Vulnerability-Lookup

SUSE-SU-2026:4687-1

Vulnerability from csaf_suse - Published: 2026-10-15 12:38 - Updated: 2026-10-16 09:50

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133). - CVE-2026-43428: USB: core: Limit the length of unkillable synchronous timeouts (bsc#1265138). - CVE-2026-45834: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (bsc#1266412). - CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). - CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). - CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). - CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). - CVE-2026-46312: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (bsc#1267990). - CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234). - CVE-2026-53037: HID: usbhid: fix deadlock in hid_post_reset() (bsc#1269081). - CVE-2026-53237: gpio: mvebu: fix NULL pointer dereference in suspend/resume (bsc#1269131). - CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). - CVE-2026-53385: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (bsc#1271834). - CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1273953). - CVE-2026-63897: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (bsc#1272642). - CVE-2026-63900: USB: serial: keyspan: fix missing indat transfer sanity check (bsc#1272499). - CVE-2026-63902: USB: serial: cypress_m8: validate interrupt packet headers (bsc#1272517). - CVE-2026-63903: USB: serial: belkin_sa: validate interrupt status length (bsc#1272522). - CVE-2026-63904: usb: usbtmc: check URB actual_length for interrupt-IN notifications (bsc#1272523). - CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). - CVE-2026-63942: parport: Fix race between port and client registration (bsc#1273023). - CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). - CVE-2026-63957: USB: serial: safe_serial: fix memory corruption with small endpoint (bsc#1272472). - CVE-2026-63961: usb: typec: altmodes/displayport: validate count before reading Status Update VDO (bsc#1272480). - CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). - CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). - CVE-2026-64014: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (bsc#1273769). - CVE-2026-64097: drm/amd/display: Validate GPIO pin LUT table size before iterating (bsc#1273480). - CVE-2026-64191: i2c: stub: Reject I2C block transfers with invalid length (bsc#1272211). - CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). - CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). - CVE-2026-64320: nvmet: fix discover log page when offsets are used (bsc#1273420). - CVE-2026-64342: USB: iowarrior: fix use-after-free on disconnect (bsc#1274011). - CVE-2026-64348: usb: free iso schedules on failed submit (bsc#1274026). - CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). - CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). - CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868). - CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603). - CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). - CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). - CVE-2026-64496: iio: event: Fix event FIFO reset race (bsc#1273600). - CVE-2026-64540: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (bsc#1273302). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-68108: drm/amdgpu/vce: fix integer overflow in image size (bsc#1274869). - CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). - CVE-2026-68184: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (bsc#1274981). - CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). - CVE-2026-68350: wifi: carl9170: fix OOB read from off-by-two in TX status handler (bsc#1274682). - CVE-2026-68365: USB: serial: io_edgeport: cap received transmit credits (bsc#1276257). - CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). - CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831). - CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). - CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). - CVE-2026-68479: Bluetooth: btrtl: validate firmware patch bounds (bsc#1276585). - CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). - CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). - CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). - CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). - CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). - CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). - CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). - CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). - CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). - CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). - CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). - CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). - CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). - CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). - CVE-2026-72166: net/9p: avoid -ERESTARTSYS leak to userspace (bsc#1277556). - CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). - CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). - CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). - CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). - CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). - CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). - CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). - CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128). - CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). - CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). - CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). - CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). - CVE-2026-72436: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (bsc#1277245). - CVE-2026-72444: flow_dissector: fix false-positive __read_overflow2_field() warning (bsc#1278100). - CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). - CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064). - CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). - CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). - CVE-2026-74276: spi: xilinx: use FIFO occupancy register to determine buffer size (bsc#1276495). - CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). - CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). - CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). - CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). - CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). - CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). - CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). - CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). - CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). - CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). - CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). - CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). - CVE-2026-74386: nvmet-tcp: fix a memory leak when releasing a queue (bsc#1277098). - CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). - CVE-2026-74424: fbcon: fix NULL pointer dereference for a console without vc_data (bsc#1276321). - CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). - CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). - CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). - CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). - CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). - CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). - CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335). - CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). - CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). - CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). - CVE-2026-74497: ALSA: usb-audio: Clamp frame size in implicit-feedback mode (bsc#1275957). - CVE-2026-74498: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (bsc#1275958). - CVE-2026-74499: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (bsc#1275959). - CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954). - CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). - CVE-2026-74585: thunderbolt: Bound the DROM dual link port number before indexing sw->ports (bsc#1277881). - CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). - CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). - CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). - CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). - CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). - CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). - CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). - CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). - CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). - CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). - CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). - CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). - CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). - CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). - CVE-2026-74682: ALSA: usb-audio: fix OOB write on Type II inbound URBs (bsc#1276934). - CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). - CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). - CVE-2026-74691: net: thunderbolt: Tear down DMA paths before stopping the rings (bsc#1276925). - CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). - CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). - CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). - CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). - CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). - CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). - CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). - CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). - CVE-2026-80558: libceph: Avoid using invalid osd indices from primary_temp (bsc#1277485). - CVE-2026-80561: libceph: fix multiple unsafe decodes in decode_locker() (bsc#1277265). - CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). - CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). - CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). - CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). - CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). - CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). - CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). - CVE-2026-80798: nfc: llcp: reject PDUs shorter than the LLCP header (bsc#1279809). - CVE-2026-80800: nfc: llcp: bound the connect_sn TLV walk to the skb (bsc#1279812). - CVE-2026-80829: ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (bsc#1279485). - CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). - CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). - CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). - CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). - CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). - CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). - CVE-2026-80908: drm/amdgpu: Reject UVD message with dimensions above 4096 (bsc#1279627). - CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). - CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). - CVE-2026-81005: ipmi: si: Fix NULL pointer dereference after failed registration (bsc#1280230). - CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). - CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). - CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). - CVE-2026-89480: nvme-tcp: Do not reset transport on data digest errors (bsc#1280449). - CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). - CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). - CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). - CVE-2026-89524: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (bsc#1280581). - CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). - CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). - CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). - CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). - CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). - CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). - CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). - CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). - CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). - CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). - CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). - CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). - CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). - CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). - CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). - CVE-2026-89752: mm: memcg: stop reclaim when a limit update is superseded (bsc#1281176). - CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). - CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). - CVE-2026-89870: media: zoran: Avoid freeing a registered video_device twice (bsc#1281352). - CVE-2026-89927: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (bsc#1281429). - CVE-2026-89929: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (bsc#1281358). - CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359). - CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). - CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). - CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). - CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). - CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). - CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). - CVE-2026-90223: nfc: llcp: bound SNL TLV parsing to the skb and add length checks (bsc#1281708). - CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). - CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). - CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). - CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). - CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). - CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). - CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). - CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). - CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). - CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). - CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). - CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). - CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). - CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). - CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). - CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). - CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). - CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). - CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). - CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: - Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (git-fixes). - default_gfp(): avoid using the 'newfangled' __VA_OPT__ trick (bsc#1280139). - Fix backport of 'RDMA/efa: Fix PBL chunk length computation' Refresh:. - gpio: mvebu: Use IS_REACHABLE instead of IS_ENABLED for CONFIG_PWM (git-fixes). - i2c: core: fix irq domain leak on adapter registration failure (git-fixes). - kernel-binary.spec.in: Fix syntax error. - KVM: nVMX: Always flush vpid02 on first use (git-fixes). - RDMA/efa: Fix PBL chunk length computation. - ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). - scripts/osc_wrapper: Select repository appropriate for architecture. - scripts: Add kernel_repos. - scripts: obsapi: Kick get_kernel_projects from uploader - scripts: obsapi: Kick get_project_repo_archs from uploader - slab: Introduce kmalloc_obj() and family (bsc#1280139). - slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). - smb3: missing inode locks in punch hole (git-fixes). - smb: client: reject overlapping data areas in SMB2 responses (git-fixes). - xfs: don't drain buffer lru on freeze and read-only remount (bsc#1280223).

Patchnames: SUSE-2026-4687,SUSE-SLE-Live-Patching-12-SP5-2026-4687,SUSE-SLE-SERVER-12-SP5-LTSS-2026-4687,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4687

CVE-2022-50645

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-man-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-devel-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-macros-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-source-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_333-default-0:1-8.3.3.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_333-default-0:1-8.3.3.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_333-default-0:1-8.3.3.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-man-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-devel-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-macros-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-source-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:cluster-md-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:dlm-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:gfs2-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-0:4.12.14-122.333.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-0:4.12.14-122.333.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ocfs2-kmp-default-0:4.12.14-122.333.2.x86_64	—	Vendor Fix

Threats

Impact low

CVE-2026-100075

7.5 (High)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-31663

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-43428

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-45834

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-45836

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-46044

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-46196

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-46304

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-46312

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-52975

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-53037

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-53237

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-53284

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-53385

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-53400

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-63897

2.4 (Low)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-63900

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-63902

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-63903

5.2 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-63904

5.2 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-63913

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-63942

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-63956

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-63957

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-63961

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-63963

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64009

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64014

6.1 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64097

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64191

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64279

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64299

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64320

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-64342

6.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64348

2.5 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-64372

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64373

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64375

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64378

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64388

3.9 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64448

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64496

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64540

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-64580

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-68108

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-68162

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-68184

2.5 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-68343

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-68350

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-68365

6.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-68376

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-68377

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-68445

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-68477

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-68479

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72019

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72025

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72051

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72052

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72053

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72054

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72061

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72066

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72098

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72106

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72107

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72129

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72157

8.1 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72163

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72166

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72224

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72243

5.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72256

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72321

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72322

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72348

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72349

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-72350

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-72351

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72383

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72392

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72398

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-72406

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72413

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72435

4.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72436

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72444

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-72447

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-72463

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74267

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74268

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74276

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74282

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74283

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74284

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74288

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74289

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74290

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74307

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74317

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74330

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74349

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74359

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74384

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74386

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74398

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74424

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74443

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74444

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74453

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74464

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74469

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74471

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74473

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74474

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74475

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-74480

7.5 (High)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74485

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74497

5.2 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74498

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74499

6.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74512

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74540

7.5 (High)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74585

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74586

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74588

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74589

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74592

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74597

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74598

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74601

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74609

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74630

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74641

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74660

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74663

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74667

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74671

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74682

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74688

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74689

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-74691

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74692

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74701

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74726

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74739

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-74744

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-74752

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-80540

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80557

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-80558

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-80561

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-80664

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80681

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80731

5.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80747

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80785

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-80789

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-80793

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80798

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80800

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80829

6.1 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80841

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-80844

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-80847

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80852

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-80863

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80864

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-80908

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-81000

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-81001

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-81005

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89448

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89477

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89479

7.4 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-89480

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-89481

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89510

5.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89511

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89524

6.4 (Medium)


                
                  CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89531

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89538

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89539

2.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-89540

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89544

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-89548

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89551

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-89569

7.1 (High)


                
                  CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-89580

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89644

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89662

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89673

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89674

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-89686

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89707

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89752

2.5 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89784

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89789

5.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89870

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89927

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89929

3.6 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-89930

4.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-89968

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-90088

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-90104

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-90149

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-90151

5.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-90203

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-90223

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-90259

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-90293

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-90294

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-90307

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-90413

7.1 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-90414

7.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-90415

2.5 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-90417

3.6 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-92525

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-93104

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-93108

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-93264

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-93782

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact important

CVE-2026-93794

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact low

CVE-2026-93829

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-97557

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-97940

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-98080

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

CVE-2026-98164

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 164 products, the same list as for CVE-2022-50645

