-2026-53400",
          "url": "https://bugzilla.suse.com/1271906"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271907 for CVE-2026-53400",
          "url": "https://bugzilla.suse.com/1271907"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53400"
    },
    {
      "cve": "CVE-2026-64279",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64279"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: core: fix adapter deregistration race\n\nAdapters can be looked up by their id using i2c_get_adapter() which\ntakes a reference to the embedded struct device.\n\nRemove the adapter from the IDR before tearing it down during\nderegistration (and on registration failure) to make sure its resources\nare not accessed after having been freed (e.g. the device name).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64279",
          "url": "https://www.suse.com/security/cve/CVE-2026-64279"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273953 for CVE-2026-64279",
          "url": "https://bugzilla.suse.com/1273953"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64279"
    },
    {
      "cve": "CVE-2026-64319",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64319"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-auth: validate reply message payload bounds against transfer length\n\nnvmet_auth_reply() accesses the variable-length rval[] array using\nattacker-controlled hl (hash length) and dhvlen (DH value length) fields\nwithout verifying they fit within the allocated buffer of tl bytes.\n\nA malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a\nsmall transfer length but large hl/dhvlen values, causing out-of-bounds\nheap reads when the target processes the DH public key (rval + 2*hl) or\nperforms the host response memcmp.\n\nWith DH authentication configured, the OOB pointer is passed directly to\nsg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching\nup to 526 bytes past the buffer. This is exploitable pre-authentication.\n\nAdd bounds validation ensuring sizeof(*data) + 2*hl + dhvlen \u003c= tl before\nany access to the variable-length fields.\n\nDiscovered by Atuin - Automated Vulnerability Discovery Engine.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64319",
          "url": "https://www.suse.com/security/cve/CVE-2026-64319"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273339 for CVE-2026-64319",
          "url": "https://bugzilla.suse.com/1273339"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273419 for CVE-2026-64319",
          "url": "https://bugzilla.suse.com/1273419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-64319"
    },
    {
      "cve": "CVE-2026-64422",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64422"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes\n\nReject invalid `net.ipv4.tcp_reordering` values before they reach TCP\nsocket state. The sysctl is stored as an `int` but copied into the\n`u32` `tp-\u003ereordering` field for new sockets, so negative writes wrap\nto large values.\n\nWith `tcp_mtu_probing=2`, the wrapped value can overflow the\n`tcp_mtu_probe()` size calculation and drive the MTU probing path into\nan out-of-bounds read. Route `tcp_reordering` writes through\n`proc_dointvec_minmax()` and require it to be at least 1. Also require\n`tcp_max_reordering` to be at least 1 so the configured maximum cannot\nbecome negative either.\n\nWhen registering the table for a non-init network namespace, relocate\n`extra2` pointers that refer into `init_net.ipv4` so the\n`tcp_reordering` upper bound follows that namespace\u0027s\n`tcp_max_reordering`.\n\nHarden `tcp_mtu_probe()` itself by computing `size_needed` as `u64`.\nThis keeps the send queue and window checks from being bypassed through\nsigned integer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64422",
          "url": "https://www.suse.com/security/cve/CVE-2026-64422"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273290 for CVE-2026-64422",
          "url": "https://bugzilla.suse.com/1273290"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-64422"
    },
    {
      "cve": "CVE-2026-64580",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-64580"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()\n\nOn the error path where in6_dev_get(dev) returns NULL, xfrm6_fill_dst()\nreleases the device reference with netdev_put() but leaves\nxdst-\u003eu.dst.dev set. dst_destroy() later calls netdev_put(dst-\u003edev)\nagain, so the same net_device reference is released twice, underflowing\nits refcount (ref_tracker WARNING + \"unregister_netdevice: waiting for\n\u003cdev\u003e to become free\").\n\nClear xdst-\u003eu.dst.dev after the netdev_put(), the same way the XFRM\ndevice-offload paths xfrm_dev_state_add() and xfrm_dev_policy_add() in\nnet/xfrm/xfrm_device.c NULL -\u003edev when releasing the reference on error.\n\n  ref_tracker: reference already released.\n  ref_tracker: allocated in:\n   xfrm6_fill_dst (net/ipv6/xfrm6_policy.c:86)\n   ...\n   udpv6_sendmsg (net/ipv6/udp.c:1696)\n   ...\n  ref_tracker: freed in:\n   xfrm6_fill_dst (net/ipv6/xfrm6_policy.c:90)\n   ...\n  WARNING: lib/ref_tracker.c:322 at ref_tracker_free+0x58b/0x780\n   dst_destroy (net/core/dst.c:115)\n   rcu_core\n   handle_softirqs\n   ...",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-64580",
          "url": "https://www.suse.com/security/cve/CVE-2026-64580"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274037 for CVE-2026-64580",
          "url": "https://bugzilla.suse.com/1274037"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274038 for CVE-2026-64580",
          "url": "https://bugzilla.suse.com/1274038"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-64580"
    },
    {
      "cve": "CVE-2026-68376",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68376"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix auth_hmacs array size in struct sctp_cookie\n\nThe auth_hmacs array in struct sctp_cookie is supposed to store a complete\nSCTP_AUTH_HMAC_ALGO parameter, which consists of a struct sctp_paramhdr\nfollowed by N HMAC identifiers.\n\nHowever, the array size was calculated using an extra 2 bytes instead of\nsizeof(struct sctp_paramhdr), which is 4 bytes. When four HMAC identifiers\nare configured, the HMAC-ALGO parameter stored in the endpoint is larger\nthan the auth_hmacs buffer in the cookie.\n\nAs a result, sctp_association_init() copies beyond the end of auth_hmacs\nwhen initializing the association, corrupting the adjacent auth_chunks\nfield. This can lead to an invalid HMAC identifier being accepted and later\ncause an out-of-bounds read in sctp_auth_get_hmac().\n\nFix the array size calculation by including the full SCTP parameter header\nsize.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68376",
          "url": "https://www.suse.com/security/cve/CVE-2026-68376"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274836 for CVE-2026-68376",
          "url": "https://bugzilla.suse.com/1274836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279854 for CVE-2026-68376",
          "url": "https://bugzilla.suse.com/1279854"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68376"
    },
    {
      "cve": "CVE-2026-68445",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68445"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Prevent shader BO mappings from becoming writable\n\nvc4_gem_object_mmap() rejects a writable mapping of a validated shader\nBO, but leaves VM_MAYWRITE set.  Userspace can map the BO read-only and\nthen turn it writable with mprotect().\n\nValidated shader BOs must stay read-only: the validator checks the\ninstructions once and the GPU trusts them afterwards.  A writable\nmapping lets userspace rewrite the code after validation, bypassing the\nvalidator.\n\nClear VM_MAYWRITE on the read-only path so the mapping cannot be\nupgraded, as i915 already does for its read-only objects.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68445",
          "url": "https://www.suse.com/security/cve/CVE-2026-68445"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276277 for CVE-2026-68445",
          "url": "https://bugzilla.suse.com/1276277"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276278 for CVE-2026-68445",
          "url": "https://bugzilla.suse.com/1276278"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277850 for CVE-2026-68445",
          "url": "https://bugzilla.suse.com/1277850"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68445"
    },
    {
      "cve": "CVE-2026-68451",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68451"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/zcrypt: Validate length for CCA ECC private key requests\n\ncca_ecc2protkey() derives the copy length for the CPRB parameter\nblock directly from the length field in the key token. Reject the\nrequest early if the token length exceeds the available space in the\nparameter block.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68451",
          "url": "https://www.suse.com/security/cve/CVE-2026-68451"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276287 for CVE-2026-68451",
          "url": "https://bugzilla.suse.com/1276287"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276288 for CVE-2026-68451",
          "url": "https://bugzilla.suse.com/1276288"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68451"
    },
    {
      "cve": "CVE-2026-68452",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68452"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/zcrypt: Validate length for CCA AES cipher key requests\n\ncca_cipher2protkey() derives the copy length for the CPRB parameter\nblock directly from the length field in the key token. Reject the\nrequest early if the token length exceeds the available space in the\nparameter block.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68452",
          "url": "https://www.suse.com/security/cve/CVE-2026-68452"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276295 for CVE-2026-68452",
          "url": "https://bugzilla.suse.com/1276295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276485 for CVE-2026-68452",
          "url": "https://bugzilla.suse.com/1276485"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68452"
    },
    {
      "cve": "CVE-2026-72051",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72051"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink\n\nip6_tnl_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u003enet. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nGate ip6_tnl_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72051",
          "url": "https://www.suse.com/security/cve/CVE-2026-72051"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276801 for CVE-2026-72051",
          "url": "https://bugzilla.suse.com/1276801"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276805 for CVE-2026-72051",
          "url": "https://bugzilla.suse.com/1276805"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72051"
    },
    {
      "cve": "CVE-2026-72052",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72052"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink\n\nip6gre_changelink() and ip6erspan_changelink() operate on at most two\nnetns, dev_net(dev) and the tunnel link netns t-\u003enet. They differ once\nthe device is created in or moved to a netns other than the one the\nrequest runs in. The rtnl changelink path checks CAP_NET_ADMIN only\nagainst dev_net(dev), so a caller privileged there but not in t-\u003enet can\nrewrite a tunnel that lives in t-\u003enet.\n\nGate both ops on rtnl_dev_link_net_capable() at their top, before any\nattribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72052",
          "url": "https://www.suse.com/security/cve/CVE-2026-72052"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276803 for CVE-2026-72052",
          "url": "https://bugzilla.suse.com/1276803"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276806 for CVE-2026-72052",
          "url": "https://bugzilla.suse.com/1276806"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72052"
    },
    {
      "cve": "CVE-2026-72053",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72053"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipip: require CAP_NET_ADMIN in the device netns for changelink\n\nipip_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u003enet. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nGate ipip_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72053",
          "url": "https://www.suse.com/security/cve/CVE-2026-72053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276814 for CVE-2026-72053",
          "url": "https://bugzilla.suse.com/1276814"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276822 for CVE-2026-72053",
          "url": "https://bugzilla.suse.com/1276822"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72053"
    },
    {
      "cve": "CVE-2026-72054",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72054"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink\n\nvti_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u003enet. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nGate vti_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72054",
          "url": "https://www.suse.com/security/cve/CVE-2026-72054"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276818 for CVE-2026-72054",
          "url": "https://bugzilla.suse.com/1276818"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276823 for CVE-2026-72054",
          "url": "https://bugzilla.suse.com/1276823"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72054"
    },
    {
      "cve": "CVE-2026-72055",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72055"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink\n\nvti6_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u003enet. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nGate vti6_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72055",
          "url": "https://www.suse.com/security/cve/CVE-2026-72055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276821 for CVE-2026-72055",
          "url": "https://bugzilla.suse.com/1276821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276825 for CVE-2026-72055",
          "url": "https://bugzilla.suse.com/1276825"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72055"
    },
    {
      "cve": "CVE-2026-72061",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72061"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sit: require CAP_NET_ADMIN in the device netns for changelink\n\nipip6_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u003enet. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nGate ipip6_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed. sit was the one tunnel type not covered\nby the recent series that added this check to the other changelink()\nhandlers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72061",
          "url": "https://www.suse.com/security/cve/CVE-2026-72061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277249 for CVE-2026-72061",
          "url": "https://bugzilla.suse.com/1277249"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277418 for CVE-2026-72061",
          "url": "https://bugzilla.suse.com/1277418"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72061"
    },
    {
      "cve": "CVE-2026-72066",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72066"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpu: hotplug: Bound hotplug states sysfs output\n\nstates_show() adds CPU hotplug state names into a single sysfs buffer\nusing sprintf(). With enough registered states, this can write past the\nend of the PAGE_SIZE buffer.\n\nUse sysfs_emit_at() so output is bounded.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72066",
          "url": "https://www.suse.com/security/cve/CVE-2026-72066"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277149 for CVE-2026-72066",
          "url": "https://bugzilla.suse.com/1277149"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280094 for CVE-2026-72066",
          "url": "https://bugzilla.suse.com/1280094"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72066"
    },
    {
      "cve": "CVE-2026-72098",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72098"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity: fix buffer overflow in FEC calculation\n\nThere\u0027s a buffer overflow in dm-verity-fec:\n\nif (neras \u0026\u0026 *neras \u003c= v-\u003efec-\u003eroots)\n\tfio-\u003eerasures[(*neras)++] = i;\n\nThis allows *neras to reach roots + 1 (the post-increment pushes it past\nroots). This value is then passed as no_eras to decode_rs8(). Inside the\nRS decoder (lib/reed_solomon/decode_rs.c:113-121), the erasure locator\npolynomial loop writes lambda[j] where j can reach nroots + 1 - one\nelement past the end of lambda[] (which is sized nroots + 1, valid\nindices 0..nroots). The out-of-bounds write lands on syn[0], corrupting\nthe syndrome buffer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72098",
          "url": "https://www.suse.com/security/cve/CVE-2026-72098"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275543 for CVE-2026-72098",
          "url": "https://bugzilla.suse.com/1275543"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275544 for CVE-2026-72098",
          "url": "https://bugzilla.suse.com/1275544"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72098"
    },
    {