Threats

Impact moderate

References

993 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://www.suse.com/support/update/announcement/…	self
https://bugzilla.suse.com/1031492	self
https://bugzilla.suse.com/1045298	self
https://bugzilla.suse.com/1254633	self
https://bugzilla.suse.com/1263133	self
https://bugzilla.suse.com/1265138	self
https://bugzilla.suse.com/1266410	self
https://bugzilla.suse.com/1266412	self
https://bugzilla.suse.com/1266848	self
https://bugzilla.suse.com/1267464	self
https://bugzilla.suse.com/1267985	self
https://bugzilla.suse.com/1267990	self
https://bugzilla.suse.com/1268276	self
https://bugzilla.suse.com/1269081	self
https://bugzilla.suse.com/1269131	self
https://bugzilla.suse.com/1269234	self
https://bugzilla.suse.com/1269816	self
https://bugzilla.suse.com/1271834	self
https://bugzilla.suse.com/1271906	self
https://bugzilla.suse.com/1272211	self
https://bugzilla.suse.com/1272471	self
https://bugzilla.suse.com/1272472	self
https://bugzilla.suse.com/1272473	self
https://bugzilla.suse.com/1272480	self
https://bugzilla.suse.com/1272499	self
https://bugzilla.suse.com/1272517	self
https://bugzilla.suse.com/1272522	self
https://bugzilla.suse.com/1272523	self
https://bugzilla.suse.com/1272642	self
https://bugzilla.suse.com/1272890	self
https://bugzilla.suse.com/1273023	self
https://bugzilla.suse.com/1273302	self
https://bugzilla.suse.com/1273420	self
https://bugzilla.suse.com/1273480	self
https://bugzilla.suse.com/1273600	self
https://bugzilla.suse.com/1273603	self
https://bugzilla.suse.com/1273769	self
https://bugzilla.suse.com/1273776	self
https://bugzilla.suse.com/1273868	self
https://bugzilla.suse.com/1273879	self
https://bugzilla.suse.com/1273889	self
https://bugzilla.suse.com/1273953	self
https://bugzilla.suse.com/1273976	self
https://bugzilla.suse.com/1273982	self
https://bugzilla.suse.com/1274011	self
https://bugzilla.suse.com/1274026	self
https://bugzilla.suse.com/1274037	self
https://bugzilla.suse.com/1274061	self
https://bugzilla.suse.com/1274629	self
https://bugzilla.suse.com/1274682	self
https://bugzilla.suse.com/1274831	self
https://bugzilla.suse.com/1274836	self
https://bugzilla.suse.com/1274869	self
https://bugzilla.suse.com/1274920	self
https://bugzilla.suse.com/1274981	self
https://bugzilla.suse.com/1275495	self
https://bugzilla.suse.com/1275543	self
https://bugzilla.suse.com/1275545	self
https://bugzilla.suse.com/1275681	self
https://bugzilla.suse.com/1275954	self
https://bugzilla.suse.com/1275957	self
https://bugzilla.suse.com/1275958	self
https://bugzilla.suse.com/1275959	self
https://bugzilla.suse.com/1275972	self
https://bugzilla.suse.com/1276007	self
https://bugzilla.suse.com/1276009	self
https://bugzilla.suse.com/1276257	self
https://bugzilla.suse.com/1276277	self
https://bugzilla.suse.com/1276321	self
https://bugzilla.suse.com/1276335	self
https://bugzilla.suse.com/1276339	self
https://bugzilla.suse.com/1276340	self
https://bugzilla.suse.com/1276353	self
https://bugzilla.suse.com/1276381	self
https://bugzilla.suse.com/1276460	self
https://bugzilla.suse.com/1276461	self
https://bugzilla.suse.com/1276462	self
https://bugzilla.suse.com/1276468	self
https://bugzilla.suse.com/1276473	self
https://bugzilla.suse.com/1276475	self
https://bugzilla.suse.com/1276495	self
https://bugzilla.suse.com/1276508	self
https://bugzilla.suse.com/1276519	self
https://bugzilla.suse.com/1276565	self
https://bugzilla.suse.com/1276585	self
https://bugzilla.suse.com/1276801	self
https://bugzilla.suse.com/1276803	self
https://bugzilla.suse.com/1276814	self
https://bugzilla.suse.com/1276818	self
https://bugzilla.suse.com/1276865	self
https://bugzilla.suse.com/1276866	self
https://bugzilla.suse.com/1276905	self
https://bugzilla.suse.com/1276921	self
https://bugzilla.suse.com/1276923	self
https://bugzilla.suse.com/1276925	self
https://bugzilla.suse.com/1276927	self
https://bugzilla.suse.com/1276934	self
https://bugzilla.suse.com/1277064	self
https://bugzilla.suse.com/1277070	self
https://bugzilla.suse.com/1277098	self
https://bugzilla.suse.com/1277109	self
https://bugzilla.suse.com/1277122	self
https://bugzilla.suse.com/1277128	self
https://bugzilla.suse.com/1277129	self
https://bugzilla.suse.com/1277143	self
https://bugzilla.suse.com/1277149	self
https://bugzilla.suse.com/1277215	self
https://bugzilla.suse.com/1277231	self
https://bugzilla.suse.com/1277245	self
https://bugzilla.suse.com/1277249	self
https://bugzilla.suse.com/1277265	self
https://bugzilla.suse.com/1277268	self
https://bugzilla.suse.com/1277272	self
https://bugzilla.suse.com/1277321	self
https://bugzilla.suse.com/1277349	self
https://bugzilla.suse.com/1277392	self
https://bugzilla.suse.com/1277396	self
https://bugzilla.suse.com/1277405	self
https://bugzilla.suse.com/1277410	self
https://bugzilla.suse.com/1277485	self
https://bugzilla.suse.com/1277489	self
https://bugzilla.suse.com/1277493	self
https://bugzilla.suse.com/1277544	self
https://bugzilla.suse.com/1277555	self
https://bugzilla.suse.com/1277556	self
https://bugzilla.suse.com/1277590	self
https://bugzilla.suse.com/1277656	self
https://bugzilla.suse.com/1277674	self
https://bugzilla.suse.com/1277766	self
https://bugzilla.suse.com/1277781	self
https://bugzilla.suse.com/1277784	self
https://bugzilla.suse.com/1277792	self
https://bugzilla.suse.com/1277820	self
https://bugzilla.suse.com/1277822	self
https://bugzilla.suse.com/1277857	self
https://bugzilla.suse.com/1277881	self
https://bugzilla.suse.com/1277892	self
https://bugzilla.suse.com/1277896	self
https://bugzilla.suse.com/1277900	self
https://bugzilla.suse.com/1277904	self
https://bugzilla.suse.com/1277906	self
https://bugzilla.suse.com/1277918	self
https://bugzilla.suse.com/1278035	self
https://bugzilla.suse.com/1278056	self
https://bugzilla.suse.com/1278067	self
https://bugzilla.suse.com/1278094	self
https://bugzilla.suse.com/1278100	self
https://bugzilla.suse.com/1278178	self
https://bugzilla.suse.com/1278180	self
https://bugzilla.suse.com/1278191	self
https://bugzilla.suse.com/1278210	self
https://bugzilla.suse.com/1278211	self
https://bugzilla.suse.com/1278247	self
https://bugzilla.suse.com/1278310	self
https://bugzilla.suse.com/1278311	self
https://bugzilla.suse.com/1278314	self
https://bugzilla.suse.com/1278315	self
https://bugzilla.suse.com/1278416	self
https://bugzilla.suse.com/1278716	self
https://bugzilla.suse.com/1279485	self
https://bugzilla.suse.com/1279525	self
https://bugzilla.suse.com/1279532	self
https://bugzilla.suse.com/1279535	self
https://bugzilla.suse.com/1279536	self
https://bugzilla.suse.com/1279619	self
https://bugzilla.suse.com/1279621	self
https://bugzilla.suse.com/1279627	self
https://bugzilla.suse.com/1279786	self
https://bugzilla.suse.com/1279799	self
https://bugzilla.suse.com/1279809	self
https://bugzilla.suse.com/1279812	self
https://bugzilla.suse.com/1279835	self
https://bugzilla.suse.com/1279850	self
https://bugzilla.suse.com/1280139	self
https://bugzilla.suse.com/1280184	self
https://bugzilla.suse.com/1280223	self
https://bugzilla.suse.com/1280230	self
https://bugzilla.suse.com/1280237	self
https://bugzilla.suse.com/1280243	self
https://bugzilla.suse.com/1280263	self
https://bugzilla.suse.com/1280338	self
https://bugzilla.suse.com/1280375	self
https://bugzilla.suse.com/1280379	self
https://bugzilla.suse.com/1280449	self
https://bugzilla.suse.com/1280451	self
https://bugzilla.suse.com/1280468	self
https://bugzilla.suse.com/1280508	self
https://bugzilla.suse.com/1280509	self
https://bugzilla.suse.com/1280546	self
https://bugzilla.suse.com/1280551	self
https://bugzilla.suse.com/1280577	self
https://bugzilla.suse.com/1280581	self
https://bugzilla.suse.com/1280716	self
https://bugzilla.suse.com/1280717	self
https://bugzilla.suse.com/1280719	self
https://bugzilla.suse.com/1280727	self
https://bugzilla.suse.com/1280733	self
https://bugzilla.suse.com/1280758	self
https://bugzilla.suse.com/1280786	self
https://bugzilla.suse.com/1281054	self
https://bugzilla.suse.com/1281176	self
https://bugzilla.suse.com/1281224	self
https://bugzilla.suse.com/1281226	self
https://bugzilla.suse.com/1281229	self
https://bugzilla.suse.com/1281352	self
https://bugzilla.suse.com/1281358	self
https://bugzilla.suse.com/1281359	self
https://bugzilla.suse.com/1281397	self
https://bugzilla.suse.com/1281408	self
https://bugzilla.suse.com/1281429	self
https://bugzilla.suse.com/1281546	self
https://bugzilla.suse.com/1281599	self
https://bugzilla.suse.com/1281680	self
https://bugzilla.suse.com/1281708	self
https://bugzilla.suse.com/1281732	self
https://bugzilla.suse.com/1281738	self
https://bugzilla.suse.com/1281778	self
https://bugzilla.suse.com/1281808	self
https://bugzilla.suse.com/1281955	self
https://bugzilla.suse.com/1281973	self
https://bugzilla.suse.com/1282050	self
https://bugzilla.suse.com/1282110	self
https://bugzilla.suse.com/1282113	self
https://bugzilla.suse.com/1282143	self
https://bugzilla.suse.com/1282270	self
https://bugzilla.suse.com/1282284	self
https://bugzilla.suse.com/1282803	self
https://bugzilla.suse.com/1282812	self
https://bugzilla.suse.com/1282881	self
https://bugzilla.suse.com/1282906	self
https://bugzilla.suse.com/1283154	self
https://bugzilla.suse.com/1283163	self
https://bugzilla.suse.com/1283201	self
https://bugzilla.suse.com/1283935	self
https://bugzilla.suse.com/1283973	self
https://www.suse.com/security/cve/CVE-2022-50645/	self
https://www.suse.com/security/cve/CVE-2026-100075/	self
https://www.suse.com/security/cve/CVE-2026-31663/	self
https://www.suse.com/security/cve/CVE-2026-43428/	self
https://www.suse.com/security/cve/CVE-2026-45834/	self
https://www.suse.com/security/cve/CVE-2026-45836/	self
https://www.suse.com/security/cve/CVE-2026-46044/	self
https://www.suse.com/security/cve/CVE-2026-46196/	self
https://www.suse.com/security/cve/CVE-2026-46304/	self
https://www.suse.com/security/cve/CVE-2026-46312/	self
https://www.suse.com/security/cve/CVE-2026-52975/	self
https://www.suse.com/security/cve/CVE-2026-53037/	self
https://www.suse.com/security/cve/CVE-2026-53237/	self
https://www.suse.com/security/cve/CVE-2026-53284/	self
https://www.suse.com/security/cve/CVE-2026-53385/	self
https://www.suse.com/security/cve/CVE-2026-53400/	self
https://www.suse.com/security/cve/CVE-2026-63897/	self
https://www.suse.com/security/cve/CVE-2026-63900/	self
https://www.suse.com/security/cve/CVE-2026-63902/	self
https://www.suse.com/security/cve/CVE-2026-63903/	self
https://www.suse.com/security/cve/CVE-2026-63904/	self
https://www.suse.com/security/cve/CVE-2026-63913/	self
https://www.suse.com/security/cve/CVE-2026-63942/	self
https://www.suse.com/security/cve/CVE-2026-63956/	self
https://www.suse.com/security/cve/CVE-2026-63957/	self
https://www.suse.com/security/cve/CVE-2026-63961/	self
https://www.suse.com/security/cve/CVE-2026-63963/	self
https://www.suse.com/security/cve/CVE-2026-64009/	self
https://www.suse.com/security/cve/CVE-2026-64014/	self
https://www.suse.com/security/cve/CVE-2026-64097/	self
https://www.suse.com/security/cve/CVE-2026-64191/	self
https://www.suse.com/security/cve/CVE-2026-64279/	self
https://www.suse.com/security/cve/CVE-2026-64299/	self
https://www.suse.com/security/cve/CVE-2026-64320/	self
https://www.suse.com/security/cve/CVE-2026-64342/	self
https://www.suse.com/security/cve/CVE-2026-64348/	self
https://www.suse.com/security/cve/CVE-2026-64372/	self
https://www.suse.com/security/cve/CVE-2026-64373/	self
https://www.suse.com/security/cve/CVE-2026-64375/	self
https://www.suse.com/security/cve/CVE-2026-64378/	self
https://www.suse.com/security/cve/CVE-2026-64388/	self
https://www.suse.com/security/cve/CVE-2026-64448/	self
https://www.suse.com/security/cve/CVE-2026-64496/	self
https://www.suse.com/security/cve/CVE-2026-64540/	self
https://www.suse.com/security/cve/CVE-2026-64580/	self
https://www.suse.com/security/cve/CVE-2026-68108/	self
https://www.suse.com/security/cve/CVE-2026-68162/	self
https://www.suse.com/security/cve/CVE-2026-68184/	self
https://www.suse.com/security/cve/CVE-2026-68343/	self
https://www.suse.com/security/cve/CVE-2026-68350/	self
https://www.suse.com/security/cve/CVE-2026-68365/	self
https://www.suse.com/security/cve/CVE-2026-68376/	self
https://www.suse.com/security/cve/CVE-2026-68377/	self
https://www.suse.com/security/cve/CVE-2026-68445/	self
https://www.suse.com/security/cve/CVE-2026-68477/	self
https://www.suse.com/security/cve/CVE-2026-68479/	self
https://www.suse.com/security/cve/CVE-2026-72019/	self
https://www.suse.com/security/cve/CVE-2026-72025/	self
https://www.suse.com/security/cve/CVE-2026-72051/	self
https://www.suse.com/security/cve/CVE-2026-72052/	self
https://www.suse.com/security/cve/CVE-2026-72053/	self
https://www.suse.com/security/cve/CVE-2026-72054/	self
https://www.suse.com/security/cve/CVE-2026-72061/	self
https://www.suse.com/security/cve/CVE-2026-72066/	self
https://www.suse.com/security/cve/CVE-2026-72098/	self
https://www.suse.com/security/cve/CVE-2026-72106/	self
https://www.suse.com/security/cve/CVE-2026-72107/	self
https://www.suse.com/security/cve/CVE-2026-72129/	self
https://www.suse.com/security/cve/CVE-2026-72157/	self
https://www.suse.com/security/cve/CVE-2026-72163/	self
https://www.suse.com/security/cve/CVE-2026-72166/	self
https://www.suse.com/security/cve/CVE-2026-72224/	self
https://www.suse.com/security/cve/CVE-2026-72243/	self
https://www.suse.com/security/cve/CVE-2026-72256/	self
https://www.suse.com/security/cve/CVE-2026-72321/	self
https://www.suse.com/security/cve/CVE-2026-72322/	self
https://www.suse.com/security/cve/CVE-2026-72348/	self
https://www.suse.com/security/cve/CVE-2026-72349/	self
https://www.suse.com/security/cve/CVE-2026-72350/	self
https://www.suse.com/security/cve/CVE-2026-72351/	self
https://www.suse.com/security/cve/CVE-2026-72383/	self
https://www.suse.com/security/cve/CVE-2026-72392/	self
https://www.suse.com/security/cve/CVE-2026-72398/	self
https://www.suse.com/security/cve/CVE-2026-72406/	self
https://www.suse.com/security/cve/CVE-2026-72413/	self
https://www.suse.com/security/cve/CVE-2026-72435/	self
https://www.suse.com/security/cve/CVE-2026-72436/	self
https://www.suse.com/security/cve/CVE-2026-72444/	self
https://www.suse.com/security/cve/CVE-2026-72447/	self
https://www.suse.com/security/cve/CVE-2026-72463/	self
https://www.suse.com/security/cve/CVE-2026-74267/	self
https://www.suse.com/security/cve/CVE-2026-74268/	self
https://www.suse.com/security/cve/CVE-2026-74276/	self
https://www.suse.com/security/cve/CVE-2026-74282/	self
https://www.suse.com/security/cve/CVE-2026-74283/	self
https://www.suse.com/security/cve/CVE-2026-74284/	self
https://www.suse.com/security/cve/CVE-2026-74288/	self
https://www.suse.com/security/cve/CVE-2026-74289/	self
https://www.suse.com/security/cve/CVE-2026-74290/	self
https://www.suse.com/security/cve/CVE-2026-74307/	self
https://www.suse.com/security/cve/CVE-2026-74317/	self
https://www.suse.com/security/cve/CVE-2026-74330/	self
https://www.suse.com/security/cve/CVE-2026-74349/	self
https://www.suse.com/security/cve/CVE-2026-74359/	self
https://www.suse.com/security/cve/CVE-2026-74384/	self
https://www.suse.com/security/cve/CVE-2026-74386/	self
https://www.suse.com/security/cve/CVE-2026-74398/	self
https://www.suse.com/security/cve/CVE-2026-74424/	self
https://www.suse.com/security/cve/CVE-2026-74443/	self
https://www.suse.com/security/cve/CVE-2026-74444/	self
https://www.suse.com/security/cve/CVE-2026-74453/	self
https://www.suse.com/security/cve/CVE-2026-74464/	self
https://www.suse.com/security/cve/CVE-2026-74469/	self
https://www.suse.com/security/cve/CVE-2026-74471/	self
https://www.suse.com/security/cve/CVE-2026-74473/	self
https://www.suse.com/security/cve/CVE-2026-74474/	self
https://www.suse.com/security/cve/CVE-2026-74475/	self
https://www.suse.com/security/cve/CVE-2026-74480/	self
https://www.suse.com/security/cve/CVE-2026-74485/	self
https://www.suse.com/security/cve/CVE-2026-74497/	self
https://www.suse.com/security/cve/CVE-2026-74498/	self
https://www.suse.com/security/cve/CVE-2026-74499/	self
https://www.suse.com/security/cve/CVE-2026-74512/	self
https://www.suse.com/security/cve/CVE-2026-74540/	self
https://www.suse.com/security/cve/CVE-2026-74585/	self
https://www.suse.com/security/cve/CVE-2026-74586/	self
https://www.suse.com/security/cve/CVE-2026-74588/	self
https://www.suse.com/security/cve/CVE-2026-74589/	self
https://www.suse.com/security/cve/CVE-2026-74592/	self
https://www.suse.com/security/cve/CVE-2026-74597/	self
https://www.suse.com/security/cve/CVE-2026-74598/	self
https://www.suse.com/security/cve/CVE-2026-74601/	self
https://www.suse.com/security/cve/CVE-2026-74609/	self
https://www.suse.com/security/cve/CVE-2026-74630/	self
https://www.suse.com/security/cve/CVE-2026-74641/	self
https://www.suse.com/security/cve/CVE-2026-74660/	self
https://www.suse.com/security/cve/CVE-2026-74663/	self
https://www.suse.com/security/cve/CVE-2026-74667/	self
https://www.suse.com/security/cve/CVE-2026-74671/	self
https://www.suse.com/security/cve/CVE-2026-74682/	self
https://www.suse.com/security/cve/CVE-2026-74688/	self
https://www.suse.com/security/cve/CVE-2026-74689/	self
https://www.suse.com/security/cve/CVE-2026-74691/	self
https://www.suse.com/security/cve/CVE-2026-74692/	self
https://www.suse.com/security/cve/CVE-2026-74701/	self
https://www.suse.com/security/cve/CVE-2026-74726/	self
https://www.suse.com/security/cve/CVE-2026-74739/	self
https://www.suse.com/security/cve/CVE-2026-74744/	self
https://www.suse.com/security/cve/CVE-2026-74752/	self
https://www.suse.com/security/cve/CVE-2026-80540/	self
https://www.suse.com/security/cve/CVE-2026-80557/	self
https://www.suse.com/security/cve/CVE-2026-80558/	self
https://www.suse.com/security/cve/CVE-2026-80561/	self
https://www.suse.com/security/cve/CVE-2026-80664/	self
https://www.suse.com/security/cve/CVE-2026-80681/	self
https://www.suse.com/security/cve/CVE-2026-80731/	self
https://www.suse.com/security/cve/CVE-2026-80747/	self
https://www.suse.com/security/cve/CVE-2026-80785/	self
https://www.suse.com/security/cve/CVE-2026-80789/	self
https://www.suse.com/security/cve/CVE-2026-80793/	self
https://www.suse.com/security/cve/CVE-2026-80798/	self
https://www.suse.com/security/cve/CVE-2026-80800/	self
https://www.suse.com/security/cve/CVE-2026-80829/	self
https://www.suse.com/security/cve/CVE-2026-80841/	self
https://www.suse.com/security/cve/CVE-2026-80844/	self
https://www.suse.com/security/cve/CVE-2026-80847/	self
https://www.suse.com/security/cve/CVE-2026-80852/	self
https://www.suse.com/security/cve/CVE-2026-80863/	self
https://www.suse.com/security/cve/CVE-2026-80864/	self
https://www.suse.com/security/cve/CVE-2026-80908/	self
https://www.suse.com/security/cve/CVE-2026-81000/	self
https://www.suse.com/security/cve/CVE-2026-81001/	self
https://www.suse.com/security/cve/CVE-2026-81005/	self
https://www.suse.com/security/cve/CVE-2026-89448/	self
https://www.suse.com/security/cve/CVE-2026-89477/	self
https://www.suse.com/security/cve/CVE-2026-89479/	self
https://www.suse.com/security/cve/CVE-2026-89480/	self
https://www.suse.com/security/cve/CVE-2026-89481/	self
https://www.suse.com/security/cve/CVE-2026-89510/	self
https://www.suse.com/security/cve/CVE-2026-89511/	self
https://www.suse.com/security/cve/CVE-2026-89524/	self
https://www.suse.com/security/cve/CVE-2026-89531/	self
https://www.suse.com/security/cve/CVE-2026-89538/	self
https://www.suse.com/security/cve/CVE-2026-89539/	self
https://www.suse.com/security/cve/CVE-2026-89540/	self
https://www.suse.com/security/cve/CVE-2026-89544/	self
https://www.suse.com/security/cve/CVE-2026-89548/	self
https://www.suse.com/security/cve/CVE-2026-89551/	self
https://www.suse.com/security/cve/CVE-2026-89569/	self
https://www.suse.com/security/cve/CVE-2026-89580/	self
https://www.suse.com/security/cve/CVE-2026-89644/	self
https://www.suse.com/security/cve/CVE-2026-89662/	self
https://www.suse.com/security/cve/CVE-2026-89673/	self
https://www.suse.com/security/cve/CVE-2026-89674/	self
https://www.suse.com/security/cve/CVE-2026-89686/	self
https://www.suse.com/security/cve/CVE-2026-89707/	self
https://www.suse.com/security/cve/CVE-2026-89752/	self
https://www.suse.com/security/cve/CVE-2026-89784/	self
https://www.suse.com/security/cve/CVE-2026-89789/	self
https://www.suse.com/security/cve/CVE-2026-89870/	self
https://www.suse.com/security/cve/CVE-2026-89927/	self
https://www.suse.com/security/cve/CVE-2026-89929/	self
https://www.suse.com/security/cve/CVE-2026-89930/	self
https://www.suse.com/security/cve/CVE-2026-89968/	self
https://www.suse.com/security/cve/CVE-2026-90088/	self
https://www.suse.com/security/cve/CVE-2026-90104/	self
https://www.suse.com/security/cve/CVE-2026-90149/	self
https://www.suse.com/security/cve/CVE-2026-90151/	self
https://www.suse.com/security/cve/CVE-2026-90203/	self
https://www.suse.com/security/cve/CVE-2026-90223/	self
https://www.suse.com/security/cve/CVE-2026-90259/	self
https://www.suse.com/security/cve/CVE-2026-90293/	self
https://www.suse.com/security/cve/CVE-2026-90294/	self
https://www.suse.com/security/cve/CVE-2026-90307/	self
https://www.suse.com/security/cve/CVE-2026-90413/	self
https://www.suse.com/security/cve/CVE-2026-90414/	self
https://www.suse.com/security/cve/CVE-2026-90415/	self
https://www.suse.com/security/cve/CVE-2026-90417/	self
https://www.suse.com/security/cve/CVE-2026-92525/	self
https://www.suse.com/security/cve/CVE-2026-93104/	self
https://www.suse.com/security/cve/CVE-2026-93108/	self
https://www.suse.com/security/cve/CVE-2026-93264/	self
https://www.suse.com/security/cve/CVE-2026-93782/	self
https://www.suse.com/security/cve/CVE-2026-93794/	self
https://www.suse.com/security/cve/CVE-2026-93829/	self
https://www.suse.com/security/cve/CVE-2026-97557/	self
https://www.suse.com/security/cve/CVE-2026-97940/	self
https://www.suse.com/security/cve/CVE-2026-98080/	self
https://www.suse.com/security/cve/CVE-2026-98164/	self
https://www.suse.com/security/cve/CVE-2022-50645	external
https://bugzilla.suse.com/1254633	external
https://www.suse.com/security/cve/CVE-2026-100075	external
https://bugzilla.suse.com/1282881	external
https://bugzilla.suse.com/1282882	external
https://www.suse.com/security/cve/CVE-2026-31663	external
https://bugzilla.suse.com/1263133	external
https://www.suse.com/security/cve/CVE-2026-43428	external
https://bugzilla.suse.com/1265138	external
https://www.suse.com/security/cve/CVE-2026-45834	external
https://bugzilla.suse.com/1266412	external
https://www.suse.com/security/cve/CVE-2026-45836	external
https://bugzilla.suse.com/1266410	external
https://www.suse.com/security/cve/CVE-2026-46044	external
https://bugzilla.suse.com/1267464	external
https://www.suse.com/security/cve/CVE-2026-46196	external
https://bugzilla.suse.com/1266848	external
https://www.suse.com/security/cve/CVE-2026-46304	external
https://bugzilla.suse.com/1267985	external
https://www.suse.com/security/cve/CVE-2026-46312	external
https://bugzilla.suse.com/1267990	external
https://www.suse.com/security/cve/CVE-2026-52975	external
https://bugzilla.suse.com/1269234	external
https://www.suse.com/security/cve/CVE-2026-53037	external
https://bugzilla.suse.com/1269081	external
https://www.suse.com/security/cve/CVE-2026-53237	external
https://bugzilla.suse.com/1269131	external
https://www.suse.com/security/cve/CVE-2026-53284	external
https://bugzilla.suse.com/1269816	external
https://www.suse.com/security/cve/CVE-2026-53385	external
https://bugzilla.suse.com/1271834	external
https://www.suse.com/security/cve/CVE-2026-53400	external
https://bugzilla.suse.com/1271906	external
https://bugzilla.suse.com/1271907	external
https://www.suse.com/security/cve/CVE-2026-63897	external
https://bugzilla.suse.com/1272642	external
https://www.suse.com/security/cve/CVE-2026-63900	external
https://bugzilla.suse.com/1272499	external
https://www.suse.com/security/cve/CVE-2026-63902	external
https://bugzilla.suse.com/1272517	external
https://www.suse.com/security/cve/CVE-2026-63903	external
https://bugzilla.suse.com/1272522	external
https://www.suse.com/security/cve/CVE-2026-63904	external
https://bugzilla.suse.com/1272523	external
https://www.suse.com/security/cve/CVE-2026-63913	external
https://bugzilla.suse.com/1272890	external
https://www.suse.com/security/cve/CVE-2026-63942	external
https://bugzilla.suse.com/1273023	external
https://www.suse.com/security/cve/CVE-2026-63956	external
https://bugzilla.suse.com/1272473	external
https://www.suse.com/security/cve/CVE-2026-63957	external
https://bugzilla.suse.com/1272472	external
https://www.suse.com/security/cve/CVE-2026-63961	external
https://bugzilla.suse.com/1272480	external
https://www.suse.com/security/cve/CVE-2026-63963	external
https://bugzilla.suse.com/1272471	external
https://www.suse.com/security/cve/CVE-2026-64009	external
https://bugzilla.suse.com/1273879	external
https://www.suse.com/security/cve/CVE-2026-64014	external
https://bugzilla.suse.com/1273769	external
https://www.suse.com/security/cve/CVE-2026-64097	external
https://bugzilla.suse.com/1273480	external
https://www.suse.com/security/cve/CVE-2026-64191	external
https://bugzilla.suse.com/1272211	external
https://www.suse.com/security/cve/CVE-2026-64279	external
https://bugzilla.suse.com/1273953	external
https://www.suse.com/security/cve/CVE-2026-64299	external
https://bugzilla.suse.com/1273976	external
https://www.suse.com/security/cve/CVE-2026-64320	external
https://bugzilla.suse.com/1273420	external
https://bugzilla.suse.com/1273421	external
https://www.suse.com/security/cve/CVE-2026-64342	external
https://bugzilla.suse.com/1274011	external
https://www.suse.com/security/cve/CVE-2026-64348	external
https://bugzilla.suse.com/1274026	external
https://www.suse.com/security/cve/CVE-2026-64372	external
https://bugzilla.suse.com/1273889	external
https://www.suse.com/security/cve/CVE-2026-64373	external
https://bugzilla.suse.com/1273776	external
https://www.suse.com/security/cve/CVE-2026-64375	external
https://bugzilla.suse.com/1273868	external
https://www.suse.com/security/cve/CVE-2026-64378	external
https://bugzilla.suse.com/1273603	external
https://www.suse.com/security/cve/CVE-2026-64388	external
https://bugzilla.suse.com/1274061	external
https://www.suse.com/security/cve/CVE-2026-64448	external
https://bugzilla.suse.com/1273982	external
https://www.suse.com/security/cve/CVE-2026-64496	external
https://bugzilla.suse.com/1273600	external
https://www.suse.com/security/cve/CVE-2026-64540	external
https://bugzilla.suse.com/1273302	external
https://www.suse.com/security/cve/CVE-2026-64580	external
https://bugzilla.suse.com/1274037	external
https://bugzilla.suse.com/1274038	external
https://www.suse.com/security/cve/CVE-2026-68108	external
https://bugzilla.suse.com/1274869	external
https://www.suse.com/security/cve/CVE-2026-68162	external
https://bugzilla.suse.com/1274920	external
https://bugzilla.suse.com/1279855	external
https://www.suse.com/security/cve/CVE-2026-68184	external
https://bugzilla.suse.com/1274981	external
https://www.suse.com/security/cve/CVE-2026-68343	external
https://bugzilla.suse.com/1274629	external
https://www.suse.com/security/cve/CVE-2026-68350	external
https://bugzilla.suse.com/1274682	external
https://www.suse.com/security/cve/CVE-2026-68365	external
https://bugzilla.suse.com/1276257	external
https://www.suse.com/security/cve/CVE-2026-68376	external
https://bugzilla.suse.com/1274836	external
https://bugzilla.suse.com/1279854	external
https://www.suse.com/security/cve/CVE-2026-68377	external
https://bugzilla.suse.com/1274831	external
https://www.suse.com/security/cve/CVE-2026-68445	external
https://bugzilla.suse.com/1276277	external
https://bugzilla.suse.com/1276278	external
https://bugzilla.suse.com/1277850	external
https://www.suse.com/security/cve/CVE-2026-68477	external
https://bugzilla.suse.com/1275495	external
https://www.suse.com/security/cve/CVE-2026-68479	external
https://bugzilla.suse.com/1276585	external
https://www.suse.com/security/cve/CVE-2026-72019	external
https://bugzilla.suse.com/1276865	external
https://www.suse.com/security/cve/CVE-2026-72025	external
https://bugzilla.suse.com/1276923	external
https://www.suse.com/security/cve/CVE-2026-72051	external
https://bugzilla.suse.com/1276801	external
https://bugzilla.suse.com/1276805	external
https://www.suse.com/security/cve/CVE-2026-72052	external
https://bugzilla.suse.com/1276803	external
https://bugzilla.suse.com/1276806	external
https://www.suse.com/security/cve/CVE-2026-72053	external
https://bugzilla.suse.com/1276814	external
https://bugzilla.suse.com/1276822	external
https://www.suse.com/security/cve/CVE-2026-72054	external
https://bugzilla.suse.com/1276818	external
https://bugzilla.suse.com/1276823	external
https://www.suse.com/security/cve/CVE-2026-72061	external
https://bugzilla.suse.com/1277249	external
https://bugzilla.suse.com/1277418	external
https://www.suse.com/security/cve/CVE-2026-72066	external
https://bugzilla.suse.com/1277149	external
https://bugzilla.suse.com/1280094	external
https://www.suse.com/security/cve/CVE-2026-72098	external
https://bugzilla.suse.com/1275543	external
https://bugzilla.suse.com/1275544	external
https://www.suse.com/security/cve/CVE-2026-72106	external
https://bugzilla.suse.com/1277321	external
https://www.suse.com/security/cve/CVE-2026-72107	external
https://bugzilla.suse.com/1277349	external
https://www.suse.com/security/cve/CVE-2026-72129	external
https://bugzilla.suse.com/1275545	external
https://bugzilla.suse.com/1275546	external
https://www.suse.com/security/cve/CVE-2026-72157	external
https://bugzilla.suse.com/1277544	external
https://bugzilla.suse.com/1277545	external
https://www.suse.com/security/cve/CVE-2026-72163	external
https://bugzilla.suse.com/1277231	external
https://www.suse.com/security/cve/CVE-2026-72166	external
https://bugzilla.suse.com/1277556	external
https://www.suse.com/security/cve/CVE-2026-72224	external
https://bugzilla.suse.com/1277215	external
https://www.suse.com/security/cve/CVE-2026-72243	external
https://bugzilla.suse.com/1277656	external
https://www.suse.com/security/cve/CVE-2026-72256	external
https://bugzilla.suse.com/1277674	external
https://www.suse.com/security/cve/CVE-2026-72321	external
https://bugzilla.suse.com/1277143	external
https://www.suse.com/security/cve/CVE-2026-72322	external
https://bugzilla.suse.com/1275972	external
https://bugzilla.suse.com/1276284	external
https://www.suse.com/security/cve/CVE-2026-72348	external
https://bugzilla.suse.com/1276007	external
https://bugzilla.suse.com/1276008	external
https://www.suse.com/security/cve/CVE-2026-72349	external
https://bugzilla.suse.com/1277784	external
https://www.suse.com/security/cve/CVE-2026-72350	external
https://bugzilla.suse.com/1277822	external
https://www.suse.com/security/cve/CVE-2026-72351	external
https://bugzilla.suse.com/1276009	external
https://bugzilla.suse.com/1276010	external
https://www.suse.com/security/cve/CVE-2026-72383	external
https://bugzilla.suse.com/1277857	external
https://bugzilla.suse.com/1283919	external
https://www.suse.com/security/cve/CVE-2026-72392	external
https://bugzilla.suse.com/1277128	external
https://www.suse.com/security/cve/CVE-2026-72398	external
https://bugzilla.suse.com/1276381	external
https://bugzilla.suse.com/1276484	external
https://www.suse.com/security/cve/CVE-2026-72406	external
https://bugzilla.suse.com/1278035	external
https://www.suse.com/security/cve/CVE-2026-72413	external
https://bugzilla.suse.com/1277122	external
https://www.suse.com/security/cve/CVE-2026-72435	external
https://bugzilla.suse.com/1278056	external
https://www.suse.com/security/cve/CVE-2026-72436	external
https://bugzilla.suse.com/1277245	external
https://bugzilla.suse.com/1277246	external
https://www.suse.com/security/cve/CVE-2026-72444	external
https://bugzilla.suse.com/1278100	external
https://www.suse.com/security/cve/CVE-2026-72447	external
https://bugzilla.suse.com/1277109	external
https://www.suse.com/security/cve/CVE-2026-72463	external
https://bugzilla.suse.com/1277064	external