      "cve": "CVE-2026-72129",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72129"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-rdma: handle inline data with a nonzero offset\n\nnvmet_rdma_use_inline_sg() maps the host-controlled inline data offset\ninto the per-command inline scatterlist.  The bounds check admits any\noffset with off + len \u003c= inline_data_size, but the mapping still assumes\nthe data begins in the first inline page:\n\n\tsg-\u003eoffset = off;\n\tsg-\u003elength = min_t(int, len, PAGE_SIZE - off);\n\nWhen a port is configured with inline_data_size \u003e PAGE_SIZE (settable up\nto max(SZ_16K, PAGE_SIZE)), an offset in (PAGE_SIZE, inline_data_size]\nmakes \"PAGE_SIZE - off\" underflow, so sg-\u003elength is set to ~4 GiB and\nthe block backend reads far past the first inline page.  num_pages(len)\nalso ignores the offset, so an in-bounds offset whose [off, off+len)\nspan crosses a page boundary under-counts the scatterlist.\n\nMap the offset properly: split it into a page index and an in-page\noffset, start the scatterlist at that page, and size the page count from\npage_off + len.  Because the request scatterlist may now start at\ninline_sg[page_idx] rather than inline_sg[0], generalize the inline-SGL\nidentity test in nvmet_rdma_release_rsp() to a range test; otherwise the\npersistent inline scatterlist is mistaken for an allocated one and\nnvmet_req_free_sgls() frees an inline page (and warns in\nfree_large_kmalloc()).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72129",
          "url": "https://www.suse.com/security/cve/CVE-2026-72129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275545 for CVE-2026-72129",
          "url": "https://bugzilla.suse.com/1275545"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275546 for CVE-2026-72129",
          "url": "https://bugzilla.suse.com/1275546"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72129"
    },
    {
      "cve": "CVE-2026-72136",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72136"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink\n\nxfrmi_changelink() operates on at most two netns, dev_net(dev) and the\ninterface link netns xi-\u003enet. They differ once the device is created in\nor moved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in xi-\u003enet can rewrite an interface that\nlives in xi-\u003enet.\n\nGate xfrmi_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72136",
          "url": "https://www.suse.com/security/cve/CVE-2026-72136"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277574 for CVE-2026-72136",
          "url": "https://bugzilla.suse.com/1277574"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277577 for CVE-2026-72136",
          "url": "https://bugzilla.suse.com/1277577"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72136"
    },
    {
      "cve": "CVE-2026-72157",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72157"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: thunderbolt: Fix frags[] overflow by bounding frame_count\n\ntbnet_poll() assembles a multi-frame ThunderboltIP packet into one skb. The\nfirst frame goes into the skb linear area and every further frame is added as\na page fragment.\n\n\tskb_add_rx_frag(skb, skb_shinfo(skb)-\u003enr_frags,\n\t\t\tpage, hdr_size, frame_size,\n\t\t\tTBNET_RX_PAGE_SIZE - hdr_size);\n\nA packet of frame_count frames therefore ends up with frame_count - 1\nfragments. tbnet_check_frame() only bounds the peer supplied frame_count to\nTBNET_RING_SIZE / 4 (64), which is far above MAX_SKB_FRAGS (17 by default). A\npeer that sends a packet of 19 or more small frames pushes nr_frags past\nMAX_SKB_FRAGS, so skb_add_rx_frag() writes past skb_shinfo()-\u003efrags[] and\ncorrupts memory after the shared info.\n\nTighten the start of packet bound to MAX_SKB_FRAGS + 1 so a packet can never\nproduce more fragments than frags[] can hold. This matches the recent skb\nfrags overflow fixes in other receive paths, for example f0813bcd2d9d (\"net:\nwwan: t7xx: fix potential skb-\u003efrags overflow in RX path\") and 600dc40554dc\n(\"net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()\").",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72157",
          "url": "https://www.suse.com/security/cve/CVE-2026-72157"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277544 for CVE-2026-72157",
          "url": "https://bugzilla.suse.com/1277544"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277545 for CVE-2026-72157",
          "url": "https://bugzilla.suse.com/1277545"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72157"
    },
    {
      "cve": "CVE-2026-72322",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72322"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: mcast: Fix potential UAF in MLD delayed work\n\nA race condition exists between device teardown and incoming MLD query\nprocessing, leading to a Use-After-Free in the MLD delayed work.\n\nDuring device destruction, the primary reference to inet6_dev is dropped,\nwhich can drop its refcount to 0. The actual freeing of inet6_dev memory\nis deferred via RCU.\n\nConcurrently, the packet receive path runs under RCU read lock and obtains\nthe inet6_dev pointer. Because the memory is RCU-protected, CPU-0 can\nsafely dereference inet6_dev even if its refcount has hit 0.\n\nHowever, if CPU-0 calls igmp6_event_query() and schedules delayed work, it\nattempts to acquire a reference using in6_dev_hold(). This increments the\nrefcount from 0 to 1, triggering a \"refcount_t: addition on 0\" warning.\nSince the inet6_dev memory is still scheduled to be freed after the RCU\ngrace period, the device is freed while the work is still scheduled.\nWhen the work runs, it accesses the freed memory, causing a kernel panic.\n\nFix this by using refcount_inc_not_zero() (via a new helper\nin6_dev_hold_safe()) to prevent acquiring a reference if the device is\nalready being destroyed. If the refcount is 0, we do not schedule the work.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72322",
          "url": "https://www.suse.com/security/cve/CVE-2026-72322"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275972 for CVE-2026-72322",
          "url": "https://bugzilla.suse.com/1275972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276284 for CVE-2026-72322",
          "url": "https://bugzilla.suse.com/1276284"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72322"
    },
    {
      "cve": "CVE-2026-72348",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72348"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop\n\nThe ah, hbh and rt matches check that the fixed extension header is\npresent, then use the header length field to derive the advertised\nextension header length for matching.\n\nFor the ah match, add the missing advertised-length check. For hbh\nand rt, update the existing advertised-length checks. In all three\ncases, set hotdrop to true before returning false when the advertised\nextension header length exceeds the available skb data.\n\nReturning false treats the packet as a rule mismatch. Set hotdrop to\ntrue and drop malformed packets so they cannot bypass rules intended\nto drop packets with these IPv6 extension headers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72348",
          "url": "https://www.suse.com/security/cve/CVE-2026-72348"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276007 for CVE-2026-72348",
          "url": "https://bugzilla.suse.com/1276007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276008 for CVE-2026-72348",
          "url": "https://bugzilla.suse.com/1276008"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-72348"
    },
    {
      "cve": "CVE-2026-72351",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72351"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngue: validate REMCSUM private option length\n\nGUE private flags can indicate that remote checksum offload metadata is\npresent. The private flags field itself is accounted for by\nguehdr_flags_len(), but guehdr_priv_flags_len() currently returns 0 even\nwhen GUE_PFLAG_REMCSUM is set.\n\nThis lets a packet with only the private flags field pass\nvalidate_gue_flags(), after which gue_remcsum() and gue_gro_remcsum()\nread the missing REMCSUM start/offset fields from the following bytes.\n\nAccount for GUE_PLEN_REMCSUM when GUE_PFLAG_REMCSUM is present so that\nmalformed packets are rejected during option validation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72351",
          "url": "https://www.suse.com/security/cve/CVE-2026-72351"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276009 for CVE-2026-72351",
          "url": "https://bugzilla.suse.com/1276009"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276010 for CVE-2026-72351",
          "url": "https://bugzilla.suse.com/1276010"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72351"
    },
    {
      "cve": "CVE-2026-72383",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72383"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix addr_wq_timer race in sctp_free_addr_wq()\n\nsctp_free_addr_wq() previously removed addr_wq_timer using timer_delete()\nwhile holding addr_wq_lock. However, timer_delete() does not guarantee that\na currently running timer handler has completed.\n\nThis allows a race with sctp_addr_wq_timeout_handler(), where the handler\nmay still run after addr_waitq has been freed, acquire addr_wq_lock, and\naccess freed memory, leading to a use-after-free.\n\nFix this by calling timer_shutdown_sync() before taking addr_wq_lock.  This\nguarantees that any in-flight timer handler has finished and prevents the\ntimer from being re-armed during teardown, making subsequent cleanup safe.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72383",
          "url": "https://www.suse.com/security/cve/CVE-2026-72383"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277857 for CVE-2026-72383",
          "url": "https://bugzilla.suse.com/1277857"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283919 for CVE-2026-72383",
          "url": "https://bugzilla.suse.com/1283919"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72383"
    },
    {
      "cve": "CVE-2026-72398",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72398"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: add INIT verification after cookie unpacking\n\nIn SCTP handshake, the INIT chunk is initially processed by the server\nand embedded into the cookie carried in INIT-ACK. The client then\nreturns this cookie via COOKIE-ECHO, where the server unpacks it and\nreconstructs the original INIT chunk.\n\nWhen cookie authentication is enabled, the cookie contents are protected\nagainst tampering, so reusing the unpacked INIT without re-verification\nis safe.\n\nHowever, when cookie authentication is disabled, the reconstructed INIT\ncan no longer be trusted. In this case, the INIT must be explicitly\nvalidated after unpacking to avoid processing potentially tampered data.\n\nAdd sctp_verify_init() checks after cookie unpacking in COOKIE-ECHO\nprocessing paths (sctp_sf_do_5_1D_ce() and sctp_sf_do_5_2_4_dupcook())\nwhen cookie_auth_enable is disabled. On failure, the new association is\nfreed and the packet is discarded.\n\nAlso tighten cookie validation in sctp_unpack_cookie() by verifying the\nembedded chunk type is SCTP_CID_INIT before treating it as an INIT\nchunk.\n\nFinally, update sctp_verify_init() to validate parameter bounds using\nthe actual embedded INIT length instead of chunk-\u003echunk_end, since the\nINIT stored in COOKIE-ECHO may not span the entire chunk buffer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72398",
          "url": "https://www.suse.com/security/cve/CVE-2026-72398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276381 for CVE-2026-72398",
          "url": "https://bugzilla.suse.com/1276381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276484 for CVE-2026-72398",
          "url": "https://bugzilla.suse.com/1276484"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72398"
    },
    {
      "cve": "CVE-2026-72434",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72434"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: make sure gc is properly stopped\n\nSashiko noticed that when destroying a set,\ncancel_delayed_work_sync() was called while gc\ncalls queue_delayed_work() unconditionally which\ncan lead not to properly shutting down the gc.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72434",
          "url": "https://www.suse.com/security/cve/CVE-2026-72434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278054 for CVE-2026-72434",
          "url": "https://bugzilla.suse.com/1278054"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278055 for CVE-2026-72434",
          "url": "https://bugzilla.suse.com/1278055"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72434"
    },
    {
      "cve": "CVE-2026-74267",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74267"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n\nWhenever codel drops packets during peek, it calls\nqdisc_tree_reduce_backlog. An issue arises because it calls\nqdisc_tree_reduce_backlog before it reincrements the qlen. If qlen drops\nto zero, but peek returns an skb, the parent\u0027s qlen_notify callback will\nbe executed even though codel still has 1 packet on the queue and, thus,\nwill mistakenly deactivate the parent\u0027s class causing issues like a wild\nmemory access when qfq has codel as a child:\n\n[   36.339843][  T370] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI\n[   36.340408][  T370] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127]\n[   36.340737][  T370] CPU: 2 UID: 0 PID: 370 Comm: tc Not tainted 7.1.0-rc5-00287-g66e13b626592 #87 PREEMPT(full)\n[   36.341113][  T370] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011\n[   36.341357][  T370] RIP: 0010:qfq_deactivate_agg (include/linux/list.h:1029 (discriminator 2) include/linux/list.h:1043 (discriminator 2) net/sched/sch_qfq.c:1369 (discriminator 2) net/sched/sch_qfq.c:1395 (discriminator 2)) sch_qfq\n[   36.342221][  T370] RSP: 0018:ffff8881100ef370 EFLAGS: 00010216\n[   36.342422][  T370] RAX: 0000000000000000 RBX: ffff8881058a9568 RCX: dffffc0000000000\n[   36.342664][  T370] RDX: 1ffff11021064dc3 RSI: ffff888108326e00 RDI: dffffc0000000000\n[   36.342905][  T370] RBP: ffff8881058a8280 R08: dead000000000122 R09: 1bd5a00000000024\n[   36.343140][  T370] R10: fffffbfff2940329 R11: fffffbfff2940329 R12: 0000000000000000\n[   36.343383][  T370] R13: dead000000000100 R14: ffff8881058a9580 R15: ffff8881058a9578\n[   36.343631][  T370] FS:  00007fc04b0ca780(0000) GS:ffff888184fef000(0000) knlGS:0000000000000000\n[   36.343911][  T370] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[   36.344116][  T370] CR2: 0000557c02c02000 CR3: 000000010e0ba000 CR4: 0000000000750ef0\n[   36.344359][  T370] PKRU: 55555554\n[   36.344481][  T370] Call Trace:\n...\n[   36.345054][  T370] qfq_reset_qdisc (net/sched/sch_qfq.c:357 net/sched/sch_qfq.c:1487) sch_qfq\n[   36.345222][  T370]  qdisc_reset (net/sched/sch_generic.c:1057)\n[   36.345503][  T370]  __qdisc_destroy (net/sched/sch_generic.c:1096)\n[   36.345677][  T370]  qdisc_graft (net/sched/sch_api.c:1062 net/sched/sch_api.c:1053 net/sched/sch_api.c:1159)\n[   36.346335][  T370]  tc_get_qdisc (net/sched/sch_api.c:1528 net/sched/sch_api.c:1556)\n\nFix this by only calling qdisc_tree_reduce_backlog in peek after the\nqlen is restored.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74267",
          "url": "https://www.suse.com/security/cve/CVE-2026-74267"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276519 for CVE-2026-74267",
          "url": "https://bugzilla.suse.com/1276519"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276524 for CVE-2026-74267",
          "url": "https://bugzilla.suse.com/1276524"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74267"
    },
    {
      "cve": "CVE-2026-74283",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74283"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: require net admin for TIPCv2 netlink mutators\n\nTIPCv2 registers mutating generic-netlink operations without admin\npermission flags. Generic netlink only checks CAP_NET_ADMIN when an\noperation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local\nunprivileged process can currently change TIPC state through commands\nsuch as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and\nbearer enable/disable.\n\nThe legacy TIPC netlink API already checks netlink_net_capable(...,\nCAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators\nthe equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which\nmaps to the same namespace-aware CAP_NET_ADMIN check that\nnetlink_net_capable() performs, so the behaviour matches the legacy\npath and keeps working for CAP_NET_ADMIN holders in a non-initial user\nnamespace (containers).\n\nA QEMU/KASAN repro run as uid/gid 65534 with zero effective\ncapabilities previously succeeded in changing the network id and node\nidentity, setting and flushing key material, and enabling/disabling a\nUDP bearer. With this patch applied the same operations fail with\n-EPERM.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74283",
          "url": "https://www.suse.com/security/cve/CVE-2026-74283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276475 for CVE-2026-74283",
          "url": "https://bugzilla.suse.com/1276475"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281133 for CVE-2026-74283",
          "url": "https://bugzilla.suse.com/1281133"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74283"
    },
    {
      "cve": "CVE-2026-74330",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74330"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nconfigfs: fix lockless traversals of -\u003es_children\n\nHaving the parent directory locked protects entries from removal\nby another thread, but it does *not* protect cursors from being\nmoved around by lseek() - or freed, for that matter.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74330",
          "url": "https://www.suse.com/security/cve/CVE-2026-74330"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277129 for CVE-2026-74330",