https://www.suse.com/security/cve/CVE-2026-74267	external
https://bugzilla.suse.com/1276519	external
https://bugzilla.suse.com/1276524	external
https://www.suse.com/security/cve/CVE-2026-74268	external
https://bugzilla.suse.com/1276508	external
https://www.suse.com/security/cve/CVE-2026-74276	external
https://bugzilla.suse.com/1276495	external
https://www.suse.com/security/cve/CVE-2026-74282	external
https://bugzilla.suse.com/1276473	external
https://www.suse.com/security/cve/CVE-2026-74283	external
https://bugzilla.suse.com/1276475	external
https://bugzilla.suse.com/1281133	external
https://www.suse.com/security/cve/CVE-2026-74284	external
https://bugzilla.suse.com/1276468	external
https://www.suse.com/security/cve/CVE-2026-74288	external
https://bugzilla.suse.com/1276460	external
https://www.suse.com/security/cve/CVE-2026-74289	external
https://bugzilla.suse.com/1276461	external
https://www.suse.com/security/cve/CVE-2026-74290	external
https://bugzilla.suse.com/1276462	external
https://www.suse.com/security/cve/CVE-2026-74307	external
https://bugzilla.suse.com/1276905	external
https://www.suse.com/security/cve/CVE-2026-74317	external
https://bugzilla.suse.com/1276866	external
https://www.suse.com/security/cve/CVE-2026-74330	external
https://bugzilla.suse.com/1277129	external
https://bugzilla.suse.com/1280275	external
https://www.suse.com/security/cve/CVE-2026-74349	external
https://bugzilla.suse.com/1278180	external
https://www.suse.com/security/cve/CVE-2026-74359	external
https://bugzilla.suse.com/1278067	external
https://www.suse.com/security/cve/CVE-2026-74384	external
https://bugzilla.suse.com/1277405	external
https://www.suse.com/security/cve/CVE-2026-74386	external
https://bugzilla.suse.com/1277098	external
https://www.suse.com/security/cve/CVE-2026-74398	external
https://bugzilla.suse.com/1277410	external
https://bugzilla.suse.com/1277411	external
https://www.suse.com/security/cve/CVE-2026-74424	external
https://bugzilla.suse.com/1276321	external
https://www.suse.com/security/cve/CVE-2026-74443	external
https://bugzilla.suse.com/1278210	external
https://bugzilla.suse.com/1278243	external
https://www.suse.com/security/cve/CVE-2026-74444	external
https://bugzilla.suse.com/1278211	external
https://bugzilla.suse.com/1280092	external
https://www.suse.com/security/cve/CVE-2026-74453	external
https://bugzilla.suse.com/1278178	external
https://bugzilla.suse.com/1280258	external
https://www.suse.com/security/cve/CVE-2026-74464	external
https://bugzilla.suse.com/1277070	external
https://www.suse.com/security/cve/CVE-2026-74469	external
https://bugzilla.suse.com/1277792	external
https://bugzilla.suse.com/1280693	external
https://bugzilla.suse.com/1282936	external
https://www.suse.com/security/cve/CVE-2026-74471	external
https://bugzilla.suse.com/1277781	external
https://www.suse.com/security/cve/CVE-2026-74473	external
https://bugzilla.suse.com/1276340	external
https://bugzilla.suse.com/1276356	external
https://www.suse.com/security/cve/CVE-2026-74474	external
https://bugzilla.suse.com/1276335	external
https://bugzilla.suse.com/1276359	external
https://www.suse.com/security/cve/CVE-2026-74475	external
https://bugzilla.suse.com/1276339	external
https://www.suse.com/security/cve/CVE-2026-74480	external
https://bugzilla.suse.com/1276353	external
https://bugzilla.suse.com/1279853	external
https://www.suse.com/security/cve/CVE-2026-74485	external
https://bugzilla.suse.com/1277892	external
https://www.suse.com/security/cve/CVE-2026-74497	external
https://bugzilla.suse.com/1275957	external
https://www.suse.com/security/cve/CVE-2026-74498	external
https://bugzilla.suse.com/1275958	external
https://www.suse.com/security/cve/CVE-2026-74499	external
https://bugzilla.suse.com/1275959	external
https://www.suse.com/security/cve/CVE-2026-74512	external
https://bugzilla.suse.com/1275954	external
https://www.suse.com/security/cve/CVE-2026-74540	external
https://bugzilla.suse.com/1275681	external
https://bugzilla.suse.com/1275699	external
https://www.suse.com/security/cve/CVE-2026-74585	external
https://bugzilla.suse.com/1277881	external
https://www.suse.com/security/cve/CVE-2026-74586	external
https://bugzilla.suse.com/1277820	external
https://www.suse.com/security/cve/CVE-2026-74588	external
https://bugzilla.suse.com/1277766	external
https://bugzilla.suse.com/1277768	external
https://www.suse.com/security/cve/CVE-2026-74589	external
https://bugzilla.suse.com/1277904	external
https://www.suse.com/security/cve/CVE-2026-74592	external
https://bugzilla.suse.com/1277900	external
https://www.suse.com/security/cve/CVE-2026-74597	external
https://bugzilla.suse.com/1277493	external
https://bugzilla.suse.com/1277495	external
https://www.suse.com/security/cve/CVE-2026-74598	external
https://bugzilla.suse.com/1277918	external
https://www.suse.com/security/cve/CVE-2026-74601	external
https://bugzilla.suse.com/1277896	external
https://www.suse.com/security/cve/CVE-2026-74609	external
https://bugzilla.suse.com/1277906	external
https://bugzilla.suse.com/1277907	external
https://www.suse.com/security/cve/CVE-2026-74630	external
https://bugzilla.suse.com/1278191	external
https://bugzilla.suse.com/1278192	external
https://www.suse.com/security/cve/CVE-2026-74641	external
https://bugzilla.suse.com/1278310	external
https://bugzilla.suse.com/1278312	external
https://www.suse.com/security/cve/CVE-2026-74660	external
https://bugzilla.suse.com/1277272	external
https://www.suse.com/security/cve/CVE-2026-74663	external
https://bugzilla.suse.com/1278311	external
https://www.suse.com/security/cve/CVE-2026-74667	external
https://bugzilla.suse.com/1277396	external
https://www.suse.com/security/cve/CVE-2026-74671	external
https://bugzilla.suse.com/1277392	external
https://www.suse.com/security/cve/CVE-2026-74682	external
https://bugzilla.suse.com/1276934	external
https://www.suse.com/security/cve/CVE-2026-74688	external
https://bugzilla.suse.com/1277489	external
https://bugzilla.suse.com/1277490	external
https://www.suse.com/security/cve/CVE-2026-74689	external
https://bugzilla.suse.com/1278314	external
https://www.suse.com/security/cve/CVE-2026-74691	external
https://bugzilla.suse.com/1276925	external
https://www.suse.com/security/cve/CVE-2026-74692	external
https://bugzilla.suse.com/1276927	external
https://www.suse.com/security/cve/CVE-2026-74701	external
https://bugzilla.suse.com/1276921	external
https://www.suse.com/security/cve/CVE-2026-74726	external
https://bugzilla.suse.com/1276565	external
https://www.suse.com/security/cve/CVE-2026-74739	external
https://bugzilla.suse.com/1278247	external
https://www.suse.com/security/cve/CVE-2026-74744	external
https://bugzilla.suse.com/1278094	external
https://bugzilla.suse.com/1278096	external
https://www.suse.com/security/cve/CVE-2026-74752	external
https://bugzilla.suse.com/1278315	external
https://bugzilla.suse.com/1278316	external
https://bugzilla.suse.com/1283110	external
https://www.suse.com/security/cve/CVE-2026-80540	external
https://bugzilla.suse.com/1277590	external
https://www.suse.com/security/cve/CVE-2026-80557	external
https://bugzilla.suse.com/1277268	external
https://www.suse.com/security/cve/CVE-2026-80558	external
https://bugzilla.suse.com/1277485	external
https://bugzilla.suse.com/1277486	external
https://www.suse.com/security/cve/CVE-2026-80561	external
https://bugzilla.suse.com/1277265	external
https://bugzilla.suse.com/1277266	external
https://www.suse.com/security/cve/CVE-2026-80664	external
https://bugzilla.suse.com/1277555	external
https://www.suse.com/security/cve/CVE-2026-80681	external
https://bugzilla.suse.com/1278416	external
https://www.suse.com/security/cve/CVE-2026-80731	external
https://bugzilla.suse.com/1278716	external
https://www.suse.com/security/cve/CVE-2026-80747	external
https://bugzilla.suse.com/1279536	external
https://www.suse.com/security/cve/CVE-2026-80785	external
https://bugzilla.suse.com/1279619	external
https://bugzilla.suse.com/1279620	external
https://www.suse.com/security/cve/CVE-2026-80789	external
https://bugzilla.suse.com/1279621	external
https://bugzilla.suse.com/1279622	external
https://www.suse.com/security/cve/CVE-2026-80793	external
https://bugzilla.suse.com/1279799	external
https://www.suse.com/security/cve/CVE-2026-80798	external
https://bugzilla.suse.com/1279809	external
https://www.suse.com/security/cve/CVE-2026-80800	external
https://bugzilla.suse.com/1279812	external
https://www.suse.com/security/cve/CVE-2026-80829	external
https://bugzilla.suse.com/1279485	external
https://www.suse.com/security/cve/CVE-2026-80841	external
https://bugzilla.suse.com/1279835	external
https://bugzilla.suse.com/1279836	external
https://www.suse.com/security/cve/CVE-2026-80844	external
https://bugzilla.suse.com/1279786	external
https://bugzilla.suse.com/1280695	external
https://bugzilla.suse.com/1282938	external
https://www.suse.com/security/cve/CVE-2026-80847	external
https://bugzilla.suse.com/1279850	external
https://www.suse.com/security/cve/CVE-2026-80852	external
https://bugzilla.suse.com/1279532	external
https://bugzilla.suse.com/1279534	external
https://www.suse.com/security/cve/CVE-2026-80863	external
https://bugzilla.suse.com/1279535	external
https://www.suse.com/security/cve/CVE-2026-80864	external
https://bugzilla.suse.com/1279525	external
https://www.suse.com/security/cve/CVE-2026-80908	external
https://bugzilla.suse.com/1279627	external
https://www.suse.com/security/cve/CVE-2026-81000	external
https://bugzilla.suse.com/1280263	external
https://bugzilla.suse.com/1280265	external
https://bugzilla.suse.com/1282946	external
https://www.suse.com/security/cve/CVE-2026-81001	external
https://bugzilla.suse.com/1280375	external
https://www.suse.com/security/cve/CVE-2026-81005	external
https://bugzilla.suse.com/1280230	external
https://www.suse.com/security/cve/CVE-2026-89448	external
https://bugzilla.suse.com/1280379	external
https://www.suse.com/security/cve/CVE-2026-89477	external
https://bugzilla.suse.com/1280338	external
https://www.suse.com/security/cve/CVE-2026-89479	external
https://bugzilla.suse.com/1280786	external
https://bugzilla.suse.com/1282909	external
https://www.suse.com/security/cve/CVE-2026-89480	external
https://bugzilla.suse.com/1280449	external
https://www.suse.com/security/cve/CVE-2026-89481	external
https://bugzilla.suse.com/1280451	external
https://bugzilla.suse.com/1280454	external
https://www.suse.com/security/cve/CVE-2026-89510	external
https://bugzilla.suse.com/1280551	external
https://www.suse.com/security/cve/CVE-2026-89511	external
https://bugzilla.suse.com/1280508	external
https://www.suse.com/security/cve/CVE-2026-89524	external
https://bugzilla.suse.com/1280581	external
https://www.suse.com/security/cve/CVE-2026-89531	external
https://bugzilla.suse.com/1281738	external
https://www.suse.com/security/cve/CVE-2026-89538	external
https://bugzilla.suse.com/1280716	external
https://www.suse.com/security/cve/CVE-2026-89539	external
https://bugzilla.suse.com/1280717	external
https://www.suse.com/security/cve/CVE-2026-89540	external
https://bugzilla.suse.com/1280719	external
https://www.suse.com/security/cve/CVE-2026-89544	external
https://bugzilla.suse.com/1280758	external
https://bugzilla.suse.com/1280760	external
https://www.suse.com/security/cve/CVE-2026-89548	external
https://bugzilla.suse.com/1280546	external
https://www.suse.com/security/cve/CVE-2026-89551	external
https://bugzilla.suse.com/1280727	external
https://bugzilla.suse.com/1280728	external
https://www.suse.com/security/cve/CVE-2026-89569	external
https://bugzilla.suse.com/1280733	external
https://bugzilla.suse.com/1280738	external
https://www.suse.com/security/cve/CVE-2026-89580	external
https://bugzilla.suse.com/1280577	external
https://www.suse.com/security/cve/CVE-2026-89644	external
https://bugzilla.suse.com/1281054	external
https://www.suse.com/security/cve/CVE-2026-89662	external
https://bugzilla.suse.com/1280509	external
https://www.suse.com/security/cve/CVE-2026-89673	external
https://bugzilla.suse.com/1280237	external
https://www.suse.com/security/cve/CVE-2026-89674	external
https://bugzilla.suse.com/1280243	external
https://bugzilla.suse.com/1280285	external
https://www.suse.com/security/cve/CVE-2026-89686	external
https://bugzilla.suse.com/1280184	external
https://www.suse.com/security/cve/CVE-2026-89707	external
https://bugzilla.suse.com/1280468	external
https://www.suse.com/security/cve/CVE-2026-89752	external
https://bugzilla.suse.com/1281176	external
https://www.suse.com/security/cve/CVE-2026-89784	external
https://bugzilla.suse.com/1281224	external
https://www.suse.com/security/cve/CVE-2026-89789	external
https://bugzilla.suse.com/1281226	external
https://www.suse.com/security/cve/CVE-2026-89870	external
https://bugzilla.suse.com/1281352	external
https://www.suse.com/security/cve/CVE-2026-89927	external
https://bugzilla.suse.com/1281429	external
https://www.suse.com/security/cve/CVE-2026-89929	external
https://bugzilla.suse.com/1281358	external
https://www.suse.com/security/cve/CVE-2026-89930	external
https://bugzilla.suse.com/1281359	external
https://www.suse.com/security/cve/CVE-2026-89968	external
https://bugzilla.suse.com/1281229	external
https://bugzilla.suse.com/1281235	external
https://www.suse.com/security/cve/CVE-2026-90088	external
https://bugzilla.suse.com/1281397	external
https://bugzilla.suse.com/1281398	external
https://www.suse.com/security/cve/CVE-2026-90104	external
https://bugzilla.suse.com/1281546	external
https://bugzilla.suse.com/1281585	external
https://www.suse.com/security/cve/CVE-2026-90149	external
https://bugzilla.suse.com/1281955	external
https://www.suse.com/security/cve/CVE-2026-90151	external
https://bugzilla.suse.com/1281599	external
https://www.suse.com/security/cve/CVE-2026-90203	external
https://bugzilla.suse.com/1281808	external
https://www.suse.com/security/cve/CVE-2026-90223	external
https://bugzilla.suse.com/1281708	external
https://www.suse.com/security/cve/CVE-2026-90259	external
https://bugzilla.suse.com/1281680	external
https://www.suse.com/security/cve/CVE-2026-90293	external
https://bugzilla.suse.com/1281778	external
https://www.suse.com/security/cve/CVE-2026-90294	external
https://bugzilla.suse.com/1281732	external
https://www.suse.com/security/cve/CVE-2026-90307	external
https://bugzilla.suse.com/1282050	external
https://www.suse.com/security/cve/CVE-2026-90413	external
https://bugzilla.suse.com/1282113	external
https://bugzilla.suse.com/1282118	external
https://www.suse.com/security/cve/CVE-2026-90414	external
https://bugzilla.suse.com/1282110	external
https://bugzilla.suse.com/1282111	external
https://www.suse.com/security/cve/CVE-2026-90415	external
https://bugzilla.suse.com/1282143	external
https://www.suse.com/security/cve/CVE-2026-90417	external
https://bugzilla.suse.com/1281973	external
https://www.suse.com/security/cve/CVE-2026-92525	external
https://bugzilla.suse.com/1282270	external
https://www.suse.com/security/cve/CVE-2026-93104	external
https://bugzilla.suse.com/1282284	external
https://bugzilla.suse.com/1282285	external
https://www.suse.com/security/cve/CVE-2026-93108	external
https://bugzilla.suse.com/1281408	external
https://www.suse.com/security/cve/CVE-2026-93264	external
https://bugzilla.suse.com/1282812	external
https://www.suse.com/security/cve/CVE-2026-93782	external
https://bugzilla.suse.com/1282906	external
https://bugzilla.suse.com/1282907	external
https://www.suse.com/security/cve/CVE-2026-93794	external
https://bugzilla.suse.com/1283154	external
https://www.suse.com/security/cve/CVE-2026-93829	external
https://bugzilla.suse.com/1282803	external
https://www.suse.com/security/cve/CVE-2026-97557	external
https://bugzilla.suse.com/1283201	external
https://www.suse.com/security/cve/CVE-2026-97940	external
https://bugzilla.suse.com/1283163	external
https://www.suse.com/security/cve/CVE-2026-98080	external
https://bugzilla.suse.com/1283973	external
https://www.suse.com/security/cve/CVE-2026-98164	external
https://bugzilla.suse.com/1283935	external

JSON

To clipboard

Loading 12.4 MB of JSON…

CVE-2022-50645 (GCVE-0-2022-50645)

Vulnerability from cvelistv5 – Published: 2025-12-09 00:00 – Updated: 2026-05-11 19:22

Title

EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()

Summary

In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() As the comment of pci_get_domain_bus_and_slot() says, it returns a PCI device with refcount incremented, so it doesn't need to call an extra pci_dev_get() in pci_get_dev_wrapper(), and the PCI device needs to be put in the error path.

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6666 records in the last 180 days details

References

6 references

URL	Tags
https://git.kernel.org/stable/c/e6e295a434d1c917a…
https://git.kernel.org/stable/c/2db53c7059167b63c…
https://git.kernel.org/stable/c/3e255dc21031cc1f3…
https://git.kernel.org/stable/c/1adb2583cdbd75f37…
https://git.kernel.org/stable/c/f29c2f57cdf7a5722…
https://git.kernel.org/stable/c/9c8921555907f4d72…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: d4dc89d069aab9074e2493a4c2f3969a0a0b91c1 , < e6e295a434d1c917a017980389aec88bf35cc81b (git) Affected: d4dc89d069aab9074e2493a4c2f3969a0a0b91c1 , < 2db53c7059167b63cc790366ef1a9e286e71980b (git) Affected: d4dc89d069aab9074e2493a4c2f3969a0a0b91c1 , < 3e255dc21031cc1f341584eb99a7f31598bf0be7 (git) Affected: d4dc89d069aab9074e2493a4c2f3969a0a0b91c1 , < 1adb2583cdbd75f379e3230a43a7412d373d499f (git) Affected: d4dc89d069aab9074e2493a4c2f3969a0a0b91c1 , < f29c2f57cdf7a57223dcd9fbaa2261faab5234b2 (git) Affected: d4dc89d069aab9074e2493a4c2f3969a0a0b91c1 , < 9c8921555907f4d723f01ed2d859b66f2d14f08e (git)
Linux	Linux	Affected: 5.1 Unaffected: 0 , < 5.1 (semver) Unaffected: 5.4.229 , ≤ 5.4.* (semver) Unaffected: 5.10.163 , ≤ 5.10.* (semver) Unaffected: 5.15.86 , ≤ 5.15.* (semver) Unaffected: 6.0.16 , ≤ 6.0.* (semver) Unaffected: 6.1.2 , ≤ 6.1.* (semver) Unaffected: 6.2 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/edac/i10nm_base.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e6e295a434d1c917a017980389aec88bf35cc81b",
              "status": "affected",
              "version": "d4dc89d069aab9074e2493a4c2f3969a0a0b91c1",
              "versionType": "git"
            },
            {
              "lessThan": "2db53c7059167b63cc790366ef1a9e286e71980b",
              "status": "affected",
              "version": "d4dc89d069aab9074e2493a4c2f3969a0a0b91c1",
              "versionType": "git"
            },
            {
              "lessThan": "3e255dc21031cc1f341584eb99a7f31598bf0be7",
              "status": "affected",
              "version": "d4dc89d069aab9074e2493a4c2f3969a0a0b91c1",
              "versionType": "git"
            },
            {
              "lessThan": "1adb2583cdbd75f379e3230a43a7412d373d499f",
              "status": "affected",
              "version": "d4dc89d069aab9074e2493a4c2f3969a0a0b91c1",
              "versionType": "git"
            },
            {
              "lessThan": "f29c2f57cdf7a57223dcd9fbaa2261faab5234b2",
              "status": "affected",
              "version": "d4dc89d069aab9074e2493a4c2f3969a0a0b91c1",
              "versionType": "git"
            },
            {
              "lessThan": "9c8921555907f4d723f01ed2d859b66f2d14f08e",
              "status": "affected",
              "version": "d4dc89d069aab9074e2493a4c2f3969a0a0b91c1",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/edac/i10nm_base.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.1"
            },
            {
              "lessThan": "5.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.163",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.229",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.163",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.86",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.16",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.2",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()\n\nAs the comment of pci_get_domain_bus_and_slot() says, it returns\na PCI device with refcount incremented, so it doesn\u0027t need to\ncall an extra pci_dev_get() in pci_get_dev_wrapper(), and the PCI\ndevice needs to be put in the error path."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:22:51.285Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e6e295a434d1c917a017980389aec88bf35cc81b"
        },
        {
          "url": "https://git.kernel.org/stable/c/2db53c7059167b63cc790366ef1a9e286e71980b"
        },
        {
          "url": "https://git.kernel.org/stable/c/3e255dc21031cc1f341584eb99a7f31598bf0be7"
        },
        {
          "url": "https://git.kernel.org/stable/c/1adb2583cdbd75f379e3230a43a7412d373d499f"
        },
        {
          "url": "https://git.kernel.org/stable/c/f29c2f57cdf7a57223dcd9fbaa2261faab5234b2"
        },
        {
          "url": "https://git.kernel.org/stable/c/9c8921555907f4d723f01ed2d859b66f2d14f08e"
        }
      ],
      "title": "EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50645",
    "datePublished": "2025-12-09T00:00:19.652Z",
    "dateReserved": "2025-12-08T23:57:43.371Z",
    "dateUpdated": "2026-05-11T19:22:51.285Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-100075 (GCVE-0-2026-100075)

Vulnerability from cvelistv5 – Published: 2026-09-25 13:06 – Updated: 2026-09-25 14:41

Title

RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters

Summary

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters When srpt_alloc_rw_ctxs() fails partway through a multi-buffer indirect descriptor, the unwind path destroys RDMA contexts but leaves stale n_rw_ctx and n_rdma values (and a dangling rw_ctxs pointer). Later sq_wr_avail accounting in srpt_queue_response() or srpt_write_pending() can then subtract the wrong number of send queue credits. Reset the counters and clear rw_ctxs after freeing the heap allocation before returning an error.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6666 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/stable/c/af00051dbc9f467d4…
https://git.kernel.org/stable/c/717ab4d0614e9446b…
https://git.kernel.org/stable/c/f1f2252da52cdda91…
https://git.kernel.org/stable/c/f65f45dfa1e6e2eaa…
https://git.kernel.org/stable/c/be1478849e1abb1e1…
https://git.kernel.org/stable/c/af073bd245180393b…
https://git.kernel.org/stable/c/bd02d644bd19a2795…
https://git.kernel.org/stable/c/b38f98e176050850f…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: b99f8e4d7bcd3bfbb3cd965918523299370d0cb2 , < af00051dbc9f467d4840ec709680660a3f8990fa (git) Affected: b99f8e4d7bcd3bfbb3cd965918523299370d0cb2 , < 717ab4d0614e9446bf8e2de6229464499e4008d6 (git) Affected: b99f8e4d7bcd3bfbb3cd965918523299370d0cb2 , < f1f2252da52cdda912da9993f39f58783b01b38f (git) Affected: b99f8e4d7bcd3bfbb3cd965918523299370d0cb2 , < f65f45dfa1e6e2eaa9e11c8b8ce8857799cb189d (git) Affected: b99f8e4d7bcd3bfbb3cd965918523299370d0cb2 , < be1478849e1abb1e12dc12e14cdbf800cc6fa99a (git) Affected: b99f8e4d7bcd3bfbb3cd965918523299370d0cb2 , < af073bd245180393bcb15d33d3990a6bdc32593a (git) Affected: b99f8e4d7bcd3bfbb3cd965918523299370d0cb2 , < bd02d644bd19a2795c018635d273d91e45d2bb95 (git) Affected: b99f8e4d7bcd3bfbb3cd965918523299370d0cb2 , < b38f98e176050850f41bb6415f3a71400056623e (git)
Linux	Linux	Affected: 4.7 Unaffected: 0 , < 4.7 (semver) Unaffected: 5.10.270 , ≤ 5.10.* (semver) Unaffected: 5.15.221 , ≤ 5.15.* (semver) Unaffected: 6.1.188 , ≤ 6.1.* (semver) Unaffected: 6.6.157 , ≤ 6.6.* (semver) Unaffected: 6.12.110 , ≤ 6.12.* (semver) Unaffected: 6.18.52 , ≤ 6.18.* (semver) Unaffected: 7.2.6 , ≤ 7.2.* (semver) Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/ulp/srpt/ib_srpt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "af00051dbc9f467d4840ec709680660a3f8990fa",
              "status": "affected",
              "version": "b99f8e4d7bcd3bfbb3cd965918523299370d0cb2",
              "versionType": "git"
            },
            {
              "lessThan": "717ab4d0614e9446bf8e2de6229464499e4008d6",
              "status": "affected",
              "version": "b99f8e4d7bcd3bfbb3cd965918523299370d0cb2",
              "versionType": "git"
            },
            {
              "lessThan": "f1f2252da52cdda912da9993f39f58783b01b38f",
              "status": "affected",
              "version": "b99f8e4d7bcd3bfbb3cd965918523299370d0cb2",
              "versionType": "git"
            },
            {
              "lessThan": "f65f45dfa1e6e2eaa9e11c8b8ce8857799cb189d",
              "status": "affected",
              "version": "b99f8e4d7bcd3bfbb3cd965918523299370d0cb2",
              "versionType": "git"
            },
            {
              "lessThan": "be1478849e1abb1e12dc12e14cdbf800cc6fa99a",
              "status": "affected",
              "version": "b99f8e4d7bcd3bfbb3cd965918523299370d0cb2",
              "versionType": "git"
            },
            {
              "lessThan": "af073bd245180393bcb15d33d3990a6bdc32593a",
              "status": "affected",
              "version": "b99f8e4d7bcd3bfbb3cd965918523299370d0cb2",
              "versionType": "git"
            },
            {
              "lessThan": "bd02d644bd19a2795c018635d273d91e45d2bb95",
              "status": "affected",
              "version": "b99f8e4d7bcd3bfbb3cd965918523299370d0cb2",
              "versionType": "git"
            },
            {
              "lessThan": "b38f98e176050850f41bb6415f3a71400056623e",
              "status": "affected",
              "version": "b99f8e4d7bcd3bfbb3cd965918523299370d0cb2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/ulp/srpt/ib_srpt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.7"
            },
            {
              "lessThan": "4.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.110",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.52",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.6",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3-rc1",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters\n\nWhen srpt_alloc_rw_ctxs() fails partway through a multi-buffer indirect\ndescriptor, the unwind path destroys RDMA contexts but leaves stale\nn_rw_ctx and n_rdma values (and a dangling rw_ctxs pointer). Later\nsq_wr_avail accounting in srpt_queue_response() or srpt_write_pending()\ncan then subtract the wrong number of send queue credits.\n\nReset the counters and clear rw_ctxs after freeing the heap\nallocation before returning an error."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The descriptor table that makes srpt_alloc_rw_ctxs() fail partway (idb-\u003edesc_list entries, table_desc.len, data_out/in_desc_cnt) comes in a remote initiator\u0027s SRP_CMD IU. The path is srpt_recv_done-\u003esrpt_handle_new_iu-\u003esrpt_handle_cmd-\u003esrpt_get_desc_tbl, and srpt also accepts logins through its RDMA-CM listener, which runs over routable RoCEv2 (UDP/IP).\nAC:L - The initiator picks the failure point: a small first descriptor followed by one with db-\u003elen=0xFFFFFFFF, whose scatterlist array is too big for sgl_alloc_order() to allocate. target_alloc_sgl() then fails at i\u003e=1 every time, leaving n_rw_ctx\u003e=1 and a dangling rw_ctxs. No race or outside state is needed.\nPR:N - SRP login (srpt_cm_req_recv) has no authentication. It only compares the initiator port ID that the initiator itself claims against the configured ACL, and the malformed SRP_CMD is parsed right after login.\nUI:N - The initiator sends the malformed SRP_CMD over its own channel, and no action by the target\u0027s administrator or any user is needed.\nS:U - The use-after-free and crash happen in the target host\u0027s kernel, which is the same security authority that runs ib_srpt. No VM or IOMMU boundary is crossed.\nC:H - In kernels from v4.7 up to v5.1, srpt_handle_cmd\u0027s release_ioctx path calls srpt_release_cmd(). Because n_rw_ctx is stale, srpt_free_rw_ctxs() reads the kfree\u0027d rw_ctxs array, a use-after-free on a slab object the attacker can reclaim.\nI:H - The same srpt_free_rw_ctxs() pass calls rdma_rw_ctx_destroy() and target_free_sgl() again on ctx-\u003esg lists the unwind loop already freed. That is a double free of the scatterlists and their data pages, a memory-corruption primitive.\nA:H - Each malformed SRP_CMD can be repeated at will and corrupts the heap (UAF plus double free) on older kernels. On newer kernels the busy path reached after this failure crashes the target, so any initiator can repeatedly take down the SRP target host."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-25T14:41:03.253Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/af00051dbc9f467d4840ec709680660a3f8990fa"
        },
        {
          "url": "https://git.kernel.org/stable/c/717ab4d0614e9446bf8e2de6229464499e4008d6"
        },
        {
          "url": "https://git.kernel.org/stable/c/f1f2252da52cdda912da9993f39f58783b01b38f"
        },
        {
          "url": "https://git.kernel.org/stable/c/f65f45dfa1e6e2eaa9e11c8b8ce8857799cb189d"
        },
        {
          "url": "https://git.kernel.org/stable/c/be1478849e1abb1e12dc12e14cdbf800cc6fa99a"
        },
        {
          "url": "https://git.kernel.org/stable/c/af073bd245180393bcb15d33d3990a6bdc32593a"
        },
        {
          "url": "https://git.kernel.org/stable/c/bd02d644bd19a2795c018635d273d91e45d2bb95"
        },
        {
          "url": "https://git.kernel.org/stable/c/b38f98e176050850f41bb6415f3a71400056623e"
        }
      ],
      "title": "RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-100075",
    "datePublished": "2026-09-25T13:06:47.399Z",
    "dateReserved": "2026-09-25T10:25:14.456Z",
    "dateUpdated": "2026-09-25T14:41:03.253Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-31663 (GCVE-0-2026-31663)

Vulnerability from cvelistv5 – Published: 2026-04-24 14:45 – Updated: 2026-09-18 12:04

Title

xfrm: hold dev ref until after transport_finish NF_HOOK

Summary

In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_HOOK After async crypto completes, xfrm_input_resume() calls dev_put() immediately on re-entry before the skb reaches transport_finish. The skb->dev pointer is then used inside NF_HOOK and its okfn, which can race with device teardown. Remove the dev_put from the async resumption entry and instead drop the reference after the NF_HOOK call in transport_finish, using a saved device pointer since NF_HOOK may consume the skb. This covers NF_DROP, NF_QUEUE and NF_STOLEN paths that skip the okfn. For non-transport exits (decaps, gro, drop) and secondary async return points, release the reference inline when async is set.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-826 - Premature Release of Resource During Expected Lifetime

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6666 records in the last 180 days details

References

11 references

URL	Tags
https://git.kernel.org/stable/c/4236c30b437b80f67…
https://git.kernel.org/stable/c/0f451b43c88bf2b9c…
https://git.kernel.org/stable/c/5002beda5cac69d52…
https://git.kernel.org/stable/c/1c428b03840094410…
https://access.redhat.com/security/cve/CVE-2026-31663	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2461462	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:67471	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:68570	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:68531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:68532	vendor-advisoryx_refsource_REDHAT