          "url": "https://bugzilla.suse.com/1277129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280275 for CVE-2026-74330",
          "url": "https://bugzilla.suse.com/1280275"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74330"
    },
    {
      "cve": "CVE-2026-74398",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74398"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD\n\naddrconf_dad_failure() transitions ifp-\u003estate from DAD to POSTDAD\nvia addrconf_dad_end(), which drops ifp-\u003elock on return.  The lock\nis re-acquired after net_info_ratelimited().  A concurrent\nipv6_del_addr() can take the lock in that window, set ifp-\u003estate\nto DEAD and run list_del_rcu(\u0026ifp-\u003eif_list).\n\naddrconf_dad_failure() then overwrites DEAD with ERRDAD at errdad:\nand schedules a new dad_work.  The work calls ipv6_del_addr()\nagain, hitting the already-poisoned list entry:\n\n  general protection fault: 0000 [#1] SMP NOPTI\n  CPU: 4 PID: 217 Comm: kworker/4:1\n  Workqueue: ipv6_addrconf addrconf_dad_work\n  RIP: 0010:ipv6_del_addr+0xe9/0x280\n  RAX: dead000000000122\n  Call Trace:\n   addrconf_dad_stop+0x113/0x140\n   addrconf_dad_work+0x28c/0x430\n   process_one_work+0x1eb/0x3b0\n   worker_thread+0x4d/0x400\n   kthread+0x104/0x140\n   ret_from_fork+0x35/0x40\n\nFold the addrconf_dad_end() logic into addrconf_dad_failure() under\na single ifp-\u003elock critical section.  The STABLE_PRIVACY branch\ntemporarily drops ifp-\u003elock around address regeneration, so at\nlock_errdad: verify the state is still POSTDAD before transitioning\nto ERRDAD; bail out otherwise to avoid overwriting a state set by\nanother path while the lock was released.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74398",
          "url": "https://www.suse.com/security/cve/CVE-2026-74398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277410 for CVE-2026-74398",
          "url": "https://bugzilla.suse.com/1277410"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277411 for CVE-2026-74398",
          "url": "https://bugzilla.suse.com/1277411"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74398"
    },
    {
      "cve": "CVE-2026-74443",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74443"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: bound DMA command body size against suffix pointer\n\nvmw_cmd_dma() locates the DMA suffix at\n\n\t(unsigned long) \u0026cmd-\u003ebody + header-\u003esize - sizeof(*suffix)\n\nwithout checking that header-\u003esize is large enough to contain both\ncmd-\u003ebody and the suffix.  An undersized header makes the suffix\npointer underflow back into the previous command in the bounce\nbuffer.  The verifier later writes suffix-\u003emaximumOffset, clobbering\nverified fields of an already-relocated earlier command -- a TOCTOU\non the device-visible command stream that lets one command rewrite\nanother\u0027s GMR id, surface id, or other authenticated fields.\n\nReject the command if the body is too small for the suffix to fit.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74443",
          "url": "https://www.suse.com/security/cve/CVE-2026-74443"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278210 for CVE-2026-74443",
          "url": "https://bugzilla.suse.com/1278210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278243 for CVE-2026-74443",
          "url": "https://bugzilla.suse.com/1278243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74443"
    },
    {
      "cve": "CVE-2026-74444",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74444"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: validate DRAW_PRIMITIVES header size before division\n\nvmw_cmd_draw() computes\n\n\tmaxnum = (header-\u003esize - sizeof(cmd-\u003ebody)) / sizeof(*decl);\n\nwhere header-\u003esize is u32 and is taken straight from the user-supplied\ncommand stream.  When header-\u003esize is less than sizeof(cmd-\u003ebody) the\nunsigned subtraction wraps to nearly 4 GiB, producing a huge maxnum.\nAny user-controlled cmd-\u003ebody.numVertexDecls then passes the bound and\nthe loop dereferences decl[i] far past the end of the kernel command\nbounce buffer, producing an out-of-bounds read of kernel memory.\n\nReject undersized headers up front.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74444",
          "url": "https://www.suse.com/security/cve/CVE-2026-74444"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278211 for CVE-2026-74444",
          "url": "https://bugzilla.suse.com/1278211"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280092 for CVE-2026-74444",
          "url": "https://bugzilla.suse.com/1280092"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74444"
    },
    {
      "cve": "CVE-2026-74453",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74453"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Zero the tile state data array before each BIN job\n\nThe binner BO is a single 16MB buffer split into 512KB slots that are\nhanded out to jobs at submission time and recycled as jobs complete,\nwithout ever being cleared. Each slot holds the job\u0027s Tile State Data\nArray (TSDA) at its start, followed by the tile allocation pool.\n\nWhile the tile allocation pool is only walked by the render thread\nthrough branches the binner generated during the current job, the\nTSDA is the PTB\u0027s own per-tile bookkeeping and is consumed by the\nhardware itself. Although the kernel sets the \"Auto-initialise Tile\nState Data Array\" flag in the tile binning mode configuration, the\nPTB demonstrably still acts on stale tile state left by the slot\u0027s\nprevious user: the binner ends up creating invalid command streams\nwith invalid primitive streams and branches, which can cause GPU hangs\nas observed in [1][2].\n\nZero the TSDA when the job\u0027s binning slot is configured. This clears\n48 bytes per tile (~24KB for a 1080p frame) in the submission path, and\nguarantees the PTB never sees another job\u0027s tile state.\n\nThe tile count is only checked for being non-zero today, so the 8-bit\nfields it comes from can describe a tile state array almost six times\nlarger than the slot it has to live in. Bound it before the slot is\nhanded out, since such size decides how much of the slot is left for\nthe tile alloc pool.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74453",
          "url": "https://www.suse.com/security/cve/CVE-2026-74453"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278178 for CVE-2026-74453",
          "url": "https://bugzilla.suse.com/1278178"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280258 for CVE-2026-74453",
          "url": "https://bugzilla.suse.com/1280258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74453"
    },
    {
      "cve": "CVE-2026-74469",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74469"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: prevent peer transport count overflow\n\nsctp_assoc_add_peer() increments the association\u0027s 16-bit transport_count\nfor every new unique peer. Adding the 65,536th transport wraps the count to\nzero.\n\nSCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload,\nthen copies one sockaddr_storage for every entry in transport_addr_list.\nAfter the wrap, a diagnostic dump reserves an empty payload and writes\n8 MiB of peer addresses past the skb tail.\n\nReject a new unique peer when transport_count has reached U16_MAX. Perform\nthe check after the existing-peer lookup so a duplicate address continues\nto return its existing transport at the limit.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74469",
          "url": "https://www.suse.com/security/cve/CVE-2026-74469"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277792 for CVE-2026-74469",
          "url": "https://bugzilla.suse.com/1277792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280693 for CVE-2026-74469",
          "url": "https://bugzilla.suse.com/1280693"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282936 for CVE-2026-74469",
          "url": "https://bugzilla.suse.com/1282936"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74469"
    },
    {
      "cve": "CVE-2026-74473",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74473"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: use pskb_network_may_pull() in route_shortcircuit()\n\nroute_shortcircuit() currently calls pskb_may_pull(skb, sizeof(struct iphdr))\n(or ipv6hdr), which checks if bytes are available starting from skb-\u003edata.\n\nHowever, in vxlan_xmit(), skb-\u003edata points to the MAC header, so\nskb_network_offset(skb) is ETH_HLEN (14 bytes). Using pskb_may_pull(skb, 20)\nonly checks 20 bytes from skb-\u003edata (which is 14 bytes MAC header + 6 bytes of\nIP header), leaving the rest of the IP header potentially un-pulled in non-linear\nfrags. Subsequent dereferences of ip_hdr(skb)-\u003edaddr can read beyond the pulled\nlinear buffer length.\n\nFix this by using pskb_network_may_pull(), which adds skb_network_offset(skb) to\nthe length check to ensure the full network header is present in the linear buffer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74473",
          "url": "https://www.suse.com/security/cve/CVE-2026-74473"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276340 for CVE-2026-74473",
          "url": "https://bugzilla.suse.com/1276340"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276356 for CVE-2026-74473",
          "url": "https://bugzilla.suse.com/1276356"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74473"
    },
    {
      "cve": "CVE-2026-74479",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74479"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: pktgen: fix proc entry use-after-free\n\npktgen_change_name() replaces pkt_dev-\u003eentry while holding t-\u003eif_lock.\npktgen_remove_device() removes the same entry before\n_rem_dev_from_if_list() takes that lock.\n\nThis allows the following interleaving:\n\n  CPU 0 (NETDEV_CHANGENAME)       CPU 1 (kpktgend)\n  if_lock(t)\n  proc_remove(pkt_dev-\u003eentry)\n                                  proc_remove(pkt_dev-\u003eentry)\n  pkt_dev-\u003eentry = proc_create_data(...)\n  if_unlock(t)\n\nThe kthread can pass the stale proc_dir_entry to proc_remove() after the\nrename path has freed it. A reproducer with a widened race window reports:\n\n  BUG: KASAN: slab-use-after-free in proc_remove+0x78/0x80\n  Read of size 8 at addr ffff8881478fea70 by task kpktgend_0/67\n  Call Trace:\n   proc_remove+0x78/0x80\n   pktgen_remove_device.isra.0+0x11c/0x4c0\n   pktgen_thread_worker+0x1214/0x6bc0\n   kthread+0x2c6/0x3b0\n  Allocated by task 95:\n   __proc_create+0x204/0x790\n   proc_create_data+0x72/0xe0\n   pktgen_thread_write+0xd61/0x1510\n  Freed by task 28:\n   kmem_cache_free+0xcb/0x3d0\n   proc_free_inode+0x5b/0x80\n   rcu_core+0x50a/0x1850\n  The buggy address belongs to the object at ffff8881478fea00\n   which belongs to the cache proc_dir_entry of size 192\n\nMove proc_remove() into the if_lock-protected list removal helper. Keep it\nbefore list_del_rcu() to preserve the ordering required by add_device().\nThe rename path must then finish replacing the entry before removal, or\nit observes that the device is no longer on the list.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74479",
          "url": "https://www.suse.com/security/cve/CVE-2026-74479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276354 for CVE-2026-74479",
          "url": "https://bugzilla.suse.com/1276354"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277290 for CVE-2026-74479",
          "url": "https://bugzilla.suse.com/1277290"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74479"
    },
    {
      "cve": "CVE-2026-74480",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74480"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: stop fast-leave after deleting a port group\n\nbr_multicast_leave_group() iterates mp-\u003eports with pp = \u0026p-\u003enext in\nits fast-leave path. After br_multicast_del_pg() removes p,\ncontinuing the loop advances pp through the deleted entry.\n\nIf multicast-to-unicast was enabled, the bridge can hold multiple port\ngroups for the same port and group with different source MAC\naddresses. Once multicast-to-unicast is disabled,\nbr_port_group_equal() matches those entries by port only. A fast leave\ncan then delete one entry and continue from its stale next pointer,\nleaving mp-\u003eports pointing at a deleted port group.\n\nFast leave only needs to remove one matching port group. Break after\nbr_multicast_del_pg() so the loop stops before dereferencing the\nremoved entry.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74480",
          "url": "https://www.suse.com/security/cve/CVE-2026-74480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276353 for CVE-2026-74480",
          "url": "https://bugzilla.suse.com/1276353"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279853 for CVE-2026-74480",
          "url": "https://bugzilla.suse.com/1279853"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74480"
    },
    {
      "cve": "CVE-2026-74492",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74492"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: do not update comments from kernel-side hash adds\n\nmtype_resize() copies comment pointers with memcpy(), not the comment\nobjects themselves. During the window after an entry has been copied but\nbefore the table swap and backlog replay, the old table is still\npublished for packet-side updates while the replacement-table entry\nalready holds the same ip_set_comment_rcu pointer.\n\nIf xt_SET --add-set ... --exist hits that old entry in this window,\nmtype_add() calls ip_set_init_comment() even though packet-side adds\ncarry no comment payload. That call frees the shared comment through the\nold entry, so the replacement-table entry now holds a stale pointer.\nWhen the queued add is replayed on the new table, mtype_add() calls\nip_set_init_comment() again and strlen() dereferences the stale pointer.\n\nFix this in mtype_add() by skipping ip_set_init_comment() when\next-\u003etarget marks a packet-side add. Userspace adds still update\ncomments, while packet-side adds can no longer free comment storage\nshared with a resize copy.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74492",
          "url": "https://www.suse.com/security/cve/CVE-2026-74492"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276337 for CVE-2026-74492",
          "url": "https://bugzilla.suse.com/1276337"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280903 for CVE-2026-74492",
          "url": "https://bugzilla.suse.com/1280903"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74492"
    },
    {
      "cve": "CVE-2026-74493",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74493"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix socket use-after-free during link group termination\n\n__smc_lgr_terminate() drops conns_lock after finding a connection in\nlgr-\u003econns_all, but before taking a reference on its socket. The connection\nis embedded in the socket, and its registration reference protects it only\nwhile the connection remains in the tree.\n\nA concurrent close can unregister the connection and drop that reference,\nfreeing the socket before the termination worker reaches sock_hold().\n\nThe race is reachable when close overlaps link group termination.\nLocal stress testing reproduced the use-after-free and KASAN reported:\n\n  BUG: KASAN: slab-use-after-free in __smc_lgr_terminate.part.0 [smc]\n  Write of size 4 by task kworker/3:3\n  Workqueue: events smc_lgr_terminate_work [smc]\n  __smc_lgr_terminate.part.0 [smc]\n\nThe socket was allocated by smc_create(), freed through\nslab_free_after_rcu_debug(), and was followed by:\n\n  refcount_t: addition on 0; use-after-free.\n  __smc_lgr_terminate.part.0 [smc]\n\nTake the socket reference while conns_lock still protects the tree entry.\nThe unregister path then cannot drop the last reference until termination\nhas finished using the socket.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74493",
          "url": "https://www.suse.com/security/cve/CVE-2026-74493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276338 for CVE-2026-74493",
          "url": "https://bugzilla.suse.com/1276338"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276358 for CVE-2026-74493",
          "url": "https://bugzilla.suse.com/1276358"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74493"
    },
    {
      "cve": "CVE-2026-74540",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74540"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp\n\nl2cap_le_connect_rsp() obtains a channel via\n__l2cap_get_chan_by_ident() but neither holds a reference nor uses\nl2cap_chan_hold_unless_zero() before locking and operating on it.\nA concurrent l2cap_chan_del() triggered by a remote disconnect can\nfree the channel between the lookup and l2cap_chan_lock(), causing\na use-after-free.\n\nThe BR/EDR counterpart l2cap_connect_rsp() and the sibling handler\nl2cap_le_command_rej() already use l2cap_chan_hold_unless_zero()\nto safely hold a reference, but l2cap_le_connect_rsp() was left\nunprotected.\n\nFix by adding l2cap_chan_hold_unless_zero() after the ident lookup\nand l2cap_chan_put() on the exit path, consistent with other L2CAP\nresponse handlers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74540",
          "url": "https://www.suse.com/security/cve/CVE-2026-74540"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275681 for CVE-2026-74540",
          "url": "https://bugzilla.suse.com/1275681"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275699 for CVE-2026-74540",