Impacted products

9 products

Vendor	Product	Version
Linux	Linux	Affected: acf568ee859f098279eadf551612f103afdacb4e , < 4236c30b437b80f673b9e08c8fae38b8d471ac9e (git) Affected: acf568ee859f098279eadf551612f103afdacb4e , < 0f451b43c88bf2b9c038b414be580efee42e031b (git) Affected: acf568ee859f098279eadf551612f103afdacb4e , < 5002beda5cac69d522dc54da0d5d463ed9c963d2 (git) Affected: acf568ee859f098279eadf551612f103afdacb4e , < 1c428b03840094410c5fb6a5db30640486bbbfcb (git) Affected: 69895c5ea0ca2e8d7de1e6d36965d0ab9730787f (git) Affected: 833760100588acfb267dac4d6a02ab9931237739 (git) Affected: e095ecaec6d94aa2156cceb98a85d409b51190f3 (git) Affected: 3.2.100 , < 3.3 (semver) Affected: 3.16.55 , < 3.17 (semver) Affected: 4.14.24 , < 4.15 (semver)
Linux	Linux	Affected: 4.15 Unaffected: 0 , < 4.15 (semver) Unaffected: 6.12.94 , ≤ 6.12.* (semver) Unaffected: 6.18.23 , ≤ 6.18.* (semver) Unaffected: 6.19.13 , ≤ 6.19.* (semver) Unaffected: 7.0 , ≤ * (original_commit_for_fix)
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:6.12.0-211.55.1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.164.1.rt7.505.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::nfv
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.164.1.el8_10 , < * (rpm) cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-687.49.1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:6.12.0-211.55.1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8::nfv"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-553.164.1.rt7.505.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-553.164.1.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9",
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-687.49.1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-24T00:00:00.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the Linux kernel\u0027s `xfrm` (IP eXtensible FRamework) subsystem. This vulnerability involves a race condition where a network device\u0027s reference is released too early during packet processing after asynchronous cryptography. This premature release can lead to the system attempting to access a deallocated device, potentially causing a system crash (Denial of Service)."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Moderate"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-826",
                "description": "Premature Release of Resource During Expected Lifetime",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-18T12:04:43.702Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-31663"
          },
          {
            "name": "RHBZ#2461462",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461462"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31663.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67471"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:68570"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:68531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:68532"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:67471: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:68570: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:68531: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:68532: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-24T00:00:00.000Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-24T00:00:00.000Z",
            "value": "Made public."
          }
        ],
        "title": "kernel: xfrm: hold dev ref until after transport_finish NF_HOOK",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/xfrm4_input.c",
            "net/ipv6/xfrm6_input.c",
            "net/xfrm/xfrm_input.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4236c30b437b80f673b9e08c8fae38b8d471ac9e",
              "status": "affected",
              "version": "acf568ee859f098279eadf551612f103afdacb4e",
              "versionType": "git"
            },
            {
              "lessThan": "0f451b43c88bf2b9c038b414be580efee42e031b",
              "status": "affected",
              "version": "acf568ee859f098279eadf551612f103afdacb4e",
              "versionType": "git"
            },
            {
              "lessThan": "5002beda5cac69d522dc54da0d5d463ed9c963d2",
              "status": "affected",
              "version": "acf568ee859f098279eadf551612f103afdacb4e",
              "versionType": "git"
            },
            {
              "lessThan": "1c428b03840094410c5fb6a5db30640486bbbfcb",
              "status": "affected",
              "version": "acf568ee859f098279eadf551612f103afdacb4e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "69895c5ea0ca2e8d7de1e6d36965d0ab9730787f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "833760100588acfb267dac4d6a02ab9931237739",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "e095ecaec6d94aa2156cceb98a85d409b51190f3",
              "versionType": "git"
            },
            {
              "lessThan": "3.3",
              "status": "affected",
              "version": "3.2.100",
              "versionType": "semver"
            },
            {
              "lessThan": "3.17",
              "status": "affected",
              "version": "3.16.55",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.24",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/xfrm4_input.c",
            "net/ipv6/xfrm6_input.c",
            "net/xfrm/xfrm_input.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.15"
            },
            {
              "lessThan": "4.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.94",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.23",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.94",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.23",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.13",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.2.100",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.16.55",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.24",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: hold dev ref until after transport_finish NF_HOOK\n\nAfter async crypto completes, xfrm_input_resume() calls dev_put()\nimmediately on re-entry before the skb reaches transport_finish.\nThe skb-\u003edev pointer is then used inside NF_HOOK and its okfn,\nwhich can race with device teardown.\n\nRemove the dev_put from the async resumption entry and instead\ndrop the reference after the NF_HOOK call in transport_finish,\nusing a saved device pointer since NF_HOOK may consume the skb.\nThis covers NF_DROP, NF_QUEUE and NF_STOLEN paths that skip\nthe okfn.\n\nFor non-transport exits (decaps, gro, drop) and secondary\nasync return points, release the reference inline when\nasync is set."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The complete attacker-controlled path requires a local unprivileged user to create a user/net namespace, configure transport-mode XFRM state, send traffic, and tear down the namespace/device in parallel.\nAC:L - The race is attacker-controlled in the user-namespace scenario: the attacker controls packet injection and device/netns teardown and can repeat the sequence reliably.\nPR:L - XFRM and rtnetlink setup require CAP_NET_ADMIN, but these checks are against the network namespace user_ns and are reachable after unshare -Urn by an unprivileged local user.\nUI:N - No victim action is required once the attacker can run local code and create the namespace setup.\nS:U - The vulnerable component and impacted resource are the kernel itself; this is a standard kernel memory-safety issue rather than a VM or hardware boundary escape.\nC:H - This is a net_device use-after-free, and freed kernel heap objects can potentially be reclaimed and abused for kernel memory disclosure.\nI:H - Use-after-free in kernel networking code can potentially be shaped into control-flow or data-structure corruption, so high integrity impact is appropriate.\nA:H - The issue was reproduced as a KASAN slab-use-after-free in the async XFRM reinject path and can crash the kernel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:24:13.957Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4236c30b437b80f673b9e08c8fae38b8d471ac9e"
        },
        {
          "url": "https://git.kernel.org/stable/c/0f451b43c88bf2b9c038b414be580efee42e031b"
        },
        {
          "url": "https://git.kernel.org/stable/c/5002beda5cac69d522dc54da0d5d463ed9c963d2"
        },
        {
          "url": "https://git.kernel.org/stable/c/1c428b03840094410c5fb6a5db30640486bbbfcb"
        }
      ],
      "title": "xfrm: hold dev ref until after transport_finish NF_HOOK",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-31663",
    "datePublished": "2026-04-24T14:45:13.239Z",
    "dateReserved": "2026-03-09T15:48:24.129Z",
    "dateUpdated": "2026-09-18T12:04:43.702Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43428 (GCVE-0-2026-43428)

Vulnerability from cvelistv5 – Published: 2026-05-08 14:22 – Updated: 2026-05-11 22:24

Title

USB: core: Limit the length of unkillable synchronous timeouts

Summary

In the Linux kernel, the following vulnerability has been resolved: USB: core: Limit the length of unkillable synchronous timeouts The usb_control_msg(), usb_bulk_msg(), and usb_interrupt_msg() APIs in usbcore allow unlimited timeout durations. And since they use uninterruptible waits, this leaves open the possibility of hanging a task for an indefinitely long time, with no way to kill it short of unplugging the target device. To prevent this sort of problem, enforce a maximum limit on the length of these unkillable timeouts. The limit chosen here, somewhat arbitrarily, is 60 seconds. On many systems (although not all) this is short enough to avoid triggering the kernel's hung-task detector. In addition, clear up the ambiguity of negative timeout values by treating them the same as 0, i.e., using the maximum allowed timeout.

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6666 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/stable/c/4e86f5b79e62ded7e…
https://git.kernel.org/stable/c/06d2bbc4c66c6b0e8…
https://git.kernel.org/stable/c/6c62935670acdbb76…
https://git.kernel.org/stable/c/659c0c7d50a4b0f6a…
https://git.kernel.org/stable/c/24b31a227f679a942…
https://git.kernel.org/stable/c/64f3d75633aedc12b…
https://git.kernel.org/stable/c/2d34cb4d1d6283b4b…
https://git.kernel.org/stable/c/1015c27a5e1a63efa…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 4e86f5b79e62ded7e3c3ebd688cf5775e618148a (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 06d2bbc4c66c6b0e8a43728c4949026026a5be67 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 6c62935670acdbb7687ced20494923b66fbb0367 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 659c0c7d50a4b0f6aa197c4c098cfd91daf63862 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 24b31a227f679a942d820840a4dea7f0c09a387f (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 64f3d75633aedc12bdff220e9a4337177430bd9d (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 2d34cb4d1d6283b4be9c78f4a83ed6956d3069ec (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 1015c27a5e1a63efae2b18a9901494474b4d1dc3 (git)
Linux	Linux	Affected: 2.6.12 Unaffected: 0 , < 2.6.12 (semver) Unaffected: 5.10.253 , ≤ 5.10.* (semver) Unaffected: 5.15.203 , ≤ 5.15.* (semver) Unaffected: 6.1.167 , ≤ 6.1.* (semver) Unaffected: 6.6.130 , ≤ 6.6.* (semver) Unaffected: 6.12.78 , ≤ 6.12.* (semver) Unaffected: 6.18.19 , ≤ 6.18.* (semver) Unaffected: 6.19.9 , ≤ 6.19.* (semver) Unaffected: 7.0 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/core/message.c",
            "include/linux/usb.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4e86f5b79e62ded7e3c3ebd688cf5775e618148a",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "06d2bbc4c66c6b0e8a43728c4949026026a5be67",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "6c62935670acdbb7687ced20494923b66fbb0367",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "659c0c7d50a4b0f6aa197c4c098cfd91daf63862",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "24b31a227f679a942d820840a4dea7f0c09a387f",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "64f3d75633aedc12bdff220e9a4337177430bd9d",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "2d34cb4d1d6283b4be9c78f4a83ed6956d3069ec",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "1015c27a5e1a63efae2b18a9901494474b4d1dc3",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/core/message.c",
            "include/linux/usb.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.12"
            },
            {
              "lessThan": "2.6.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.253",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.19",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.9",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: core: Limit the length of unkillable synchronous timeouts\n\nThe usb_control_msg(), usb_bulk_msg(), and usb_interrupt_msg() APIs in\nusbcore allow unlimited timeout durations.  And since they use\nuninterruptible waits, this leaves open the possibility of hanging a\ntask for an indefinitely long time, with no way to kill it short of\nunplugging the target device.\n\nTo prevent this sort of problem, enforce a maximum limit on the length\nof these unkillable timeouts.  The limit chosen here, somewhat\narbitrarily, is 60 seconds.  On many systems (although not all) this\nis short enough to avoid triggering the kernel\u0027s hung-task detector.\n\nIn addition, clear up the ambiguity of negative timeout values by\ntreating them the same as 0, i.e., using the maximum allowed timeout."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T22:24:24.020Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4e86f5b79e62ded7e3c3ebd688cf5775e618148a"
        },
        {
          "url": "https://git.kernel.org/stable/c/06d2bbc4c66c6b0e8a43728c4949026026a5be67"
        },
        {
          "url": "https://git.kernel.org/stable/c/6c62935670acdbb7687ced20494923b66fbb0367"
        },
        {
          "url": "https://git.kernel.org/stable/c/659c0c7d50a4b0f6aa197c4c098cfd91daf63862"
        },
        {
          "url": "https://git.kernel.org/stable/c/24b31a227f679a942d820840a4dea7f0c09a387f"
        },
        {
          "url": "https://git.kernel.org/stable/c/64f3d75633aedc12bdff220e9a4337177430bd9d"
        },
        {
          "url": "https://git.kernel.org/stable/c/2d34cb4d1d6283b4be9c78f4a83ed6956d3069ec"
        },
        {
          "url": "https://git.kernel.org/stable/c/1015c27a5e1a63efae2b18a9901494474b4d1dc3"
        }
      ],
      "title": "USB: core: Limit the length of unkillable synchronous timeouts",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43428",
    "datePublished": "2026-05-08T14:22:01.027Z",
    "dateReserved": "2026-05-01T14:12:56.009Z",
    "dateUpdated": "2026-05-11T22:24:24.020Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45834 (GCVE-0-2026-45834)

Vulnerability from cvelistv5 – Published: 2026-05-26 16:14 – Updated: 2026-10-15 01:19

Title

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6666 records in the last 180 days details

References

9 references

URL	Tags
https://git.kernel.org/stable/c/1b1c0da227bf63479…
https://git.kernel.org/stable/c/85426e97dc72f2088…
https://git.kernel.org/stable/c/0c17c8832562b2aac…
https://git.kernel.org/stable/c/5105f3e6b2df619c6…
https://git.kernel.org/stable/c/c88c185ae0a106782…
https://git.kernel.org/stable/c/1810e42ff6716f320…
https://git.kernel.org/stable/c/a2dcf1a61d056aef1…
https://git.kernel.org/stable/c/2ff1a41a912de8517…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: 89bc500e41fc5b48e0573e6b0d927fc97b8951dc , < 1b1c0da227bf63479bac9982fc8d12df9aaea0fb (git) Affected: 89bc500e41fc5b48e0573e6b0d927fc97b8951dc , < 85426e97dc72f2088ba6d27e74cd58c3fbd43e31 (git) Affected: 89bc500e41fc5b48e0573e6b0d927fc97b8951dc , < 0c17c8832562b2aac288e89cefd0f46074f54bcb (git) Affected: 89bc500e41fc5b48e0573e6b0d927fc97b8951dc , < 5105f3e6b2df619c635b5f6a49fac131a36c7952 (git) Affected: 89bc500e41fc5b48e0573e6b0d927fc97b8951dc , < c88c185ae0a1067823661b220aeea613df2c127b (git) Affected: 89bc500e41fc5b48e0573e6b0d927fc97b8951dc , < 1810e42ff6716f320c7269d5850eca48b07b7427 (git) Affected: 89bc500e41fc5b48e0573e6b0d927fc97b8951dc , < a2dcf1a61d056aef15b63c6eae9441344d624389 (git) Affected: 89bc500e41fc5b48e0573e6b0d927fc97b8951dc , < 2ff1a41a912de8517b4482e946dd951b7d80edbf (git)
Linux	Linux	Affected: 3.1 Unaffected: 0 , < 3.1 (semver) Unaffected: 5.10.258 , ≤ 5.10.* (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.175 , ≤ 6.1.* (semver) Unaffected: 6.6.140 , ≤ 6.6.* (semver) Unaffected: 6.12.88 , ≤ 6.12.* (semver) Unaffected: 6.18.30 , ≤ 6.18.* (semver) Unaffected: 7.0.7 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T01:19:36.750Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/l2cap_sock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1b1c0da227bf63479bac9982fc8d12df9aaea0fb",
              "status": "affected",
              "version": "89bc500e41fc5b48e0573e6b0d927fc97b8951dc",
              "versionType": "git"
            },
            {
              "lessThan": "85426e97dc72f2088ba6d27e74cd58c3fbd43e31",
              "status": "affected",
              "version": "89bc500e41fc5b48e0573e6b0d927fc97b8951dc",
              "versionType": "git"
            },
            {
              "lessThan": "0c17c8832562b2aac288e89cefd0f46074f54bcb",
              "status": "affected",
              "version": "89bc500e41fc5b48e0573e6b0d927fc97b8951dc",
              "versionType": "git"
            },
            {
              "lessThan": "5105f3e6b2df619c635b5f6a49fac131a36c7952",
              "status": "affected",
              "version": "89bc500e41fc5b48e0573e6b0d927fc97b8951dc",
              "versionType": "git"
            },
            {
              "lessThan": "c88c185ae0a1067823661b220aeea613df2c127b",
              "status": "affected",
              "version": "89bc500e41fc5b48e0573e6b0d927fc97b8951dc",
              "versionType": "git"
            },
            {
              "lessThan": "1810e42ff6716f320c7269d5850eca48b07b7427",
              "status": "affected",
              "version": "89bc500e41fc5b48e0573e6b0d927fc97b8951dc",
              "versionType": "git"
            },
            {
              "lessThan": "a2dcf1a61d056aef15b63c6eae9441344d624389",
              "status": "affected",
              "version": "89bc500e41fc5b48e0573e6b0d927fc97b8951dc",
              "versionType": "git"
            },
            {
              "lessThan": "2ff1a41a912de8517b4482e946dd951b7d80edbf",
              "status": "affected",
              "version": "89bc500e41fc5b48e0573e6b0d927fc97b8951dc",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/l2cap_sock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.1"
            },
            {
              "lessThan": "3.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.88",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.88",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.30",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.7",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()\n\nAdd the same NULL guard already present in\nl2cap_sock_resume_cb() and l2cap_sock_ready_cb()."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-14T17:45:52.350Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1b1c0da227bf63479bac9982fc8d12df9aaea0fb"
        },
        {
          "url": "https://git.kernel.org/stable/c/85426e97dc72f2088ba6d27e74cd58c3fbd43e31"
        },
        {
          "url": "https://git.kernel.org/stable/c/0c17c8832562b2aac288e89cefd0f46074f54bcb"
        },
        {
          "url": "https://git.kernel.org/stable/c/5105f3e6b2df619c635b5f6a49fac131a36c7952"
        },
        {
          "url": "https://git.kernel.org/stable/c/c88c185ae0a1067823661b220aeea613df2c127b"
        },
        {
          "url": "https://git.kernel.org/stable/c/1810e42ff6716f320c7269d5850eca48b07b7427"
        },
        {
          "url": "https://git.kernel.org/stable/c/a2dcf1a61d056aef15b63c6eae9441344d624389"
        },
        {
          "url": "https://git.kernel.org/stable/c/2ff1a41a912de8517b4482e946dd951b7d80edbf"
        }
      ],
      "title": "Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-45834",
    "datePublished": "2026-05-26T16:14:11.198Z",
    "dateReserved": "2026-05-13T15:03:33.077Z",
    "dateUpdated": "2026-10-15T01:19:36.750Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45836 (GCVE-0-2026-45836)

Vulnerability from cvelistv5 – Published: 2026-05-26 16:14 – Updated: 2026-10-15 01:19

Title

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6666 records in the last 180 days details

References

9 references

URL	Tags
https://git.kernel.org/stable/c/fd072f833147b0bc1…
https://git.kernel.org/stable/c/6e8d1a2a677a81caa…
https://git.kernel.org/stable/c/e1863e7480feddb90…
https://git.kernel.org/stable/c/cf1fd517f892ded88…
https://git.kernel.org/stable/c/58dc5e3d8768e1219…
https://git.kernel.org/stable/c/32bd343803d4ba47c…
https://git.kernel.org/stable/c/a93d66907dd4d29b6…
https://git.kernel.org/stable/c/78a88d43dab8d23ae…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: 8d836d71e2223b8961b21112bb4ce89ef8231682 , < fd072f833147b0bc10c43a454624cb99d02f3fc7 (git) Affected: 8d836d71e2223b8961b21112bb4ce89ef8231682 , < 6e8d1a2a677a81caa60cf0aabd4217bd585fbba1 (git) Affected: 8d836d71e2223b8961b21112bb4ce89ef8231682 , < e1863e7480feddb90125d0dd5a1b572972d75908 (git) Affected: 8d836d71e2223b8961b21112bb4ce89ef8231682 , < cf1fd517f892ded88168df878f834b625133f86d (git) Affected: 8d836d71e2223b8961b21112bb4ce89ef8231682 , < 58dc5e3d8768e121907608e6e196a908512fb083 (git) Affected: 8d836d71e2223b8961b21112bb4ce89ef8231682 , < 32bd343803d4ba47cc516f9d5f037f01b855d767 (git) Affected: 8d836d71e2223b8961b21112bb4ce89ef8231682 , < a93d66907dd4d29b65c9797a93784bf61906d6d6 (git) Affected: 8d836d71e2223b8961b21112bb4ce89ef8231682 , < 78a88d43dab8d23aeef934ed8ce34d40e6b3d613 (git)
Linux	Linux	Affected: 3.13 Unaffected: 0 , < 3.13 (semver) Unaffected: 5.10.258 , ≤ 5.10.* (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.175 , ≤ 6.1.* (semver) Unaffected: 6.6.140 , ≤ 6.6.* (semver) Unaffected: 6.12.90 , ≤ 6.12.* (semver) Unaffected: 6.18.30 , ≤ 6.18.* (semver) Unaffected: 7.0.7 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T01:19:39.061Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/l2cap_sock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fd072f833147b0bc10c43a454624cb99d02f3fc7",
              "status": "affected",
              "version": "8d836d71e2223b8961b21112bb4ce89ef8231682",
              "versionType": "git"
            },
            {
              "lessThan": "6e8d1a2a677a81caa60cf0aabd4217bd585fbba1",
              "status": "affected",
              "version": "8d836d71e2223b8961b21112bb4ce89ef8231682",
              "versionType": "git"
            },
            {
              "lessThan": "e1863e7480feddb90125d0dd5a1b572972d75908",
              "status": "affected",
              "version": "8d836d71e2223b8961b21112bb4ce89ef8231682",
              "versionType": "git"
            },
            {
              "lessThan": "cf1fd517f892ded88168df878f834b625133f86d",
              "status": "affected",
              "version": "8d836d71e2223b8961b21112bb4ce89ef8231682",
              "versionType": "git"
            },
            {
              "lessThan": "58dc5e3d8768e121907608e6e196a908512fb083",
              "status": "affected",
              "version": "8d836d71e2223b8961b21112bb4ce89ef8231682",
              "versionType": "git"
            },
            {
              "lessThan": "32bd343803d4ba47cc516f9d5f037f01b855d767",
              "status": "affected",
              "version": "8d836d71e2223b8961b21112bb4ce89ef8231682",
              "versionType": "git"
            },
            {
              "lessThan": "a93d66907dd4d29b65c9797a93784bf61906d6d6",
              "status": "affected",
              "version": "8d836d71e2223b8961b21112bb4ce89ef8231682",
              "versionType": "git"
            },
            {
              "lessThan": "78a88d43dab8d23aeef934ed8ce34d40e6b3d613",
              "status": "affected",
              "version": "8d836d71e2223b8961b21112bb4ce89ef8231682",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/l2cap_sock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.13"
            },
            {
              "lessThan": "3.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.90",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "3.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "3.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "3.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "3.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.90",
                  "versionStartIncluding": "3.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.30",
                  "versionStartIncluding": "3.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.7",
                  "versionStartIncluding": "3.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "3.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()\n\nAdd the same NULL guard already present in\nl2cap_sock_resume_cb() and l2cap_sock_ready_cb()."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-14T17:45:57.724Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fd072f833147b0bc10c43a454624cb99d02f3fc7"
        },
        {
          "url": "https://git.kernel.org/stable/c/6e8d1a2a677a81caa60cf0aabd4217bd585fbba1"
        },
        {
          "url": "https://git.kernel.org/stable/c/e1863e7480feddb90125d0dd5a1b572972d75908"
        },
        {
          "url": "https://git.kernel.org/stable/c/cf1fd517f892ded88168df878f834b625133f86d"
        },
        {
          "url": "https://git.kernel.org/stable/c/58dc5e3d8768e121907608e6e196a908512fb083"
        },
        {
          "url": "https://git.kernel.org/stable/c/32bd343803d4ba47cc516f9d5f037f01b855d767"
        },
        {
          "url": "https://git.kernel.org/stable/c/a93d66907dd4d29b65c9797a93784bf61906d6d6"
        },
        {
          "url": "https://git.kernel.org/stable/c/78a88d43dab8d23aeef934ed8ce34d40e6b3d613"
        }
      ],
      "title": "Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-45836",
    "datePublished": "2026-05-26T16:14:13.568Z",
    "dateReserved": "2026-05-13T15:03:33.077Z",
    "dateUpdated": "2026-10-15T01:19:39.061Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46044 (GCVE-0-2026-46044)

Vulnerability from cvelistv5 – Published: 2026-05-27 12:56 – Updated: 2026-10-15 01:20

Title

ipmi:ssif: Clean up kthread on errors

Summary

In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on errors If an error occurs after the ssif kthread is created, but before the main IPMI code starts the ssif interface, the ssif kthread will not be stopped. So make sure the kthread is stopped on an error condition if it is running.

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6666 records in the last 180 days details

References

7 references

URL	Tags
https://git.kernel.org/stable/c/549607af66a0efdb4…
https://git.kernel.org/stable/c/f2d0a3ede5ebf404d…
https://git.kernel.org/stable/c/e662be2d0d05253d0…
https://git.kernel.org/stable/c/858bc8b9edb6eaf05…
https://git.kernel.org/stable/c/800febc637d1c1974…
https://git.kernel.org/stable/c/75c486cb1bcaa1a3e…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: 259307074bfcf1ff88016e12c68f057aee6cb694 , < 549607af66a0efdb41307ba6343eed31de8b133e (git) Affected: 259307074bfcf1ff88016e12c68f057aee6cb694 , < f2d0a3ede5ebf404d4c334a1f04ef439e0086857 (git) Affected: 259307074bfcf1ff88016e12c68f057aee6cb694 , < e662be2d0d05253d0fd7deda9771aa036c23393e (git) Affected: 259307074bfcf1ff88016e12c68f057aee6cb694 , < 858bc8b9edb6eaf0522900128bb9053e2df6b0f6 (git) Affected: 259307074bfcf1ff88016e12c68f057aee6cb694 , < 800febc637d1c1974b1e899dea8a07e115d60766 (git) Affected: 259307074bfcf1ff88016e12c68f057aee6cb694 , < 75c486cb1bcaa1a3ec3a6438498176a3a4998ae4 (git)
Linux	Linux	Affected: 3.19 Unaffected: 0 , < 3.19 (semver) Unaffected: 5.10.258 , ≤ 5.10.* (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.176 , ≤ 6.1.* (semver) Unaffected: 6.18.27 , ≤ 6.18.* (semver) Unaffected: 7.0.4 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T01:20:10.309Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/char/ipmi/ipmi_ssif.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "549607af66a0efdb41307ba6343eed31de8b133e",
              "status": "affected",
              "version": "259307074bfcf1ff88016e12c68f057aee6cb694",
              "versionType": "git"
            },
            {
              "lessThan": "f2d0a3ede5ebf404d4c334a1f04ef439e0086857",
              "status": "affected",
              "version": "259307074bfcf1ff88016e12c68f057aee6cb694",
              "versionType": "git"
            },
            {
              "lessThan": "e662be2d0d05253d0fd7deda9771aa036c23393e",
              "status": "affected",
              "version": "259307074bfcf1ff88016e12c68f057aee6cb694",
              "versionType": "git"
            },
            {
              "lessThan": "858bc8b9edb6eaf0522900128bb9053e2df6b0f6",
              "status": "affected",
              "version": "259307074bfcf1ff88016e12c68f057aee6cb694",
              "versionType": "git"
            },
            {
              "lessThan": "800febc637d1c1974b1e899dea8a07e115d60766",
              "status": "affected",
              "version": "259307074bfcf1ff88016e12c68f057aee6cb694",
              "versionType": "git"
            },
            {
              "lessThan": "75c486cb1bcaa1a3ec3a6438498176a3a4998ae4",
              "status": "affected",
              "version": "259307074bfcf1ff88016e12c68f057aee6cb694",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/char/ipmi/ipmi_ssif.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.19"
            },
            {
              "lessThan": "3.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.27",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.27",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.4",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi:ssif: Clean up kthread on errors\n\nIf an error occurs after the ssif kthread is created, but before the\nmain IPMI code starts the ssif interface, the ssif kthread will not\nbe stopped.\n\nSo make sure the kthread is stopped on an error condition if it is\nrunning."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-19T11:59:07.730Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/549607af66a0efdb41307ba6343eed31de8b133e"
        },
        {
          "url": "https://git.kernel.org/stable/c/f2d0a3ede5ebf404d4c334a1f04ef439e0086857"
        },
        {
          "url": "https://git.kernel.org/stable/c/e662be2d0d05253d0fd7deda9771aa036c23393e"
        },
        {
          "url": "https://git.kernel.org/stable/c/858bc8b9edb6eaf0522900128bb9053e2df6b0f6"
        },
        {
          "url": "https://git.kernel.org/stable/c/800febc637d1c1974b1e899dea8a07e115d60766"
        },
        {
          "url": "https://git.kernel.org/stable/c/75c486cb1bcaa1a3ec3a6438498176a3a4998ae4"
        }
      ],
      "title": "ipmi:ssif: Clean up kthread on errors",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46044",
    "datePublished": "2026-05-27T12:56:59.663Z",
    "dateReserved": "2026-05-13T15:03:33.094Z",
    "dateUpdated": "2026-10-15T01:20:10.309Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46196 (GCVE-0-2026-46196)

Vulnerability from cvelistv5 – Published: 2026-05-28 09:36 – Updated: 2026-10-15 01:21

Title

tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()

Summary

In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() When a tracepoint goes through the 0 -> 1 transition, tracepoint_add_func() invokes the subsystem's ext->regfunc() before attempting to install the new probe via func_add(). If func_add() then fails (for example, when allocate_probes() cannot allocate a new probe array under memory pressure and returns -ENOMEM), the function returns the error without calling the matching ext->unregfunc(), leaving the side effects of regfunc() behind with no installed probe to justify them. For syscall tracepoints this is particularly unpleasant: syscall_regfunc() bumps sys_tracepoint_refcount and sets SYSCALL_TRACEPOINT on every task. After a leaked failure, the refcount is stuck at a non-zero value with no consumer, and every task continues paying the syscall trace entry/exit overhead until reboot. Other subsystems providing regfunc()/unregfunc() pairs exhibit similarly scoped persistent state. Mirror the existing 1 -> 0 cleanup and call ext->unregfunc() in the func_add() error path, gated on the same condition used there so the unwind is symmetric with the registration.

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6666 records in the last 180 days details

References

9 references

URL	Tags
https://git.kernel.org/stable/c/5787052e5f69beb64…
https://git.kernel.org/stable/c/4f1756d043e56ea2e…
https://git.kernel.org/stable/c/36ff362235307af95…
https://git.kernel.org/stable/c/247ed8a969f981bfb…
https://git.kernel.org/stable/c/7bcadb3c2bc1cf606…
https://git.kernel.org/stable/c/2c5b8eeea006eb694…
https://git.kernel.org/stable/c/342829e042ac00f3d…
https://git.kernel.org/stable/c/fad217e16fded7f3c…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: 8cf868affdc459beee1a941df0cfaba1673740e3 , < 5787052e5f69beb649f3d6a80a8aa37d9e683e4e (git) Affected: 8cf868affdc459beee1a941df0cfaba1673740e3 , < 4f1756d043e56ea2e9a6c858fb290a0cf6fc2251 (git) Affected: 8cf868affdc459beee1a941df0cfaba1673740e3 , < 36ff362235307af95152d510b53c2d9b8773a342 (git) Affected: 8cf868affdc459beee1a941df0cfaba1673740e3 , < 247ed8a969f981bfba3112fd4bb441eaa6cef59c (git) Affected: 8cf868affdc459beee1a941df0cfaba1673740e3 , < 7bcadb3c2bc1cf60690e931aadd35fb7bd646a49 (git) Affected: 8cf868affdc459beee1a941df0cfaba1673740e3 , < 2c5b8eeea006eb694c81631cd5713d494b80be90 (git) Affected: 8cf868affdc459beee1a941df0cfaba1673740e3 , < 342829e042ac00f3d68d442ea92873fb6683f494 (git) Affected: 8cf868affdc459beee1a941df0cfaba1673740e3 , < fad217e16fded7f3c09f8637b0f6a224d58b5f2e (git)
Linux	Linux	Affected: 4.10 Unaffected: 0 , < 4.10 (semver) Unaffected: 5.10.259 , ≤ 5.10.* (semver) Unaffected: 5.15.210 , ≤ 5.15.* (semver) Unaffected: 6.1.176 , ≤ 6.1.* (semver) Unaffected: 6.6.140 , ≤ 6.6.* (semver) Unaffected: 6.12.88 , ≤ 6.12.* (semver) Unaffected: 6.18.30 , ≤ 6.18.* (semver) Unaffected: 7.0.7 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T01:21:17.317Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "kernel/tracepoint.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5787052e5f69beb649f3d6a80a8aa37d9e683e4e",
              "status": "affected",
              "version": "8cf868affdc459beee1a941df0cfaba1673740e3",
              "versionType": "git"
            },
            {
              "lessThan": "4f1756d043e56ea2e9a6c858fb290a0cf6fc2251",
              "status": "affected",
              "version": "8cf868affdc459beee1a941df0cfaba1673740e3",
              "versionType": "git"
            },
            {
              "lessThan": "36ff362235307af95152d510b53c2d9b8773a342",
              "status": "affected",
              "version": "8cf868affdc459beee1a941df0cfaba1673740e3",
              "versionType": "git"
            },
            {
              "lessThan": "247ed8a969f981bfba3112fd4bb441eaa6cef59c",
              "status": "affected",
              "version": "8cf868affdc459beee1a941df0cfaba1673740e3",
              "versionType": "git"
            },
            {
              "lessThan": "7bcadb3c2bc1cf60690e931aadd35fb7bd646a49",
              "status": "affected",
              "version": "8cf868affdc459beee1a941df0cfaba1673740e3",
              "versionType": "git"
            },
            {
              "lessThan": "2c5b8eeea006eb694c81631cd5713d494b80be90",
              "status": "affected",
              "version": "8cf868affdc459beee1a941df0cfaba1673740e3",
              "versionType": "git"
            },
            {
              "lessThan": "342829e042ac00f3d68d442ea92873fb6683f494",
              "status": "affected",
              "version": "8cf868affdc459beee1a941df0cfaba1673740e3",
              "versionType": "git"
            },
            {
              "lessThan": "fad217e16fded7f3c09f8637b0f6a224d58b5f2e",
              "status": "affected",
              "version": "8cf868affdc459beee1a941df0cfaba1673740e3",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "kernel/tracepoint.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.10"
            },
            {
              "lessThan": "4.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.259",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.210",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.88",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.259",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.210",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.88",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.30",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.7",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()\n\nWhen a tracepoint goes through the 0 -\u003e 1 transition, tracepoint_add_func()\ninvokes the subsystem\u0027s ext-\u003eregfunc() before attempting to install the\nnew probe via func_add(). If func_add() then fails (for example, when\nallocate_probes() cannot allocate a new probe array under memory pressure\nand returns -ENOMEM), the function returns the error without calling the\nmatching ext-\u003eunregfunc(), leaving the side effects of regfunc() behind\nwith no installed probe to justify them.\n\nFor syscall tracepoints this is particularly unpleasant: syscall_regfunc()\nbumps sys_tracepoint_refcount and sets SYSCALL_TRACEPOINT on every task.\nAfter a leaked failure, the refcount is stuck at a non-zero value with no\nconsumer, and every task continues paying the syscall trace entry/exit\noverhead until reboot. Other subsystems providing regfunc()/unregfunc()\npairs exhibit similarly scoped persistent state.\n\nMirror the existing 1 -\u003e 0 cleanup and call ext-\u003eunregfunc() in the\nfunc_add() error path, gated on the same condition used there so the\nunwind is symmetric with the registration."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-19T11:59:59.175Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/5787052e5f69beb649f3d6a80a8aa37d9e683e4e"
        },
        {
          "url": "https://git.kernel.org/stable/c/4f1756d043e56ea2e9a6c858fb290a0cf6fc2251"
        },
        {
          "url": "https://git.kernel.org/stable/c/36ff362235307af95152d510b53c2d9b8773a342"
        },
        {
          "url": "https://git.kernel.org/stable/c/247ed8a969f981bfba3112fd4bb441eaa6cef59c"
        },
        {
          "url": "https://git.kernel.org/stable/c/7bcadb3c2bc1cf60690e931aadd35fb7bd646a49"
        },
        {
          "url": "https://git.kernel.org/stable/c/2c5b8eeea006eb694c81631cd5713d494b80be90"
        },
        {
          "url": "https://git.kernel.org/stable/c/342829e042ac00f3d68d442ea92873fb6683f494"
        },
        {
          "url": "https://git.kernel.org/stable/c/fad217e16fded7f3c09f8637b0f6a224d58b5f2e"
        }
      ],
      "title": "tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46196",
    "datePublished": "2026-05-28T09:36:49.293Z",
    "dateReserved": "2026-05-13T15:03:33.104Z",
    "dateUpdated": "2026-10-15T01:21:17.317Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46304 (GCVE-0-2026-46304)