          "url": "https://bugzilla.suse.com/1275699"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74540"
    },
    {
      "cve": "CVE-2026-74586",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74586"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: clear new_transport when removing a peer\n\nsctp_process_asconf_param() stores a newly added peer transport in\nasoc-\u003enew_transport. After all parameters in the ASCONF chunk have been\nprocessed, sctp_sf_do_asconf() uses this pointer to send a HEARTBEAT to the\nnew transport.\n\nAn authenticated ASCONF from a remote SCTP peer can add a transport and\nremove it again with a wildcard DEL-IP parameter in the same chunk. The\nwildcard deletion preserves the transport on which the ASCONF arrived, but\nremoves the newly added transport through\nsctp_assoc_del_nonprimary_peers(). The removal does not clear\nasoc-\u003enew_transport, leaving it pointing to the removed transport.\n\nsctp_sf_do_asconf() then creates a HEARTBEAT whose chunk-\u003etransport points\nto the removed transport without holding a transport reference. During\nlocal address replacement, src_out_of_asoc_ok keeps this HEARTBEAT on\ncontrol_chunk_list. After the transport is freed by RCU, a successful\nASCONF_ACK for the replacement address releases the queued HEARTBEAT and\nsctp_outq_select_transport() reads the freed transport\u0027s state.\n\nThe issue was found during a static audit of SCTP objects. With an\nauthenticated peer, the reproducer triggered the same KASAN report in 2\nof 2 unpatched runs on a KASAN-enabled netdev/main kernel:\n\n  BUG: KASAN: slab-use-after-free in sctp_outq_select_transport\n  Read of size 4 at addr ffff88800b9bd95c by task python3/197\n\n  Call Trace:\n   sctp_outq_select_transport+0x549/0x8b0 [sctp]\n   sctp_outq_flush+0x306/0x2c60 [sctp]\n   sctp_transport_immediate_rtx+0xaf/0x260 [sctp]\n   sctp_process_asconf_ack+0xa48/0xf70 [sctp]\n\n  Allocated by task 197:\n   sctp_transport_new+0x68/0x650 [sctp]\n   sctp_assoc_add_peer+0x258/0x12a0 [sctp]\n   sctp_process_asconf+0x5e9/0x1090 [sctp]\n\n  Last potentially related work creation:\n   __call_rcu_common.constprop.0+0x77/0xb70\n   sctp_assoc_del_nonprimary_peers+0x7c/0xd0 [sctp]\n   sctp_process_asconf+0xd9c/0x1090 [sctp]\n\nThe first invalid access was a four-byte read of transport-\u003estate at\nnet/sctp/outqueue.c:833. The same reproducer completed the full\nauthenticated ASCONF and local-address replacement sequence with this\nchange without a KASAN report or oops.\n\nClear new_transport when its peer is removed, before it can be used to\ncreate the HEARTBEAT.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74586",
          "url": "https://www.suse.com/security/cve/CVE-2026-74586"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277820 for CVE-2026-74586",
          "url": "https://bugzilla.suse.com/1277820"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74586"
    },
    {
      "cve": "CVE-2026-74588",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74588"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: keep chunk-\u003etransport in step with the list it is queued on\n\n__sctp_outq_flush_rtx() moves a gap-acked chunk onto another transport\u0027s\ntransmitted list without updating chunk-\u003etransport:\n\n\tif (chunk-\u003etsn_gap_acked) {\n\t\tlist_move_tail(\u0026chunk-\u003etransmitted_list,\n\t\t\t       \u0026transport-\u003etransmitted);\n\t\tcontinue;\n\t}\n\nThe chunk then sits on a live transport\u0027s list while chunk-\u003etransport still\nnames a different one.  If that transport is removed - sctp_assoc_rm_peer()\nfrom an ASCONF Delete-IP - sctp_transport_free() RCU-frees it and the chunk\nis left with a dangling pointer.  sctp_assoc_rm_peer() scrubs\npeer-\u003etransmitted and asoc-\u003eoutqueue.out_chunk_list, but the chunk is on\nneither.\n\nThe pointer is not followed while tsn_gap_acked is set.  A SACK that\nreneges on the TSN clears the flag, and the next SACK reaches\n\n\ttchunk-\u003etransport-\u003eflight_size -= sctp_data_size(tchunk);\n\ninside the freed transport.  KASAN reports a slab-use-after-free read in\nsctp_check_transmitted(), freed from sctp_assoc_rm_peer().  Both the\nremoval and the SACKs come from the association peer.\n\nSet chunk-\u003etransport at the move.  The ordinary resend path needs nothing:\nit reaches its list_move_tail() only after sctp_packet_append_chunk()\nreturned SCTP_XMIT_OK, and __sctp_packet_append_chunk() has rebound the\nchunk by then.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74588",
          "url": "https://www.suse.com/security/cve/CVE-2026-74588"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277766 for CVE-2026-74588",
          "url": "https://bugzilla.suse.com/1277766"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277768 for CVE-2026-74588",
          "url": "https://bugzilla.suse.com/1277768"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74588"
    },
    {
      "cve": "CVE-2026-74589",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74589"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix sk_redir use-after-free in send verdict\n\nsk_psock_msg_verdict() takes a socket reference for psock-\u003esk_redir.\ntcp_bpf_send_verdict() copies that pointer while holding the source socket\nlock, but does not take a reference for the local copy before dropping the\nlock around tcp_bpf_sendmsg_redir().\n\nWhen apply_bytes keeps the cached verdict active, another sendmsg() on the\nsame source socket can consume the remaining bytes and release the cached\nreference while the first thread still holds only the raw local pointer:\n\n  CPU 0                                  CPU 1\n  sk_redir = psock-\u003esk_redir\n  apply_bytes remains nonzero\n  release_sock(sk)\n                                         lock_sock(sk)\n                                         apply_bytes reaches zero\n                                         psock-\u003esk_redir = NULL\n                                         release_sock(sk)\n                                         tcp_bpf_sendmsg_redir(sk_redir)\n                                         sock_put(sk_redir)\n  tcp_bpf_sendmsg_redir(sk_redir)\n\nThe final sock_put() can free sk_redir before CPU 0 dereferences it.\n\nKASAN reported:\n\n  BUG: KASAN: slab-use-after-free in tcp_bpf_sendmsg_redir+0xf39/0x1020\n  Read of size 8 at addr ffff888108537090 by task poc/87\n  Call Trace:\n   tcp_bpf_sendmsg_redir+0xf39/0x1020\n   tcp_bpf_sendmsg+0x977/0x1a50\n   __sys_sendto+0x32c/0x3a0\n   __x64_sys_sendto+0xdb/0x1b0\n  Allocated by task 85:\n   sk_prot_alloc+0x56/0x210\n   sk_clone+0x6f/0x14b0\n   inet_csk_clone_lock+0x24/0x740\n   tcp_create_openreq_child+0x25/0x2710\n   tcp_v4_syn_recv_sock+0x10a/0xe00\n  Freed by task 0:\n   __kasan_slab_free+0x43/0x70\n   slab_free_after_rcu_debug+0xa6/0x1e0\n   rcu_core+0x50a/0x1850\n  Last potentially related work creation:\n   __sk_destruct+0x3da/0x540\n   sk_psock_destroy+0x81e/0xab0\n   process_one_work+0x63a/0x1070\n\nTake a temporary socket reference while the source socket lock still\nprotects psock-\u003esk_redir, and drop it after tcp_bpf_sendmsg_redir()\nreturns.  This keeps each unlocked use independent of cached-verdict\nownership.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74589",
          "url": "https://www.suse.com/security/cve/CVE-2026-74589"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277904 for CVE-2026-74589",
          "url": "https://bugzilla.suse.com/1277904"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-74589"
    },
    {
      "cve": "CVE-2026-74597",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74597"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: clear skb2-\u003ecb[] in ip6ip6_err()\n\nip6ip6_err() clones an outer IPv6 ICMP error skb, pulls it to the\nquoted inner IPv6 packet, and then passes the clone to icmpv6_send().\nThe clone still carries the outer packet\u0027s inet6_skb_parm in skb-\u003ecb.\n\nIf the outer packet had a Home Address Option, IP6CB(skb2)-\u003edsthao\nremains non-zero after skb_pull(). icmpv6_send() later calls\nmip6_addr_swap(), which uses that stale dsthao offset against the quoted\ninner packet. A malformed inner destination-options header can then make\nthe HAO lookup and address swap run past the end of the quoted packet\nand corrupt skb_shared_info.\n\nClear skb2-\u003ecb[] before pulling the quoted inner IPv6 packet so the\nreply path does not reuse metadata left by the outer IPv6 stack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74597",
          "url": "https://www.suse.com/security/cve/CVE-2026-74597"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277493 for CVE-2026-74597",
          "url": "https://bugzilla.suse.com/1277493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277495 for CVE-2026-74597",
          "url": "https://bugzilla.suse.com/1277495"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74597"
    },
    {
      "cve": "CVE-2026-74609",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74609"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: read le-\u003elink under the node lock in tipc_node_link_down()\n\ntipc_node_link_down() caches the link pointer before taking n-\u003elock:\n\n\tstruct tipc_link *l = le-\u003elink;\t\t/* unlocked */\n\n\tif (!l)\n\t\treturn;\n\ttipc_node_write_lock(n);\n\tif (!tipc_link_is_establishing(l)) {\t/* deref l */\n\t...\n\t\ttipc_link_reset(l);\t\t/* write into l */\n\tif (delete) {\n\t\tkfree(l);\n\t\tle-\u003elink = NULL;\n\nThe delete=true caller frees that very object under n-\u003elock, so the lock\ndoes not protect the cached pointer against it:\n\n - CPU A, delete=false: tipc_rcv() on TIPC_LINK_DOWN_EVT, or the link\n   supervision timer via tipc_node_timeout(), reads l unlocked and then\n   dereferences it under n-\u003elock;\n - CPU B, delete=true: netlink TIPC_NL_BEARER_DISABLE -\u003e bearer_disable()\n   -\u003e tipc_node_delete_links() -\u003e tipc_node_link_down(n, bearer_id, true)\n   -\u003e kfree(l).\n\nThe link is freed with plain kfree(), not kfree_rcu(), and for UDP bearers\ndisable_media() only schedules the asynchronous cleanup_bearer() work, so\nits synchronize_net() runs after the links are already gone.  An in-flight\nCPU A that has read l therefore dereferences freed memory once B frees it:\na use-after-free read in tipc_link_is_establishing(), and a use-after-free\nwrite via tipc_link_reset() on the establishing branch.\n\nThe following trace was captured on 7.2.0-rc5-00284-gaf39eb111ce6:\n\n  BUG: KASAN: slab-use-after-free in tipc_link_is_establishing (net/tipc/link.c:285)\n  Read of size 4 at addr ffff88802e2aa068 by task swapper/2/0\n   tipc_link_is_establishing (net/tipc/link.c:285)\n   tipc_node_link_down (net/tipc/node.c:1076)\n   tipc_node_timeout (net/tipc/node.c:843)\n  Allocated by task 9549:\n   tipc_link_create (net/tipc/link.c:490)\n   tipc_node_check_dest (net/tipc/node.c:1279)\n   tipc_disc_rcv (net/tipc/discover.c:252)\n   tipc_udp_recv (net/tipc/udp_media.c:389)\n  Freed by task 9549:\n   tipc_node_link_down (net/tipc/node.c:1084)\n   tipc_node_delete_links (net/tipc/node.c:1320)\n   bearer_disable (net/tipc/bearer.c:414)\n   __tipc_nl_bearer_disable (net/tipc/bearer.c:992)\n\nMove the le-\u003elink read inside tipc_node_write_lock(), so it is serialised\nagainst the kfree() in the delete path.  A racing teardown now either has\nnot run yet, and we see a valid link, or has already run, and we see NULL.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74609",
          "url": "https://www.suse.com/security/cve/CVE-2026-74609"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277906 for CVE-2026-74609",
          "url": "https://bugzilla.suse.com/1277906"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277907 for CVE-2026-74609",
          "url": "https://bugzilla.suse.com/1277907"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74609"
    },
    {
      "cve": "CVE-2026-74630",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74630"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: prevent in6_dev_get() from resurrecting inet6_dev\n\nin6_dev_get() reads dev-\u003eip6_ptr under RCU and then unconditionally\nincrements its refcount. Device teardown can clear the pointer and drop\nthe last reference between these operations. The increment then\nresurrects an object whose RCU free has already been queued, so callers\ncan use it after it is freed.\n\nUse refcount_inc_not_zero() and return NULL when the object has already\nreached zero. RCU keeps the memory accessible through the attempted\nreference acquisition, and a successful increment pins the object for\nthe caller.\n\nAn independent run on the exact unpatched 6f5156d7a31a (v7.2-rc3)\nkernel reproduced the invalid reference acquisition as UID 1000:\n\n  refcount_t: addition on 0; use-after-free.\n  ip6_mc_source+0xef4/0x17e0\n\nIt was followed by the corresponding reference underflow in\nip6_mc_source(). The supplied trace from the same unpatched revision\nadditionally shows the access after the RCU read-side section ends:\n\n  BUG: KASAN: slab-use-after-free in mutex_lock+0x76/0xe0\n  Write of size 8 at addr ffff888015b50240 by task poc/1219\n\nBug found and triaged by OpenAI Security Research and\nvalidated by Trail of Bits.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74630",
          "url": "https://www.suse.com/security/cve/CVE-2026-74630"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278191 for CVE-2026-74630",
          "url": "https://bugzilla.suse.com/1278191"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278192 for CVE-2026-74630",
          "url": "https://bugzilla.suse.com/1278192"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74630"
    },
    {
      "cve": "CVE-2026-74688",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74688"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: clear control chunk transport if it is being removed\n\nsctp_make_heartbeat_ack() caches the destination transport in\nchunk-\u003etransport without taking a reference. When src_out_of_asoc_ok is\nenabled, the HEARTBEAT ACK may remain queued on control_chunk_list instead\nof being transmitted immediately.\n\nIf the peer transport is removed while the chunk is still queued,\nsctp_assoc_rm_peer() drops the transport and schedules it for RCU freeing,\nbut only clears cached transport pointers in out_chunk_list.  The queued\ncontrol chunk therefore retains a dangling transport pointer.\n\nOnce an ASCONF_ACK clears the suppression and the queued control chunk is\ntransmitted, SCTP dereferences the stale transport pointer, leading to a\nuse-after-free.\n\nFix this by also clearing chunk-\u003etransport for queued control chunks in\ncontrol_chunk_list when removing the transport.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74688",
          "url": "https://www.suse.com/security/cve/CVE-2026-74688"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277489 for CVE-2026-74688",
          "url": "https://bugzilla.suse.com/1277489"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277490 for CVE-2026-74688",
          "url": "https://bugzilla.suse.com/1277490"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74688"
    },
    {
      "cve": "CVE-2026-74700",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74700"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers\n\nAnother challenge with unlocked filters.\nThere is a short window in tc_new_tfilter where a tcf_proto can be found\nand briefly referenced by a totally unrelated, unlocked classifier\u0027s request\nand cause a race.\n\nFeng created a poc which created this race with two threads, one creating a\nu32 filter and other a flower filter in the same chain/prio:\n\n1. Both threads enter tc_new_tfilter, both find the chain empty, both\n   drop filter_chain_lock\n2. u32 finishes tcf_proto_create(\"u32\") first, calls\n   tcf_chain_tp_insert_unique() -\u003e inserts u32_tp into the chain\n3. flower finishes tcf_proto_create(\"flower\") later, calls\n   tcf_chain_tp_insert_unique() -\u003e tcf_chain_tp_find() now sees u32_tp\n   already there, takes a reference on it, destroys flower\u0027s own tp_new\n   and returns u32_tp to the caller.\n\nFlower then hits the kind mismatch check (because it requested for kind\n\"flower\" but tp-\u003eops-\u003ekind is \"u32\") and goes through the errout path\nwhich calls tcf_proto_put() on u32_tp. If the u32 thread has already\ngone through its own errout (its change() call failed on the PoC\u0027s empty\noptions) and dropped its create and insert refs, flower\u0027s put is the\nlast one and drops u32_tp\u0027s refcnt to zero.\n\nAt this point tp-\u003eops-\u003edestroy() runs in a context that never took\nrtnl_lock. When that happens, it might cause a UAF like the following\n(illustrated by the PoC):\n\n[  +0.000710] BUG: KASAN: slab-use-after-free in u32_init (net/sched/cls_u32.c:393)\n[  +0.000281] Read of size 8 at addr ffff888120022f00 by task poc_feng_xue/524\n\n  Call Trace:\n   u32_init (net/sched/cls_u32.c:393)\n   tc_new_tfilter (net/sched/cls_api.c:2378)\n\n  Allocated by task 526:\n   u32_init (net/sched/cls_u32.c:378)\n   tc_new_tfilter (net/sched/cls_api.c:2378)\n\n  Freed by task 522:\n   kfree\n   u32_destroy (net/sched/cls_u32.c:662)\n   tcf_proto_destroy (net/sched/cls_api.c:446)\n   tcf_proto_put (net/sched/cls_api.c:459)\n   tc_new_tfilter (net/sched/cls_api.c:2459)\n\nFix this by having tcf_proto_destroy() take rtnl_lock around\ntp-\u003eops-\u003edestroy() for locked classifiers whenever rtnl is not held.\n\nTo explain why I used a temp variable \"not_lockless\" I\u0027d like to point to a\nsemi-related note on rtnl_held vs TCF_PROTO_OPS_DOIT_UNLOCKED (adding here\nfor future cleanup if deemed necessary):\nThe rtnl_held parameter and the TCF_PROTO_OPS_DOIT_UNLOCKED flag are\nredundant sources of truth for whether rtnl_lock is held. Among the nine\nclassifier destroy(..rtnl_held..) callbacks, only flower consults the\nrtnl_held parameter which it propagates to tc_setup_cb_destroy()\nand tc_setup_cb_call(). The other eight (u32, flow, bpf, cgroup, route, basic,\nfw, mall) ignore it entirely;-\u003e those that call tc_setup_cb_destroy()\n(u32, bpf, mall) hardcode true always instead of forwarding the parameter.\n\nA future cleanup should remove the rtnl_held parameter from the destroy callback\nsignature entirely and have callers rely solely on their knowledge whether\nthey are running in an unlocked context.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74700",
          "url": "https://www.suse.com/security/cve/CVE-2026-74700"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277626 for CVE-2026-74700",
          "url": "https://bugzilla.suse.com/1277626"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277631 for CVE-2026-74700",
          "url": "https://bugzilla.suse.com/1277631"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74700"
    },
    {
      "cve": "CVE-2026-74719",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74719"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n\nThe SMC_LLC_CONFIRM_LINK / SMC_LLC_ADD_LINK_CONT branch in\nsmc_llc_event_handler() stores an incoming qentry into the local LLC flow\nwithout first checking whether a qentry is already pending. If a malicious or\nbuggy peer sends a second CONFIRM_LINK or ADD_LINK_CONT request while a flow is\nactive and flow-\u003eqentry is already set, smc_llc_flow_qentry_set() overwrites the\npointer without freeing the previous allocation, leaking one kmalloc-96 object\nper spurious message.\n\nThe sibling SMC_LLC_DELETE_LINK branch already has the correct !flow-\u003eqentry\nguard. Apply the same guard to the CONFIRM_LINK/ADD_LINK_CONT branch so that a\nduplicate message when qentry is already occupied falls through to break and is\nfreed by the kfree(qentry) at the out: label, rather than silently leaking the\nexisting allocation.\n\nThe response direction (smc_llc_rx_response()) is unaffected: it already guards\nwith flow-\u003eqentry at the equivalent site and drops duplicate responses\ncorrectly.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74719",
          "url": "https://www.suse.com/security/cve/CVE-2026-74719"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276572 for CVE-2026-74719",
          "url": "https://bugzilla.suse.com/1276572"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276582 for CVE-2026-74719",
          "url": "https://bugzilla.suse.com/1276582"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74719"
    },
    {
      "cve": "CVE-2026-74744",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74744"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: inherit needed_headroom and needed_tailroom from phy_dev\n\nipvlan devices inherit hard_header_len from phy_dev during ipvlan_init(),\nbut leave needed_headroom and needed_tailroom set to 0.\n\nWhen the underlying phy_dev (or stacked lower device) requires extra headroom\nor tailroom for headers/trailers (e.g. macsec, ipsec, wireguard, tunnels, or\nveth with rx headroom), upper layers calculating packet headroom and tailroom\nfail to reserve sufficient space.\n\nThis can result in reallocation overhead, skb headroom underflows, or KASAN\nslab-use-after-free crashes when dev_hard_header() / ipvlan_hard_header()\nprepends header data or when lower devices append tailroom.\n\nFix this by:\n1. Inheriting needed_headroom and needed_tailroom from phy_dev in ipvlan_init().\n2. Propagating needed_headroom and needed_tailroom updates to attached ipvlans\n   in ipvlan_device_event() when receiving NETDEV_FEAT_CHANGE events.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74744",
          "url": "https://www.suse.com/security/cve/CVE-2026-74744"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278094 for CVE-2026-74744",
          "url": "https://bugzilla.suse.com/1278094"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278096 for CVE-2026-74744",
          "url": "https://bugzilla.suse.com/1278096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74744"
    },
    {
      "cve": "CVE-2026-74752",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-74752"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate cookie AUTH state before use\n\nWhen cookie authentication is disabled, COOKIE_ECHO restores fixed-size\nAUTH fields directly from peer-controlled cookie bytes.  A forged RANDOM\nlength, HMAC list, or CHUNKS list can then reach association consumers\nwith lengths or identifiers that were never validated against the local\nbacking arrays.\n\nA forged RANDOM length can cause out-of-bounds reads during key-vector\nconstruction.  A forged HMAC identifier also caused a 32-byte write past\na zero-length AUTH chunk, providing a primitive for a local privilege\nescalation chain.\n\nValidate the cookie\u0027s RANDOM, HMACS, and CHUNKS parameters at the cookie\ntrust boundary before copying them into the association.  Reject invalid\ntypes, malformed lengths, unsupported HMAC identifiers, HMAC lists\nwithout SHA1, and forbidden chunk ids.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-74752",
          "url": "https://www.suse.com/security/cve/CVE-2026-74752"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278315 for CVE-2026-74752",
          "url": "https://bugzilla.suse.com/1278315"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1278316 for CVE-2026-74752",
          "url": "https://bugzilla.suse.com/1278316"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283110 for CVE-2026-74752",
          "url": "https://bugzilla.suse.com/1283110"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-74752"
    },
    {
      "cve": "CVE-2026-80540",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80540"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix UVD decode image min size calculation\n\nThis needs to use pitch instead of width. Also reject pitch\nover 4096 to avoid overflow.\n\n(cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80540",
          "url": "https://www.suse.com/security/cve/CVE-2026-80540"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1277590 for CVE-2026-80540",
          "url": "https://bugzilla.suse.com/1277590"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80540"
    },
    {
      "cve": "CVE-2026-80785",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80785"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: serialize mode sysfs access with lock_fb_info()\n\nshow_mode(), show_modes(), and store_mode() access fb_info-\u003emodelist\nand fb_info-\u003emode without holding lock_fb_info(). store_modes() takes\nlock_fb_info() while replacing the modelist and freeing the old one.\n\nA concurrent reader or writer can load a pointer to an old modelist\nentry before store_modes() frees it, then dereference freed memory or\nstore a stale freed pointer in fb_info-\u003emode.\n\nTake lock_fb_info() in show_mode(), show_modes(), and store_mode() to\nserialize with store_modes(). In show_mode(), copy the mode to the\nstack and format after dropping the lock. In store_mode(), split\nactivate() into a _locked variant to avoid double-locking, and hold\nthe locks for the modelist walk, mode conversion, activation, and\nfb_info-\u003emode assignment together.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80785",
          "url": "https://www.suse.com/security/cve/CVE-2026-80785"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279619 for CVE-2026-80785",
          "url": "https://bugzilla.suse.com/1279619"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279620 for CVE-2026-80785",
          "url": "https://bugzilla.suse.com/1279620"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80785"
    },
    {
      "cve": "CVE-2026-80789",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80789"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: bound SGL data length before allocating command buffers\n\nnvmet_tcp_map_data() reads the host-controlled 32-bit sgl-\u003elength\nand, for the in-capsule offset descriptor (type 0x01), checks it\nagainst port-\u003einline_data_size before use. Any other SGL descriptor\ntype -- including the non-inline transport SGL data-block descriptor\n(type (NVME_TRANSPORT_SGL_DATA_DESC \u003c\u003c 4) | NVME_SGL_FMT_TRANSPORT_A,\nthe type a real host uses for out-of-capsule writes) skips that check\nentirely and falls straight through to:\n\n\tcmd-\u003ereq.sg = sgl_alloc(len, GFP_KERNEL, \u0026cmd-\u003ereq.sg_cnt);\n\nwith len taken directly from the wire, unbounded up to 4 GiB.\n\nnvmet_req_init() only parses the command and never inspects\nsgl-\u003elength, and nvmet_check_transfer_len() -- the only other place\ntransfer_len is validated -- runs later, from req-\u003eexecute(), after\nthe allocation has already happened. For a write command the target\nresponds with an R2T and parks the command waiting for the host to\nsend the data; if the host (or an unauthenticated peer that simply\nnever follows up) never does, the sgl_alloc() buffer stays resident\nfor the life of the command. NVMe/TCP has no mandatory authentication\nin the default configuration, so any peer able to reach the target\nportal and complete a Fabrics connect can drive this with a single\ncrafted command, repeatable across queues and connections for\namplification. This is unbounded kernel memory allocation\ntriggered by a remote, effectively unauthenticated peer.\n\nValidate len against the same NVMET_TCP_MAXH2CDATA ceiling this file\nalready uses to bound per-PDU H2C data, for every SGL descriptor type,\nbefore doing any allocation. This closes the gap for the non-inline\ndescriptor while leaving the existing, tighter inline_data_size check\nin place for the in-capsule case.\n\nRuntime-verified on a v6.19 KASAN stand: with this bound in place, a\ncrafted write command carrying an oversized non-inline SGL length is\nrejected before sgl_alloc() runs, where the same request previously\ndrove an unbounded ~256 MiB kernel allocation (up to 4 GiB) that\nstayed resident pending an R2T the host never satisfies.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80789",
          "url": "https://www.suse.com/security/cve/CVE-2026-80789"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279621 for CVE-2026-80789",
          "url": "https://bugzilla.suse.com/1279621"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279622 for CVE-2026-80789",
          "url": "https://bugzilla.suse.com/1279622"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80789"
    },
    {
      "cve": "CVE-2026-80840",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80840"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: seg6: clear IPv4 control block on IPIP decapsulation\n\nEnd.DX4 and End.DT4 decapsulate an IPv4 packet through\ndecap_and_validate() and send it directly to IPv4 routing. The inner\npacket therefore bypasses ip_rcv_core(), which normally clears IPCB\nbefore IPv4 interprets skb-\u003ecb.\n\nThe skb instead retains IP6CB data from the outer packet. IP6CB and\nIPCB use the same skb-\u003ecb storage, so IP6CB(skb)-\u003elastopt overlaps\nIPCB(skb)-\u003eopt.optlen and srr, while IP6CB(skb)-\u003enhoff overlaps rr and\nts.\n\nThe sender can make the stale optlen byte nonzero with a valid outer\nextension-header chain. The reproducers put an eight-byte Destination\nOptions header immediately after the 40-byte IPv6 header and before the\nSegment Routing Header. ipv6_destopt_rcv() records the sender-controlled\nDestination Options offset in both lastopt and nhoff, setting them to\n40. On the reproduced little-endian x86-64 kernel, IPv4 therefore sees\noptlen = 40 and rr = 40.\n\nBoth tcp_v4_save_options() and __ip_options_echo() skip option copying\nwhen optlen is zero. Here optlen is 40, so the TCP SYN path allocates\nroom for 40 bytes of option data and calls __ip_options_echo(). The\nstale rr value makes that function read inner packet byte 41 as the\nRecord Route option length. The reproducers set that sender-controlled\nbyte to 255, so __ip_options_echo() copies 255 bytes into the 40-byte\noption-data area.\n\nSeparate End.DX4 and End.DT4 reproducers on the unpatched v7.2-rc5\nkernel both produced:\n\n  BUG: KASAN: slab-out-of-bounds in __ip_options_echo()\n  Write of size 255\n\nThe relevant End.DX4 call path is:\n\n  __ip_options_echo\n  tcp_v4_route_req\n  tcp_conn_request\n  tcp_v4_conn_request\n  tcp_rcv_state_process\n  tcp_v4_do_rcv\n  tcp_v4_rcv\n  ip_protocol_deliver_rcu\n  ip_local_deliver_finish\n  ip_local_deliver\n  input_action_end_dx4_finish\n  input_action_end_dx4\n\nThe relevant End.DT4 call path is:\n\n  __ip_options_echo\n  tcp_v4_route_req\n  tcp_conn_request\n  tcp_v4_conn_request\n  tcp_rcv_state_process\n  tcp_v4_do_rcv\n  tcp_v4_rcv\n  ip_protocol_deliver_rcu\n  ip_local_deliver_finish\n  ip_local_deliver\n  input_action_end_dt4\n\ntcp_v4_save_options() is inlined into the tcp_v4_route_req() path, so\nit does not appear as a separate frame.\n\nWhen decap_and_validate() handles IPPROTO_IPIP, save the ingress\ninterface from IP6CB, clear IPCB, and restore the saved value. Doing\nthis in the common decapsulation path covers End.DX4, End.DT4, and\nEnd.DT46\u0027s IPv4 arm.\n\nUse IP6CB(skb)-\u003eiif rather than skb-\u003eskb_iif. These actions run after\nl3mdev processing, which can replace skb_iif with the L3 master;\nIP6CB iif still records the receiving interface set at IPv6 ingress.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80840",
          "url": "https://www.suse.com/security/cve/CVE-2026-80840"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279875 for CVE-2026-80840",
          "url": "https://bugzilla.suse.com/1279875"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279876 for CVE-2026-80840",
          "url": "https://bugzilla.suse.com/1279876"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80840"
    },
    {
      "cve": "CVE-2026-80841",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80841"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/packet: defer vmalloc TX_RING free until skbs finish\n\nAF_PACKET TX_RING skbs keep a raw pointer to their ring frame. The skb\npage references preserve page-backed ring blocks after pg_vec is freed,\nbut they do not preserve a vmalloc mapping.\n\ntpacket_destruct_skb() currently drops the pending reference before\nwriting the timestamp and TP_STATUS_AVAILABLE to the frame. Move the\ndecrement after those stores. The smp_wmb() in __packet_set_status()\norders the frame stores before the decrement.\n\nAlso recheck pending TX frames under pg_vec_lock before non-closing\nring replacement, so a racing send cannot add a pending skb between\nthe initial check and the ring swap.\n\nRing allocation can produce a mixture of page-backed and vmalloc-backed\nblocks. Allocate deferred-work storage during TX ring setup when the\nfirst vmalloc-backed block is encountered, and keep its pointer in the\npg_vec allocation header. If allocation fails, return -ENOMEM from ring\nsetup. On socket close, a non-NULL pointer identifies a vmalloc-backed\nvector without a scan. If TX skbs remain, defer the whole vector to\nsystem_long_wq.\n\nAfter pg_vec is detached, a late destructor can skip the pending\ndecrement. Use socket write-memory accounting as the deferred lifetime\ngate instead: an skb remains charged through its final sock_wfree(),\nafter all ring-frame accesses. The delayed work retains a socket\nreference and reschedules itself until no TX skbs remain.\n\nMove pending_refcnt release to packet_sock_destruct() so late skb\ndestructors and deferred cleanup can safely use it after\npacket_release(). Page-backed teardown remains synchronous, and no lock\nis added to the TX completion hot path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80841",
          "url": "https://www.suse.com/security/cve/CVE-2026-80841"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279835 for CVE-2026-80841",
          "url": "https://bugzilla.suse.com/1279835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279836 for CVE-2026-80841",
          "url": "https://bugzilla.suse.com/1279836"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80841"
    },
    {
      "cve": "CVE-2026-80844",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80844"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: ah6: validate routing header segments_left\n\nAH6 rearranges routing-header addresses before computing or verifying the\nICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than\nthe number of addresses described by the routing header\u0027s hdrlen field.\n\nThat assumption does not hold for raw IPv6 HDRINCL packets. A packet with\nhdrlen equal to 2 describes one address, but can carry an arbitrary\nsegments_left value. With segments_left equal to 255, the function moves\nits address pointer 4,064 bytes backwards and passes a 4,064-byte length to\nmemmove(), resulting in an out-of-bounds access.\n\nValidate the invariant locally before modifying the routing header or\nperforming any address-pointer arithmetic, and propagate malformed-header\nerrors to the existing AH6 input and output error paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80844",
          "url": "https://www.suse.com/security/cve/CVE-2026-80844"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279786 for CVE-2026-80844",
          "url": "https://bugzilla.suse.com/1279786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280695 for CVE-2026-80844",
          "url": "https://bugzilla.suse.com/1280695"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282938 for CVE-2026-80844",
          "url": "https://bugzilla.suse.com/1282938"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80844"
    },
    {
      "cve": "CVE-2026-80852",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80852"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: device: fix out-of-bounds write in tls_append_frag()\n\nFound with syzkaller and a local syzbot instance running on top of a\nnetdevsim TLS offload emulation; tls_device.c is otherwise only reachable\non a machine with a NIC that implements the offload.\n\ntls_push_data() only checks whether the open record still has room for\nanother frag at the bottom of its loop, and the MSG_MORE early break\nskips that check.  The record survives to the next syscall with the frag\ncount it already had, and tls_append_frag() does not check either, so\nwith TLS_TX_ZEROCOPY_RO every splice(SPLICE_F_MORE) of a byte or two adds\na non-coalescing pipe page and num_frags walks off the end of\ntls_record_info.frags[MAX_SKB_FRAGS].  Once the record is pushed,\ntls_push_record() runs the same index over sg_tx_data[MAX_SKB_FRAGS] and\nthe sg_set_page() writes land on the destruct_work that follows it, which\nthe workqueue then calls.\n\nThe byte limit is fine because copy drops to 0 and the loop falls through\nto the same check; the frag count has no such feedback.\n\nPush the record rather than keep a full one open, which is what a plain\nTCP socket does - tcp_sendmsg_locked() uses tcp_mark_push() and\nnew_segment in both the copy and the MSG_SPLICE_PAGES paths, and tls_sw\nalready sets full_record when the sk_msg ring fills up, MSG_MORE or not.\n\n  BUG: KASAN: slab-out-of-bounds in tls_append_frag ( net/tls/tls_device.c:269)\n  Write of size 8 at addr ffff8881104d1530 by task tls_oob/450\n\n  CPU: 2 UID: 0 PID: 450 Comm: tls_oob Not tainted 7.2.0-rc7+ #329 PREEMPT\n  Call Trace:\n   \u003cTASK\u003e\n   dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)\n   print_report (mm/kasan/report.c:378 mm/kasan/report.c:482)\n   kasan_report (mm/kasan/report.c:595)\n   tls_append_frag (net/tls/tls_device.c:269)\n   tls_push_data (net/tls/tls_device.c:518)\n   tls_device_sendmsg (net/tls/tls_device.c:583)\n   inet_sendmsg (net/ipv4/af_inet.c:865)\n   sock_sendmsg (net/socket.c:775 net/socket.c:790 net/socket.c:813)\n   splice_to_socket (fs/splice.c:884)\n   do_splice (fs/splice.c:936 fs/splice.c:1349)\n   __do_splice (fs/splice.c:1431)\n   __x64_sys_splice (fs/splice.c:1634 fs/splice.c:1616)\n   do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\n   entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)\n   \u003c/TASK\u003e\n\nand, once the record is pushed:\n\n  UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:300:24\n  index 18 is out of range for type \u0027skb_frag_t [17]\u0027\n  UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:301:41\n  index 18 is out of range for type \u0027scatterlist [17]\u0027\n  UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:302:39\n  index 18 is out of range for type \u0027scatterlist [17]\u0027\n  UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:307:38\n  index 26 is out of range for type \u0027scatterlist [17]\u0027\n\n  kernel tried to execute NX-protected page - exploit attempt? (uid: 0)\n  BUG: unable to handle page fault for address: ffffea000411a680\n  #PF: supervisor instruction fetch in kernel mode\n  #PF: error_code(0x0011) - permissions violation\n  Oops: Oops: 0011 [#1] SMP KASAN PTI\n  Workqueue: ktls_device_destruct 0xffffea000411a680\n  RIP: 0010:0xffffea000411a680\n  Call Trace:\n   \u003cTASK\u003e\n   worker_thread (kernel/workqueue.c:3405 kernel/workqueue.c:3486)\n   kthread (kernel/kthread.c:436)\n   ret_from_fork (arch/x86/kernel/process.c:158)\n   ret_from_fork_asm (arch/x86/entry/entry_64.S:245)\n   \u003c/TASK\u003e",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80852",
          "url": "https://www.suse.com/security/cve/CVE-2026-80852"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279532 for CVE-2026-80852",
          "url": "https://bugzilla.suse.com/1279532"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279534 for CVE-2026-80852",
          "url": "https://bugzilla.suse.com/1279534"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80852"
    },
    {
      "cve": "CVE-2026-81000",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81000"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: bound receive headroom\n\ntun_get_user() uses tun-\u003ealign both as skb headroom and when choosing how\nmuch packet data to keep linear. OVS can propagate an oversized headroom\nrequest from another port to TUN or TAP.\n\nWhen align is larger than the usable space in a one-page skb head,\nSKB_MAX_HEAD(align) underflows and the result becomes negative when stored\nin good_linear. That value later wraps when assigned to the size_t linear\nvariable, and tun_alloc_skb() can place skb-\u003edata outside the allocated\nhead.\n\nBound the headroom stored by TUN to the one-page skb-head budget and the\nlargest non-sentinel 16-bit skb header offset. Leave one linear byte for\nraw TUN and a complete Ethernet header for TAP, including NET_IP_ALIGN.\n\nAlso pull the raw-TUN protocol byte and the TAP Ethernet header before\naccessing them, so these checks remain safe for nonlinear skbs supplied by\nother allocation paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81000",
          "url": "https://www.suse.com/security/cve/CVE-2026-81000"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280263 for CVE-2026-81000",
          "url": "https://bugzilla.suse.com/1280263"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280265 for CVE-2026-81000",
          "url": "https://bugzilla.suse.com/1280265"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282946 for CVE-2026-81000",
          "url": "https://bugzilla.suse.com/1282946"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-81000"
    },
    {
      "cve": "CVE-2026-89479",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89479"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: stop processing a packet once its association is deleted\n\nsctp_endpoint_bh_rcv() looks the association up only when chunk-\u003easoc is\nNULL, and caches the result in chunk-\u003easoc and chunk-\u003etransport without\ntaking a reference.\n\nA packet that matches no association is handed to the endpoint, so a peer\ncan bundle COOKIE ECHO, SHUTDOWN and SHUTDOWN ACK in one packet. The\nCOOKIE ECHO creates the association, the SHUTDOWN chunk caches it, and\nwith the outqueue empty the SHUTDOWN ACK reaches sctp_sf_do_9_2_final(),\nso the association and its transports are freed.\n\nThe endpoint loop has no counterpart to the asoc-\u003ebase.dead check in\nsctp_assoc_bh_rcv(). The next chunk writes to last_time_heard in the freed\ntransport and is then passed to sctp_do_sm() with the freed association.\nThe transport is freed through RCU, so this needs the packet to come off\nthe socket backlog, where the loop runs in task context.\n\nThe endpoint loop cannot do the same check: it holds no reference on the\nassociation, so reading asoc-\u003ebase.dead would itself be a use-after-free.\nMark the packet for discard in the command interpreter, just before it\ndeletes the association. That is also before sctp_inq_free() releases the\nchunk on the association receive path.\n\nsctp_sf_do_5_2_4_dupcook() issues SCTP_CMD_DELETE_TCB for the temporary\nassociation, while the one the packet belongs to stays alive. A restarting\npeer can bundle DATA behind its COOKIE ECHO, so compare against\nchunk-\u003easoc and leave that case alone.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89479",
          "url": "https://www.suse.com/security/cve/CVE-2026-89479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280786 for CVE-2026-89479",
          "url": "https://bugzilla.suse.com/1280786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282909 for CVE-2026-89479",
          "url": "https://bugzilla.suse.com/1282909"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89479"
    },
    {
      "cve": "CVE-2026-89482",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89482"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone\n\nCommit 25e5cb780e62 (\"nvme-tcp: fix possible crash in write_zeroes\nprocessing\") established that blk_rq_payload_bytes() must not be read\nwithout first checking blk_rq_nr_phys_segments(), and recorded the\nresult in nvme_tcp_setup_cmd_pdu() as req-\u003edata_len. The receive side\nwas left as it was.\n\nThe two differ for REQ_OP_WRITE_ZEROES, which has no physical segments\nbut a non-zero blk_rq_bytes(), so setup leaves req-\u003eiter untouched\nwhile the receive gate lets a C2HData through and nvme_tcp_recv_data()\ncopies into whatever the previous command on that tag left there. The\ndriver-private area is zeroed only when the tag set is allocated.\n\nReproduced with a test target that leaves a residual iterator on a tag\nand then sends a C2HData for a WRITE_ZEROES command on the same tag:\n\nBUG: KASAN: wild-memory-access in _copy_to_iter+0x642/0x1330\nWrite of size 512 at addr ffe728c2175dfa81 by task kworker/0:1H/103\n\nCPU: 0 UID: 0 PID: 103 Comm: kworker/0:1H Not tainted 7.2.0-rc5-NVMETCP-gf5098b6bae76 #1 PREEMPT(lazy)\nHardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nWorkqueue: nvme_tcp_wq nvme_tcp_io_work\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x53/0x70\n kasan_report+0xce/0x100\n ? _copy_to_iter+0x642/0x1330\n kasan_check_range+0x105/0x1b0\n __asan_memcpy+0x3c/0x60\n _copy_to_iter+0x642/0x1330\n ? __pfx_sock_has_perm+0x10/0x10\n ? worker_thread+0x45b/0xd10\n ? __pfx__copy_to_iter+0x10/0x10\n ? _raw_spin_lock_bh+0x83/0xe0\n ? __pfx__raw_spin_lock_bh+0x10/0x10\n __skb_datagram_iter+0xf3/0x820\n ? __pfx_simple_copy_to_iter+0x10/0x10\n ? __asan_memcpy+0x3c/0x60\n ? skb_copy_bits+0x58d/0x830\n skb_copy_datagram_iter+0x37/0x120\n nvme_tcp_recv_skb+0xa07/0x4320\n ? __pfx_nvme_tcp_recv_skb+0x10/0x10\n __tcp_read_sock+0x1ab/0x810\n ? __pfx_nvme_tcp_recv_skb+0x10/0x10\n ? __pfx_lock_sock_nested+0x10/0x10\n ? __pfx___tcp_read_sock+0x10/0x10\n nvme_tcp_try_recv+0x152/0x1e0\n ? __pfx_nvme_tcp_try_recv+0x10/0x10\n ? __pfx_mutex_unlock+0x10/0x10\n nvme_tcp_io_work+0x1e4/0x6c0\n ? __schedule+0x181a/0x49f0\n ? __pfx_nvme_tcp_io_work+0x10/0x10\n process_one_work+0x633/0x1030\n\nKeep the blk_rq_payload_bytes() test and add req-\u003edata_len to it. The\nold test is what rejects a C2HData naming a tag that is no longer in\nflight, because blk_update_request() zeroes rq-\u003e__data_len on\ncompletion; req-\u003edata_len and req-\u003ecurr_bio are driver-private and\nsurvive completion, so they cannot stand in for it. Setup initialises\nthe iterator only when both req-\u003ecurr_bio and req-\u003edata_len are set, so\nthe gate now tests the same two.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89482",
          "url": "https://www.suse.com/security/cve/CVE-2026-89482"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280350 for CVE-2026-89482",
          "url": "https://bugzilla.suse.com/1280350"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280351 for CVE-2026-89482",
          "url": "https://bugzilla.suse.com/1280351"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89482"
    },
    {
      "cve": "CVE-2026-89532",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89532"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Fix pcl_for_each_segment for empty chunks\n\nWhen a parsed chunk list contains a chunk whose ch_segcount is zero,\npcl_for_each_segment computes its inclusive upper bound as\n\u0026chunk-\u003ech_segments[ch_segcount - 1]. ch_segcount is u32, so the\nsubtraction wraps to 0xFFFFFFFF and the bound lands far past the\nch_segments flex array. The loop body then walks unrelated memory at\nsizeof(struct svc_rdma_segment) stride until it faults.\n\nA zero-segcount chunk is reachable from the wire:\nxdr_check_write_chunk() only rejects segcount values greater than\nrc_maxpages, and pcl_alloc_write() links a freshly allocated chunk\nonto rc_write_pcl/rc_reply_pcl before its segment-fill loop runs,\nso a Write or Reply chunk advertising zero segments leaves\nch_segcount == 0 on the list. When the transport has negotiated\nSend-With-Invalidate, svc_rdma_get_inv_rkey() iterates all four\nPCLs with pcl_for_each_segment and dereferences segment-\u003ers_handle\non each iteration, turning the underflow into an out-of-bounds read\nand a general protection fault.\n\n    xdr_check_write_list / xdr_check_reply_chunk\n      pcl_alloc_write()\n        chunk = pcl_alloc_chunk(...)  /* ch_segcount = 0 */\n        list_add_tail(\u0026chunk-\u003ech_list, \u0026pcl-\u003ecl_chunks)\n        /* fill loop iterates zero times for wire segcount 0 */\n\n    svc_rdma_get_inv_rkey()\n      pcl_for_each_chunk(rc_write_pcl)\n        pcl_for_each_segment(segment, chunk)\n          pos \u003c= \u0026ch_segments[0u - 1u]  /* 0xFFFFFFFF */\n          segment-\u003ers_handle            /* OOB read -\u003e GPF */\n\nFix by switching the macro to a half-open upper bound that uses\nch_segcount directly. For ch_segcount == 0 the loop start equals the\nloop end and the body is skipped; for ch_segcount \u003e 0 the iteration\nrange is unchanged. All six existing call sites in\nnet/sunrpc/xprtrdma/svc_rdma_recvfrom.c and\nnet/sunrpc/xprtrdma/svc_rdma_rw.c remain correct under the new bound,\nso no caller changes are needed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89532",
          "url": "https://www.suse.com/security/cve/CVE-2026-89532"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280985 for CVE-2026-89532",
          "url": "https://bugzilla.suse.com/1280985"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280989 for CVE-2026-89532",
          "url": "https://bugzilla.suse.com/1280989"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89532"
    },
    {
      "cve": "CVE-2026-89533",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89533"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Fix offset arithmetic in read_chunk_range\n\nsvc_rdma_read_chunk_range() walks a Read chunk\u0027s segment list to\nbuild a sub-range starting at byte offset and spanning length bytes\nfor a Position-Zero or Call chunk. Two arithmetic defects in the\nper-segment loop produce wrong DMA lengths and a u32 underflow:\n\n    pcl_for_each_segment(segment, chunk) {\n            if (offset \u003e segment-\u003ers_length) {\n                    offset -= segment-\u003ers_length;\n                    continue;\n            }\n\n            dummy.rs_handle = segment-\u003ers_handle;\n            dummy.rs_length = min_t(u32, length,\n                                    segment-\u003ers_length) - offset;\n            dummy.rs_offset = segment-\u003ers_offset + offset;\n\nFirst, the skip predicate uses \u0027\u003e\u0027 instead of \u0027\u003e=\u0027. When offset\nequals the segment\u0027s full rs_length, the segment is fully consumed\nand should be skipped, but the loop falls through into the body.\nThe resulting dummy.rs_length is min_t(u32, length, rs_length) -\nrs_length, which underflows to a near-UINT_MAX u32 when length is\nsmaller than rs_length, or is zero otherwise.\n\nSecond, the length formula subtracts offset from the min_t() result\nrather than from segment-\u003ers_length before the cap. For offset \u003e 0\nthe segment\u0027s residual is rs_length - offset, not rs_length, so the\ncap must be applied to the residual. With the current bracketing,\nwhenever length is smaller than rs_length - offset the per-segment\nlength becomes length - offset instead of length, silently dropping\noffset bytes from the rebuilt chunk. Combined with the boundary\ncase above it also enables the u32 underflow path, which propagates\na huge nr_bvec into svc_rdma_build_read_segment() and a multi-MiB\nkmalloc_array_node() in svc_rdma_get_rw_ctxt().\n\nAdditionally, svc_rdma_read_call_chunk() can invoke this function\nwith length == 0 when the last Read chunk ends exactly at the end\nof the Call chunk. With the corrected \u003e= predicate, every segment\nis skipped and the function returns the initial -EINVAL, rejecting\na valid request. Return success immediately when length is zero.\nAlso break out of the loop once length is fully consumed to avoid\npassing zero-length segments to svc_rdma_build_read_segment().\n\nFix by using \u0027\u003e=\u0027 so a fully-consumed segment is skipped, by\nmoving \u0027- offset\u0027 inside min_t() so the cap is applied to the\nsegment\u0027s residual length, by returning success for zero-length\nrequests, and by stopping iteration when the requested range has\nbeen consumed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89533",
          "url": "https://www.suse.com/security/cve/CVE-2026-89533"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280993 for CVE-2026-89533",
          "url": "https://bugzilla.suse.com/1280993"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280995 for CVE-2026-89533",
          "url": "https://bugzilla.suse.com/1280995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89533"
    },
    {
      "cve": "CVE-2026-89551",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89551"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow\n\nxdr_buf_trim() trims `len` bytes from the tail of an xdr_buf by\nwalking the tail, pages, and head iovecs.  Each per-section step\nuses min_t() so it never removes more bytes than that section\nholds, but the final accounting at the fix_len label subtracts the\ntotal bytes actually consumed from buf-\u003elen without any clamp:\n\n    fix_len:\n            buf-\u003elen -= (len - trim);\n\nWhen the caller has set buf-\u003elen to a value smaller than the sum\nof the iov_lens, (len - trim) can exceed buf-\u003elen and the unsigned\nsubtraction wraps to near UINT_MAX.  gss_krb5_unwrap_v2() reaches\nxdr_buf_trim() in exactly that state:\n\n    buf-\u003ehead[0].iov_len -= GSS_KRB5_TOK_HDR_LEN + headskip;\n    buf-\u003elen = len - (GSS_KRB5_TOK_HDR_LEN + headskip);\n    xdr_buf_trim(buf, ec + GSS_KRB5_TOK_HDR_LEN + tailskip);\n\nbuf-\u003elen is a small wire-derived value while the iov_lens are at\npage scale, so the per-section loops legitimately consume far more\nbytes than buf-\u003elen records.  The wrapped buf-\u003elen then propagates\nas the authoritative stream bound into every downstream XDR\ndecoder.\n\nFix by clamping the decrement so buf-\u003elen bottoms out at zero:\n\n    buf-\u003elen -= min_t(unsigned int, buf-\u003elen, len - trim);\n\nOn the normal path where the iov_lens sum to buf-\u003elen, (len - trim)\nis always \u003c= buf-\u003elen and the result is identical to before.  No\ncallers change behavior outside the underflow case.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89551",
          "url": "https://www.suse.com/security/cve/CVE-2026-89551"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280727 for CVE-2026-89551",
          "url": "https://bugzilla.suse.com/1280727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280728 for CVE-2026-89551",
          "url": "https://bugzilla.suse.com/1280728"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89551"
    },
    {
      "cve": "CVE-2026-89569",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89569"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: serialize security confirmation handling\n\nrfcomm_security_cfm() looks up a session on session_list and then walks\nits DLC list without holding rfcomm_mutex. Since RFCOMM session teardown\nuses rfcomm_mutex, krfcommd can close and free the same session and DLCs\nconcurrently:\n\n  hci_rx_work                    krfcommd\n  -----------                    ---------\n  rfcomm_session_get()\n                                 rfcomm_lock()\n                                 rfcomm_session_close()\n                                   rfcomm_dlc_unlink()\n                                   rfcomm_session_del()\n                                     kfree(s)\n                                 rfcomm_unlock()\n  walk s-\u003edlcs\n\nThe callback can then read a freed session list head and touch freed DLCs\nwhile updating their flags or timers.\n\nSerialize the session lookup and DLC traversal in rfcomm_security_cfm()\nwith rfcomm_mutex. This matches the existing RFCOMM session lifetime\nrules and prevents concurrent rfcomm_session_del() / rfcomm_dlc_unlink()\nfrom tearing the objects down while the callback is using them.\n\nKASAN reported:\n\n  BUG: KASAN: slab-use-after-free in rfcomm_security_cfm+0x41c/0x440\n  Read of size 8 at addr ffff888111fb3960 by task kworker/u17:1/89\n  Workqueue: hci0 hci_rx_work\n  Call Trace:\n   rfcomm_security_cfm+0x41c/0x440\n   hci_encrypt_cfm+0x139/0x590\n   hci_encrypt_change_evt+0x37b/0xc40\n   hci_event_packet+0x71b/0xb20\n   hci_rx_work+0x293/0x730\n  Allocated by task 69:\n   rfcomm_session_add+0x9e/0x2f0\n   rfcomm_run+0x44b/0x41e0\n  Freed by task 69:\n   kfree+0x131/0x3c0\n   rfcomm_session_del+0x188/0x220\n   rfcomm_run+0x1985/0x41e0",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89569",
          "url": "https://www.suse.com/security/cve/CVE-2026-89569"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280733 for CVE-2026-89569",
          "url": "https://bugzilla.suse.com/1280733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280738 for CVE-2026-89569",
          "url": "https://bugzilla.suse.com/1280738"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89569"
    },
    {
      "cve": "CVE-2026-89603",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89603"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89603",
          "url": "https://www.suse.com/security/cve/CVE-2026-89603"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280923 for CVE-2026-89603",
          "url": "https://bugzilla.suse.com/1280923"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280924 for CVE-2026-89603",
          "url": "https://bugzilla.suse.com/1280924"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89603"
    },
    {
      "cve": "CVE-2026-89631",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89631"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject a tree connect response whose byte count is too small\n\nCIFSTCon() bounds its strnlen() over the byte area with the server\u0027s\nByteCount minus two, which for ByteCount 0 or 1 goes negative as an int\nand converts to a huge size_t.  The later subtraction wraps the __u16\nbytes_left, and that is what bounds cifs_strndup_from_utf16(): a bound of\nup to 65535 against a ~16 KB cifs_req_poolp object runs off the end of the\nslab object, and the bytes reach userspace through tcon-\u003enativeFileSystem\nin /proc/fs/cifs/DebugData.\n\nReject a byte area too small for what the parser consumes.  Two bytes is\nthe least it can consume, and no conformant response carries fewer.  The\nnew trace point is the 129th smb_eio_trace entry, which __mode(byte)\ncannot represent, so the attribute goes with it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89631",
          "url": "https://www.suse.com/security/cve/CVE-2026-89631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280496 for CVE-2026-89631",
          "url": "https://bugzilla.suse.com/1280496"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280498 for CVE-2026-89631",
          "url": "https://bugzilla.suse.com/1280498"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89631"
    },
    {
      "cve": "CVE-2026-89636",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89636"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: clear ce-\u003etgthint in free_tgts()\n\nWhen free_tgts() frees all structures in ce-\u003etlist, ce-\u003etgthint\nis left pointing to one of the freed cache_dfs_tgt structures.\n\nIf ce-\u003etgthint is not reset before it is used later, it results\nin a use-after-free.\n\nSet ce-\u003etgthint to NULL in free_tgts() after the elements are\nfreed to reflect that no elements remain.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89636",
          "url": "https://www.suse.com/security/cve/CVE-2026-89636"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281042 for CVE-2026-89636",
          "url": "https://bugzilla.suse.com/1281042"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281043 for CVE-2026-89636",
          "url": "https://bugzilla.suse.com/1281043"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89636"
    },
    {
      "cve": "CVE-2026-89638",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89638"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions\n\nWhen a file has the setuid or setgid bit set and is written to, the VFS\nstrips those bits and issues a setattr with ATTR_KILL_SUID/ATTR_KILL_SGID\ntogether with an ATTR_MODE carrying the already-cleared mode.\n\nBoth cifs_setattr_unix() and cifs_setattr_nounix() unconditionally dropped\nATTR_MODE in that case:\n\n\t/* skip mode change if it\u0027s just for clearing setuid/setgid */\n\tif (attrs-\u003eia_valid \u0026 (ATTR_KILL_SUID|ATTR_KILL_SGID))\n\t\tattrs-\u003eia_valid \u0026= ~ATTR_MODE;\n\nThis is fine for the default mount, where the mode is only emulated via\nthe DOS read-only attribute and cannot represent the setuid/setgid bits\nanyway.  However, with the \"cifsacl\" or \"modefromsid\" mount options the\nmode is stored on the server through an ACL (id_mode_to_cifs_acl()), with\nthe SMB3.1.1 POSIX extensions the mode is sent to the server directly,\nand with the SMB1 Unix extensions (cifs_setattr_unix) the mode is sent\nvia CIFSSMBUnixSetPathInfo().  In all those cases dropping ATTR_MODE means\nthe cleared mode is never pushed to the server, so the setuid/setgid bit\nsurvives the write.\n\nThis is a security issue: on local filesystems the setuid bit is stripped\nwhen a file is written, but over these cifs.ko mounts the bit persists on\nthe server, potentially allowing an unexpected privilege escalation on\nsubsequent execution.\n\nFix this in two places:\n\n  1. cifs_setattr_nounix(): only take the \"skip mode change\" shortcut\n     when the mode is emulated via the DOS read-only attribute (i.e.\n     neither cifsacl/modefromsid nor the SMB3.1.1 POSIX extensions are\n     in effect), so that the cleared mode is propagated to the server\n     in the ACL / POSIX cases.\n\n  2. cifs_setattr_unix(): this function is only called when Unix\n     extensions are in effect, so the mode is always stored on the\n     server.  Remove the shortcut entirely so that the cleared mode is\n     always pushed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89638",
          "url": "https://www.suse.com/security/cve/CVE-2026-89638"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281046 for CVE-2026-89638",
          "url": "https://bugzilla.suse.com/1281046"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281047 for CVE-2026-89638",
          "url": "https://bugzilla.suse.com/1281047"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89638"
    },
    {
      "cve": "CVE-2026-89674",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89674"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget\n\nThe XDR buffer size calculation in nfsd4_ff_encode_layoutget() has\nmultiple errors that can result in either an out-of-bounds write or\nleaking uninitialized kernel memory to the client:\n\n - fh_len doesn\u0027t account for XDR padding on the file handle data\n - uid and gid lengths use \"8 + len\" but xdr_encode_opaque() actually\n   writes \"4 + xdr_align_size(len)\" bytes\n - ds_len omits the flags and stats_collect_hint fields (8 bytes),\n   while len\u0027s header constant overestimates by 8 bytes -- these\n   partially cancel but leave a net mismatch\n\nThe worst case occurs with short strings (e.g. uid=0, gid=0 with an\nodd-sized file handle), where the function writes up to 5 bytes past\nthe reserved XDR buffer. Conversely, when string lengths happen to be\n4-byte aligned, the reservation is too large and stale buffer content\nis sent to the client.\n\nFix this by breaking out every encoded field explicitly in the ds_len\ncalculation, using xdr_align_size() for all variable-length opaque\nfields, and correcting the header constants.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89674",
          "url": "https://www.suse.com/security/cve/CVE-2026-89674"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280243 for CVE-2026-89674",
          "url": "https://bugzilla.suse.com/1280243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280285 for CVE-2026-89674",
          "url": "https://bugzilla.suse.com/1280285"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89674"
    },
    {
      "cve": "CVE-2026-89932",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89932"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nVMX: Always flush vpid02 on first use\n\nMake sure vpid02 is always flushed on first use by setting last_vpid=0\nwhen allocating vpid02.  nested_vmx_transition_tlb_flush() will always\ndetect a VPID change on first VM-Enter after VMXON, because VPID=0 in\nvmcs12 is not allowed if L1 enables VPID.\n\nThis avoids using stale TLB entries from a previous lifetime of the\nVPID, that might have been associated with a different vCPU (or a\ncompletely different VM).\n\nNote that last_vpid is already being initialized as 0 when the vCPU is\ncreated, but it is not reset when vpid02 is freed on VMXOFF. Hence, the\nproblem can only occur if L1 does VMXOFF -\u003e VMXON, runs an L2, and KVM\nhappens to reuse a VPID that has TLB entries on the physical CPU.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89932",
          "url": "https://www.suse.com/security/cve/CVE-2026-89932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281360 for CVE-2026-89932",
          "url": "https://bugzilla.suse.com/1281360"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281362 for CVE-2026-89932",
          "url": "https://bugzilla.suse.com/1281362"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89932"
    },
    {
      "cve": "CVE-2026-89968",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89968"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: reject unsolicited H2CData PDUs\n\nnvmet_tcp_handle_h2c_data_pdu() accepts an H2CData PDU after only checking\nthat its TTAG is a valid in-range command index and that the command\u0027s\ndata buffers are mapped. It never checks that the target has actually\nsolicited that data by sending an R2T for the command.\n\nA remote host can abuse this. It submits a write command that takes the\nR2T path and, before the target transmits the R2T, sends an H2CData PDU\nfor that command\u0027s tag. The data completes the command early, and when\nthe command then fails synchronously (e.g. a length mismatch caught by\nnvmet_check_transfer_len()), it is completed a second time. Each\ncompletion calls nvmet_tcp_queue_response(), so the same command is added\nto queue-\u003eresp_list twice while it is still linked; the second llist_add()\nmakes the node point to itself (lentry-\u003enext == lentry).\n\nnvmet_tcp_process_resp_list() then walks that self-referential node and\nadds the command to resp_send_list twice. With CONFIG_DEBUG_LIST this\ntrips the \"list_add double add\" check (kernel BUG); without it the loop\nnever terminates and the nvmet_tcp workqueue wedges (soft-lockup). It is\nremotely triggerable and needs no authentication on an allow_any_host\nsubsystem.\n\nTrack whether an R2T has been transmitted for a command and reject an\nH2CData PDU that arrives before it. The flag is cleared on command reuse\n(nvmet_tcp_get_cmd() zeroes cmd-\u003eflags) and stays set across the multiple\nH2CData PDUs of a single solicited transfer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89968",
          "url": "https://www.suse.com/security/cve/CVE-2026-89968"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281229 for CVE-2026-89968",
          "url": "https://bugzilla.suse.com/1281229"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281235 for CVE-2026-89968",
          "url": "https://bugzilla.suse.com/1281235"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89968"
    },
    {
      "cve": "CVE-2026-90003",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90003"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfutex: Prevent rcuwait use-after-free during requeue PI\n\nOn PREEMPT_RT, FUTEX_CMP_REQUEUE_PI can trigger a KASAN report\n(slab-out-of-bounds) in futex_requeue_pi_complete() invocation of\nrcuwait_wake_up().\n\nThe futex_q used by futex_wait_requeue_pi() is allocated on the waiter\u0027s\nstack. An early wakeup can race with a PI requeue as follows:\n\n        waiter                          requeue task\n        ------                          ------------\nfutex_wait_requeue_pi()\n  futex_do_wait()\n    schedule()\n                                       futex_requeue\n                                         futex_proxy_trylock_atomic()\n                                           futex_requeue_pi_prepare()\n                                            Q_REQUEUE_PI_NONE -\u003e Q_REQUEUE_PI_IN_PROGRESS\n* timeout/ signal wakes waiter *\n  futex_requeue_pi_wakeup_sync()\n   Q_REQUEUE_PI_IN_PROGRESS -\u003e Q_REQUEUE_PI_WAIT\n                                           requeue_pi_wake_futex\n                                             futex_requeue_pi_complete()\n                                               cmpxchg Q_REQUEUE_PI_WAIT -\u003e Q_REQUEUE_PI_LOCKED\n    rcuwait_wait_event()\n      if (atomic_read(\u0026q-\u003erequeue_state) != Q_REQUEUE_PI_WAIT)\n       break /* no schedule() */\n\n /* q.pi_state-\u003eowner == current */\n futex_private_hash_put()\n /* return from syscall */\n                                              rcuwait_wake_up(\u0026q-\u003erequeue_wait)\n                                                /* q is gone */\n\nfutex_requeue_pi_complete() publishes Q_REQUEUE_PI_LOCKED before\ncalling rcuwait_wake_up(). The waiter observes this state in\nrcuwait_wait_event() before invoking schedule() in rcuwait_wait_event().\nHere, the waiter is free leave the syscall before requeue task can\ncomplete the wake.\n\nTo address this race skip rcuwait_wake_up() in the Q_REQUEUE_PI_LOCKED\ncase.\nThis state is only published by requeue_pi_wake_futex(), which saves\nq-\u003etask before futex_requeue_pi_complete() and wakes the waiter via\nwake_up_state().\n\nThis wake is intended to wake the waiter from its futex_do_wait() sleep.\nIf the waiter is still sleeping there, it can not get into the\nQ_REQUEUE_PI_WAIT state (and require this removed wake).\nShould the waiter be woken up from futex_do_wait() by other means (as in\nthis example) and sleep in futex_requeue_pi_wakeup_sync() then the\nwake_up_state() from requeue_pi_wake_futex() will wake it, too.\nShould the waiter task terminate before wake_up_state() had a chance to\nwake the task then the task pointer does not become invalid because the\nfutex_hash_bucket::lock is held and the task pointer is RCU protected.\n\n[bigeasy: Updated comment and commit message]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90003",
          "url": "https://www.suse.com/security/cve/CVE-2026-90003"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281295 for CVE-2026-90003",
          "url": "https://bugzilla.suse.com/1281295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281296 for CVE-2026-90003",
          "url": "https://bugzilla.suse.com/1281296"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90003"
    },
    {
      "cve": "CVE-2026-90104",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90104"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4.1: zero referring call lists before decoding\n\ndecode_cb_sequence_args() allocates csa_rclists with kmalloc_objs(), so\neach referring_call_list starts uninitialized. decode_rc_list() assigns\nrcl_refcalls only when rcl_nrefcalls is nonzero. A valid list with zero\nreferring calls therefore leaves the pointer uninitialized, and\nnfs4_callback_sequence() later passes stale slab contents to kfree().\n\nAllocate csa_rclists with kzalloc_objs() so every rcl_refcalls member is\nNULL from the beginning, including valid empty referring call lists.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90104",
          "url": "https://www.suse.com/security/cve/CVE-2026-90104"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281546 for CVE-2026-90104",
          "url": "https://bugzilla.suse.com/1281546"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281585 for CVE-2026-90104",
          "url": "https://bugzilla.suse.com/1281585"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90104"
    },
    {
      "cve": "CVE-2026-90198",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90198"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: core: Fix use-after-free in snd_card_do_free()\n\nA use-after-free was detected in snd_card_do_free() when a sound card\nmanaged by devres is unbound while a user-space application still holds an\nopen file descriptor.\n\nFor managed cards, the memory is allocated using devres_alloc(), and its\nrelease function is set to __snd_card_release(), which calls\nsnd_card_free(). When the device is unbound, the unbind thread calls\nsnd_card_free(), which drops a reference to the card\u0027s device. If the user\nthread still has an open file descriptor, the reference count does not\nreach zero, and the unbind thread blocks on wait_for_completion(\u0026released).\n\nWhen the user thread closes the file descriptor, it drops the final\nreference, invoking the device release callback release_card_device(),\nwhich calls snd_card_do_free(). snd_card_do_free() performs cleanup and\ncalls complete(card-\u003erelease_completion). This wakes up the unbind thread,\nwhich returns from snd_card_free() and __snd_card_release(). The devres\ncore then immediately frees the memory block containing the snd_card\nstructure.\n\nMeanwhile, the user thread continues execution in snd_card_do_free() and\nevaluates `if (!card-\u003emanaged)`. It reads the `managed` boolean from the\nsnd_card structure that was just freed by the unbind thread, triggering a\nKASAN use-after-free.\n\nFix this by caching the value of card-\u003emanaged in a local variable before\ncalling complete(). This ensures that the card pointer is not dereferenced\nafter the unbind thread has been woken up and potentially freed the card.\n\nBUG: KASAN: use-after-free in snd_card_do_free sound/core/init.c:604\n[inline]\nBUG: KASAN: use-after-free in release_card_device+0x1ab/0x1b0\nsound/core/init.c:153\nRead of size 1 at addr ffff8881912ec909 by task syz-executor130/5857\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120\n print_address_description+0x55/0x1e0 mm/kasan/report.c:378\n print_report+0x58/0x70 mm/kasan/report.c:482\n kasan_report+0x117/0x150 mm/kasan/report.c:595\n snd_card_do_free sound/core/init.c:604 [inline]\n release_card_device+0x1ab/0x1b0 sound/core/init.c:153\n device_release+0xc4/0x1f0 drivers/base/core.c:-1\n kobject_cleanup lib/kobject.c:689 [inline]\n kobject_release lib/kobject.c:720 [inline]\n kref_put include/linux/kref.h:65 [inline]\n kobject_put+0x222/0x550 lib/kobject.c:737\n snd_card_file_remove+0x331/0x390 sound/core/init.c:1125\n snd_pcm_release+0x12c/0x160 sound/core/pcm_native.c:2986\n __fput+0x418/0xa50 fs/file_table.c:512\n fput_close_sync+0x11f/0x240 fs/file_table.c:617\n __do_sys_close fs/open.c:1511 [inline]\n __se_sys_close fs/open.c:1496 [inline]\n __x64_sys_close+0x7e/0x110 fs/open.c:1496\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90198",
          "url": "https://www.suse.com/security/cve/CVE-2026-90198"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281818 for CVE-2026-90198",
          "url": "https://bugzilla.suse.com/1281818"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1281820 for CVE-2026-90198",
          "url": "https://bugzilla.suse.com/1281820"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90198"
    },
    {
      "cve": "CVE-2026-90413",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90413"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/isert: reject login PDUs declaring more data than was received\n\nisert_login_recv_done() records how many bytes the HCA actually placed in\nthe login buffer, but nothing compares that against the length the login\nPDU\u0027s BHS declares.  isert_rx_login_req() copies min(login_req_len,\nMAX_KEY_VALUE_PAIRS) bytes into login-\u003ereq_buf, and the login code then\nreads the declared length back out of that buffer - for the first PDU in\niscsi_target_locate_portal(),\n\n\tpayload_length = ntoh24(login_req-\u003edlength);\n\ttmpbuf = kmemdup_nul(login-\u003ereq_buf, payload_length, GFP_KERNEL);\n\nand for the ones after it in iscsi_decode_text_input(), reached from\niscsi_target_do_login().\n\nlogin-\u003ereq_buf is a fixed MAX_KEY_VALUE_PAIRS (8192) byte allocation, so\nan initiator that declares more than it sends reads off the end of it,\nbefore authentication and with the length under its control:\n\n  BUG: KASAN: slab-out-of-bounds in kmemdup_nul+0x43/0x80\n  Read of size 8193 at addr ffff8881056a8000 by task iscsi_np/167\n   __asan_memcpy+0x23/0x60\n   kmemdup_nul+0x43/0x80\n   iscsi_target_locate_portal+0x48d/0x1180\n   iscsi_target_login_thread+0x19a9/0x3350\n  Allocated by task 167:\n   __kmalloc_cache_noprof+0x158/0x370\n   iscsi_target_login_thread+0x971/0x3350\n  which belongs to the cache kmalloc-8k of size 8192\n  allocated 8192-byte region\n\nFalsifying the second login PDU instead reaches the other reader, on the\nsame buffer:\n\n  BUG: KASAN: slab-out-of-bounds in kmemdup_nul+0x43/0x80\n  Read of size 8193 at addr ffff888104d10000 by task kworker/1:1/50\n  Workqueue: isert_login_wq iscsi_target_do_login_rx\n   __asan_memcpy+0x23/0x60\n   kmemdup_nul+0x43/0x80\n   iscsi_decode_text_input+0xc6/0x11c0\n   iscsi_target_do_login+0x261/0x1470\n   iscsi_target_do_login_rx+0x51d/0x7d0\n\niscsit over TCP is not exposed: iscsit_get_login_rx() validates the\ndeclared length with iscsi_target_check_login_request() and then reads\nexactly that many bytes off the socket, so the declared length governs\nhow much arrives rather than how much is copied out of an already-filled\nbuffer.  isert does not call iscsi_target_check_login_request() at all.\n\nReject a login PDU whose declared DataSegmentLength exceeds what was\nreceived, in both paths that reach isert_rx_login_req():\nisert_get_login_rx() for the first login PDU and isert_login_recv_done()\nfor the ones after it.  dlength \u003c= login_req_len is allowed because the\nreceived count can include up to three bytes of iSCSI padding.\n\nOnce the check is in place the copy out can no longer exceed the copy in:\nthe posted login SGE is ISER_RX_PAYLOAD_SIZE, so login_req_len cannot\nexceed MAX_KEY_VALUE_PAIRS and the min() in isert_rx_login_req() is\nlogin_req_len.\n\nLike the existing short-PDU check added by 29e7b925ae6d, the reject in\nisert_login_recv_done() returns without completing login_req_comp, so a\nmalformed subsequent PDU leaves the login to be torn down by the login\ntimer rather than failing immediately.  The first-PDU path returns an\nerror and fails straight away.\n\nReproduced on 7.2.0-rc4 with soft-RoCE (rdma_rxe) under KASAN, using an\ninitiator that sends the real key=value payload while declaring 8193 in\nthe BHS, on the first login PDU and on the second in separate runs.  The\nreported read size tracks the declared value exactly; 16384 and 61440\nbehave the same.  Unpatched 3 of 3 runs report on each of the two paths,\npatched 0 of 3 on both, run alternately in a single session, and a normal\nlogin still completes on the patched build.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90413",
          "url": "https://www.suse.com/security/cve/CVE-2026-90413"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282113 for CVE-2026-90413",
          "url": "https://bugzilla.suse.com/1282113"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282118 for CVE-2026-90413",
          "url": "https://bugzilla.suse.com/1282118"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90413"
    },
    {
      "cve": "CVE-2026-90414",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-90414"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/isert: reject PDUs declaring more data than was received\n\nisert_recv_done() hands each received PDU to the opcode handlers without\never looking at wc-\u003ebyte_len, the number of bytes the HCA actually placed\nin the receive descriptor. The handlers then copy that many bytes - the\ndata-segment length the initiator declared in the BHS\n(ntoh24(hdr-\u003edlength), via the derived unsol_data_len / imm_data_len) -\nout of the fixed-size descriptor:\n\n  isert_handle_iscsi_dataout():\n        sg_copy_from_buffer(sg_start, sg_nents, isert_get_data(rx_desc),\n                            unsol_data_len);\n  isert_handle_scsi_cmd():\n        sg_copy_from_buffer(cmd-\u003ese_cmd.t_data_sg, sg_nents,\n                            isert_get_data(rx_desc), imm_data_len);\n\nBecause the declared length is never checked against wc-\u003ebyte_len, an\ninitiator can declare a data segment larger than the bytes it actually\nsent (and larger than the descriptor) and cause an out-of-bounds read of\nthe receive buffer.\n\nNothing upstream of isert closes this door:\n\n  - __iscsit_check_dataout_hdr() bounds the inbound payload against\n    conn_ops-\u003eMaxXmitDataSegmentLength (MXDSL) - a transmit parameter,\n    used here for the inbound check.\n  - iscsi_set_connection_parameters() sets\n    ops-\u003eMaxXmitDataSegmentLength = ops-\u003eTargetRecvDataSegmentLength;\n    and TARGETRECVDATASEGMENTLENGTH is absent from the min()-clamp list in\n    iscsi_check_acceptor_state(), so the value the initiator declares is\n    adopted verbatim (type range 512..16777215). The initiator effectively\n    raises its own ceiling.\n  - isert never clamps the negotiated value to its own fixed receive\n    descriptor (ISER_RX_SIZE, 9216 bytes), so the target core\u0027s bound and\n    the descriptor size are unrelated.\n\nThe imm_data_len == data_len path is more than an over-read: it aliases\nthe receive descriptor via sg_set_buf() and passes it to the backend as\nthe data source for the SCSI WRITE, so an over-declared length causes heap\ncontents past the descriptor to be written through the backend to the\nbacking store. The backend is the victim of the oversized scatterlist\nisert hands it, not the cause; no read-back of the written bytes was\ndemonstrated.\n\nTrigger: after login completes (full feature phase), an initiator that has\ndeclared a large TargetRecvDataSegmentLength and a FirstBurstLength that\npermits unsolicited/immediate data sends a PDU whose declared data-segment\nlength exceeds what was received. With KASAN:\n\n  BUG: KASAN: slab-out-of-bounds in sg_copy_buffer+0x150/0x1c0\n  Read of size 4096 at addr ffff888109720800 by task kworker/1:0H/25\n  Workqueue: ib-comp-wq ib_cq_poll_work\n  Call Trace:\n   sg_copy_buffer+0x150/0x1c0\n   isert_recv_done+0xba6/0x2390\n   __ib_process_cq+0xe1/0x390\n   ib_cq_poll_work+0x46/0x150\n\nisert_recv_done+0xba6 resolves to isert_handle_iscsi_dataout()\n(ib_isert.c:1160), inlined through isert_rx_opcode().\n\nValidate wc-\u003ebyte_len against the framing in isert_recv_done() before the\nPDU reaches any handler, and reinstate the connection if it is short.\nBecause the test compares without subtracting the header length, it also\nrejects PDUs shorter than the iSER and iSCSI headers, which would otherwise\nbe parsed out of stale descriptor contents. The login handler rejects PDUs\nshorter than ISER_HEADERS_LEN (commit 29e7b925ae6d (\"IB/isert: Reject login\nPDUs shorter than ISER_HEADERS_LEN\")) but does not bound the declared\nlength either; that is fixed in the next patch. The data handlers had no\nlength check at all.\n\nisert reads the data segment from a fixed offset: isert_get_data()\nreturns the iSER header plus ISER_HEADERS_LEN and makes no adjustment for\nan AHS.  The bytes the handlers touch are therefore exactly\n[ISER_HEADERS_LEN, ISER_HEADERS_LEN + dlength), and comparing that sum\nagainst wc-\u003ebyte_len bounds precisely the region that is read.  An AHS\nterm would only make the test stricter without bounding anything furth\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-90414",
          "url": "https://www.suse.com/security/cve/CVE-2026-90414"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282110 for CVE-2026-90414",
          "url": "https://bugzilla.suse.com/1282110"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282111 for CVE-2026-90414",
          "url": "https://bugzilla.suse.com/1282111"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-90414"
    },
    {
      "cve": "CVE-2026-93104",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93104"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rvt: Return NULL after port allocation failure\n\nrvt_alloc_device() deallocates the IB device when its port array cannot\nbe allocated but then returns the pointer to the released allocation.\nCallers treat any non-NULL value as valid and dereference it, resulting\nin a use-after-free.\n\nReturn NULL immediately after deallocation so callers can propagate the\nallocation failure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93104",
          "url": "https://www.suse.com/security/cve/CVE-2026-93104"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282284 for CVE-2026-93104",
          "url": "https://bugzilla.suse.com/1282284"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282285 for CVE-2026-93104",
          "url": "https://bugzilla.suse.com/1282285"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-93104"
    },
    {
      "cve": "CVE-2026-93782",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93782"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvhost-scsi: flush backend after device ioctls\n\nvhost-scsi translates guest response descriptors into userspace iovecs\nwhen commands are submitted.  Target-core completes those commands\nasynchronously, so VHOST_SET_MEM_TABLE can replace the memory table while\nan in-flight command still retains response iovecs translated through the\nold table.\n\nIf the old mapping is reused after VHOST_SET_MEM_TABLE returns, command\ncompletion can write the response to an unrelated userspace object.\n\nFlush the vhost-scsi backend after vhost_dev_ioctl() handles a device\nioctl.  This waits for in-flight commands that can still use the old\nresponse iovecs before the ioctl returns.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93782",
          "url": "https://www.suse.com/security/cve/CVE-2026-93782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282906 for CVE-2026-93782",
          "url": "https://bugzilla.suse.com/1282906"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282907 for CVE-2026-93782",
          "url": "https://bugzilla.suse.com/1282907"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-93782"
    },
    {
      "cve": "CVE-2026-93787",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93787"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: bound dirent name against end of SMB response in cifs_filldir\n\ncifs_filldir() copies the entry name out of an SMB1 TRANS2_FIND_FIRST /\nFIND_NEXT response using a length (de.namelen) supplied by the server.\nThe kmalloc\u0027d SMB response buffer is bounded, but nothing checks that\nde.name + de.namelen still lies inside that buffer before the eventual\nfilldir64() -\u003e verify_dirent_name() -\u003e memchr() reads namelen bytes.\n\nA hostile SMB1 server that returns an oversized FileNameLength in a\ndirectory entry therefore causes memchr() to read past the end of the\nresponse slab buffer. Reachable from any user who can list a directory\non a CIFS mount served by an attacker-controlled server (getdents64()\non the mounted directory):\n\n  BUG: KASAN: slab-out-of-bounds in memchr+0x71/0x80\n  Read of size 1 at addr ffff88800e0640cc by task poc/115\n  Call Trace:\n   dump_stack_lvl+0x64/0x80\n   print_report+0xce/0x620\n   kasan_report+0xec/0x120\n   memchr+0x71/0x80\n   filldir64+0x4c/0x6a0\n   cifs_filldir.constprop.0+0x9bb/0x1e00\n   cifs_readdir+0x2101/0x3380\n   iterate_dir+0x19c/0x520\n   __x64_sys_getdents64+0x126/0x210\n   do_syscall_64+0x107/0x5a0\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nPass the end-of-response pointer down to cifs_filldir() and reject\nentries whose name would extend past that boundary.\n\nThis bug was discovered by Artiphishell\u0027s vTriage pipeline, which\ngenerated a userspace reproducer (an emulated hostile SMB1 server plus\na getdents64() client) that reliably triggers the KASAN report on an\nunpatched kernel. The fix below was drafted with the Claude coding\nassistant; a userspace reproducer is available on request.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
          "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
          "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93787",
          "url": "https://www.suse.com/security/cve/CVE-2026-93787"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282932 for CVE-2026-93787",
          "url": "https://bugzilla.suse.com/1282932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282933 for CVE-2026-93787",
          "url": "https://bugzilla.suse.com/1282933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch",
            "SUSE Linux Enterprise Micro 5.4:kernel-rt-0:5.14.21-150400.15.189.1.x86_64",
            "SUSE Linux Enterprise Micro 5.4:kernel-source-rt-0:5.14.21-150400.15.189.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-14T12:54:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-93787"
    }
  ]
}