Vulnerability from cvelistv5 – Published: 2026-06-08 15:46 – Updated: 2026-10-15 01:21

Title

nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free

Summary

In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free nvmet_tcp_release_queue_work() runs on nvmet-wq and can drop the final controller reference through nvmet_cq_put(). If that triggers nvmet_ctrl_free(), the teardown path flushes ctrl->async_event_work on the same nvmet-wq. Call chain: nvmet_tcp_schedule_release_queue() kref_put(&queue->kref, nvmet_tcp_release_queue) nvmet_tcp_release_queue() queue_work(nvmet_wq, &queue->release_work) <--- nvmet_wq process_one_work() nvmet_tcp_release_queue_work() nvmet_cq_put(&queue->nvme_cq) nvmet_cq_destroy() nvmet_ctrl_put(cq->ctrl) nvmet_ctrl_free() flush_work(&ctrl->async_event_work) <--- nvmet_wq Previously Scheduled by :- nvmet_add_async_event queue_work(nvmet_wq, &ctrl->async_event_work); This trips lockdep with a possible recursive locking warning. [ 5223.015876] run blktests nvme/003 at 2026-04-07 20:53:55 [ 5223.061801] loop0: detected capacity change from 0 to 2097152 [ 5223.072206] nvmet: adding nsid 1 to subsystem blktests-subsystem-1 [ 5223.088368] nvmet_tcp: enabling port 0 (127.0.0.1:4420) [ 5223.126086] nvmet: Created discovery controller 1 for subsystem nqn.2014-08.org.nvmexpress.discovery for NQN nqn.2014-08.org.nvmexpress:uuid:0f01fb42-9f7f-4856-b0b3-51e60b8de349. [ 5223.128453] nvme nvme1: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", addr 127.0.0.1:4420, hostnqn: nqn.2014-08.org.nvmexpress:uuid:0f01fb42-9f7f-4856-b0b3-51e60b8de349 [ 5233.199447] nvme nvme1: Removing ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 5233.227718] ============================================ [ 5233.231283] WARNING: possible recursive locking detected [ 5233.234696] 7.0.0-rc3nvme+ #20 Tainted: G O N [ 5233.238434] -------------------------------------------- [ 5233.241852] kworker/u192:6/2413 is trying to acquire lock: [ 5233.245429] ffff888111632548 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90 [ 5233.251438] but task is already holding lock: [ 5233.255254] ffff888111632548 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x5cc/0x6e0 [ 5233.261125] other info that might help us debug this: [ 5233.265333] Possible unsafe locking scenario: [ 5233.269217] CPU0 [ 5233.270795] ---- [ 5233.272436] lock((wq_completion)nvmet-wq); [ 5233.275241] lock((wq_completion)nvmet-wq); [ 5233.278020] *** DEADLOCK *** [ 5233.281793] May be due to missing lock nesting notation [ 5233.286195] 3 locks held by kworker/u192:6/2413: [ 5233.289192] #0: ffff888111632548 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x5cc/0x6e0 [ 5233.294569] #1: ffffc9000e2a7e40 ((work_completion)(&queue->release_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x6e0 [ 5233.300128] #2: ffffffff82d7dc40 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530 [ 5233.304290] stack backtrace: [ 5233.306520] CPU: 4 UID: 0 PID: 2413 Comm: kworker/u192:6 Tainted: G O N 7.0.0-rc3nvme+ #20 PREEMPT(full) [ 5233.306524] Tainted: [O]=OOT_MODULE, [N]=TEST [ 5233.306525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014 [ 5233.306527] Workqueue: nvmet-wq nvmet_tcp_release_queue_work [nvmet_tcp] [ 5233.306532] Call Trace: [ 5233.306534] <TASK> [ 5233.306536] dump_stack_lvl+0x73/0xb0 [ 5233.306552] print_deadlock_bug+0x225/0x2f0 [ 5233.306556] __lock_acquire+0x13f0/0x2290 [ 5233.306563] lock_acquire+0xd0/0x300 [ 5233.306565] ? touch_wq_lockdep_map+0x26/0x90 [ 5233.306571] ? __flush_work+0x20b/0x530 [ 5233.306573] ? touch_wq_lockdep_map+0x26/0x90 [ 5233.306577] touch_wq_lockdep_map+0x3b/0x90 [ 5233.306580] ? touch_wq_lockdep_map+0x26/0x90 [ 52 ---truncated---

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6666 records in the last 180 days details

References

9 references

URL	Tags
https://git.kernel.org/stable/c/ae5b0cad163833e10…
https://git.kernel.org/stable/c/8d66ba89480ff098a…
https://git.kernel.org/stable/c/a696fbbd5240b4ac9…
https://git.kernel.org/stable/c/9a4d7222c0955b221…
https://git.kernel.org/stable/c/ee6e20c4bc9eae542…
https://git.kernel.org/stable/c/781f47d641432c26c…
https://git.kernel.org/stable/c/551f445a56a11a645…
https://git.kernel.org/stable/c/aade8abd8b868b6ff…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: 06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5 , < ae5b0cad163833e10b271e9becc05d81dae56e5f (git) Affected: 06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5 , < 8d66ba89480ff098a58d79003a505f383aa4e920 (git) Affected: 06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5 , < a696fbbd5240b4ac9b166f7bd4c550882ff543f1 (git) Affected: 06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5 , < 9a4d7222c0955b221e38bb66d10e6bccb672c8a1 (git) Affected: 06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5 , < ee6e20c4bc9eae542a0954a368449532383169d4 (git) Affected: 06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5 , < 781f47d641432c26c19625b2cdd7f40825097592 (git) Affected: 06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5 , < 551f445a56a11a6457550cddcf39c9ebb8bcacc6 (git) Affected: 06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5 , < aade8abd8b868b6ffa9697aadaea28ec7f65bee6 (git) Affected: 3976dd677e891c0b2c63d08028d445663539472c (git) Affected: 4.9.68 , < 4.10 (semver)
Linux	Linux	Affected: 4.10 Unaffected: 0 , < 4.10 (semver) Unaffected: 5.10.258 , ≤ 5.10.* (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.175 , ≤ 6.1.* (semver) Unaffected: 6.6.140 , ≤ 6.6.* (semver) Unaffected: 6.12.88 , ≤ 6.12.* (semver) Unaffected: 6.18.30 , ≤ 6.18.* (semver) Unaffected: 7.0.7 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T01:21:30.487Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/nvme/target/core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ae5b0cad163833e10b271e9becc05d81dae56e5f",
              "status": "affected",
              "version": "06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5",
              "versionType": "git"
            },
            {
              "lessThan": "8d66ba89480ff098a58d79003a505f383aa4e920",
              "status": "affected",
              "version": "06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5",
              "versionType": "git"
            },
            {
              "lessThan": "a696fbbd5240b4ac9b166f7bd4c550882ff543f1",
              "status": "affected",
              "version": "06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5",
              "versionType": "git"
            },
            {
              "lessThan": "9a4d7222c0955b221e38bb66d10e6bccb672c8a1",
              "status": "affected",
              "version": "06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5",
              "versionType": "git"
            },
            {
              "lessThan": "ee6e20c4bc9eae542a0954a368449532383169d4",
              "status": "affected",
              "version": "06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5",
              "versionType": "git"
            },
            {
              "lessThan": "781f47d641432c26c19625b2cdd7f40825097592",
              "status": "affected",
              "version": "06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5",
              "versionType": "git"
            },
            {
              "lessThan": "551f445a56a11a6457550cddcf39c9ebb8bcacc6",
              "status": "affected",
              "version": "06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5",
              "versionType": "git"
            },
            {
              "lessThan": "aade8abd8b868b6ffa9697aadaea28ec7f65bee6",
              "status": "affected",
              "version": "06406d81a2d7cfb8abcc4fa6cdfeb8e5897007c5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3976dd677e891c0b2c63d08028d445663539472c",
              "versionType": "git"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.68",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/nvme/target/core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.10"
            },
            {
              "lessThan": "4.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.88",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.88",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.30",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.7",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.68",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free\n\nnvmet_tcp_release_queue_work() runs on nvmet-wq and can drop the\nfinal controller reference through nvmet_cq_put(). If that triggers\nnvmet_ctrl_free(), the teardown path flushes ctrl-\u003easync_event_work on\nthe same nvmet-wq.\n\nCall chain:\n\n nvmet_tcp_schedule_release_queue()\n   kref_put(\u0026queue-\u003ekref, nvmet_tcp_release_queue)\n     nvmet_tcp_release_queue()\n       queue_work(nvmet_wq, \u0026queue-\u003erelease_work) \u003c--- nvmet_wq\n         process_one_work()\n           nvmet_tcp_release_queue_work()\n             nvmet_cq_put(\u0026queue-\u003envme_cq)\n               nvmet_cq_destroy()\n                 nvmet_ctrl_put(cq-\u003ectrl)\n                   nvmet_ctrl_free()\n                     flush_work(\u0026ctrl-\u003easync_event_work) \u003c--- nvmet_wq\n\n                      Previously Scheduled by :-\n\t\t        nvmet_add_async_event\n\t\t          queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work);\n\nThis trips lockdep with a possible recursive locking warning.\n\n[ 5223.015876] run blktests nvme/003 at 2026-04-07 20:53:55\n[ 5223.061801] loop0: detected capacity change from 0 to 2097152\n[ 5223.072206] nvmet: adding nsid 1 to subsystem blktests-subsystem-1\n[ 5223.088368] nvmet_tcp: enabling port 0 (127.0.0.1:4420)\n[ 5223.126086] nvmet: Created discovery controller 1 for subsystem nqn.2014-08.org.nvmexpress.discovery for NQN nqn.2014-08.org.nvmexpress:uuid:0f01fb42-9f7f-4856-b0b3-51e60b8de349.\n[ 5223.128453] nvme nvme1: new ctrl: NQN \"nqn.2014-08.org.nvmexpress.discovery\", addr 127.0.0.1:4420, hostnqn: nqn.2014-08.org.nvmexpress:uuid:0f01fb42-9f7f-4856-b0b3-51e60b8de349\n[ 5233.199447] nvme nvme1: Removing ctrl: NQN \"nqn.2014-08.org.nvmexpress.discovery\"\n\n[ 5233.227718] ============================================\n[ 5233.231283] WARNING: possible recursive locking detected\n[ 5233.234696] 7.0.0-rc3nvme+ #20 Tainted: G           O     N\n[ 5233.238434] --------------------------------------------\n[ 5233.241852] kworker/u192:6/2413 is trying to acquire lock:\n[ 5233.245429] ffff888111632548 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n[ 5233.251438]\n               but task is already holding lock:\n[ 5233.255254] ffff888111632548 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x5cc/0x6e0\n[ 5233.261125]\n               other info that might help us debug this:\n[ 5233.265333]  Possible unsafe locking scenario:\n\n[ 5233.269217]        CPU0\n[ 5233.270795]        ----\n[ 5233.272436]   lock((wq_completion)nvmet-wq);\n[ 5233.275241]   lock((wq_completion)nvmet-wq);\n[ 5233.278020]\n                *** DEADLOCK ***\n\n[ 5233.281793]  May be due to missing lock nesting notation\n\n[ 5233.286195] 3 locks held by kworker/u192:6/2413:\n[ 5233.289192]  #0: ffff888111632548 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x5cc/0x6e0\n[ 5233.294569]  #1: ffffc9000e2a7e40 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x6e0\n[ 5233.300128]  #2: ffffffff82d7dc40 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n[ 5233.304290]\n               stack backtrace:\n[ 5233.306520] CPU: 4 UID: 0 PID: 2413 Comm: kworker/u192:6 Tainted: G           O     N  7.0.0-rc3nvme+ #20 PREEMPT(full)\n[ 5233.306524] Tainted: [O]=OOT_MODULE, [N]=TEST\n[ 5233.306525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014\n[ 5233.306527] Workqueue: nvmet-wq nvmet_tcp_release_queue_work [nvmet_tcp]\n[ 5233.306532] Call Trace:\n[ 5233.306534]  \u003cTASK\u003e\n[ 5233.306536]  dump_stack_lvl+0x73/0xb0\n[ 5233.306552]  print_deadlock_bug+0x225/0x2f0\n[ 5233.306556]  __lock_acquire+0x13f0/0x2290\n[ 5233.306563]  lock_acquire+0xd0/0x300\n[ 5233.306565]  ? touch_wq_lockdep_map+0x26/0x90\n[ 5233.306571]  ? __flush_work+0x20b/0x530\n[ 5233.306573]  ? touch_wq_lockdep_map+0x26/0x90\n[ 5233.306577]  touch_wq_lockdep_map+0x3b/0x90\n[ 5233.306580]  ? touch_wq_lockdep_map+0x26/0x90\n[ 52\n---truncated---"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The bug is reached through the NVMe-oF TCP target (nvmet-tcp) disconnect/teardown path; remote peers connect over TCP and closing that connection drives `nvmet_tcp_release_queue_work()` on `nvmet-wq`, which can call the vulnerable `flush_work()` in `nvmet_ctrl_free()`.\nAC:L - An attacker fully controls both sides of the race by connecting, issuing an Async Event Request (which queues `async_event_work` on `nvmet-wq`), and then disconnecting to force controller teardown on the same workqueue.\nPR:N - Exploitation requires only network reachability to an exposed nvmet-tcp port; the discovery subsystem accepts any host NQN without Linux credentials, and no CAP_SYS_ADMIN or other local privileges are needed on the target.\nUI:N - The deadlock is triggered entirely through automated NVMe-oF protocol interaction (connect, admin command, disconnect) with no action required from a local user or administrator.\nS:U - Impact is confined to the kernel NVMe target subsystem (workqueue worker hang and nvmet service disruption); it does not cross a VM, container, or IOMMU security boundary.\nC:N - This is a recursive workqueue flush deadlock, not memory corruption; there is no out-of-bounds access, use-after-free, or information disclosure primitive.\nI:N - The flaw causes a worker to block during teardown but does not modify arbitrary kernel or user data and provides no write or code-execution primitive.\nA:H - Calling `flush_work()` on `nvmet-wq` from `nvmet_tcp_release_queue_work()` running on the same workqueue can permanently hang an nvmet worker (lockdep reports \"DEADLOCK\"), denying NVMe target service and stalling further nvmet workqueue processing."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:31:07.655Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ae5b0cad163833e10b271e9becc05d81dae56e5f"
        },
        {
          "url": "https://git.kernel.org/stable/c/8d66ba89480ff098a58d79003a505f383aa4e920"
        },
        {
          "url": "https://git.kernel.org/stable/c/a696fbbd5240b4ac9b166f7bd4c550882ff543f1"
        },
        {
          "url": "https://git.kernel.org/stable/c/9a4d7222c0955b221e38bb66d10e6bccb672c8a1"
        },
        {
          "url": "https://git.kernel.org/stable/c/ee6e20c4bc9eae542a0954a368449532383169d4"
        },
        {
          "url": "https://git.kernel.org/stable/c/781f47d641432c26c19625b2cdd7f40825097592"
        },
        {
          "url": "https://git.kernel.org/stable/c/551f445a56a11a6457550cddcf39c9ebb8bcacc6"
        },
        {
          "url": "https://git.kernel.org/stable/c/aade8abd8b868b6ffa9697aadaea28ec7f65bee6"
        }
      ],
      "title": "nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46304",
    "datePublished": "2026-06-08T15:46:31.747Z",
    "dateReserved": "2026-05-13T15:03:33.111Z",
    "dateUpdated": "2026-10-15T01:21:30.487Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46312 (GCVE-0-2026-46312)

Vulnerability from cvelistv5 – Published: 2026-06-08 15:50 – Updated: 2026-06-14 18:08

Title

media: videobuf2: Set vma_flags in vb2_dma_sg_mmap

Summary

In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap vb2_dma_contig sets VMA flags VM_DONTEXPAND and VM_DONTDUMP and I do not see a reason why vb2_dma_sg should behave differently. This avoids hitting `WARN_ON(!(vma->vm_flags & VM_DONTEXPAND));` in drm_gem_mmap_obj() during mmap() of an imported dma-buf from the out of tree Apple ISP camera capture driver which uses vb2_dma_sg_memops. gst-launch-1.0 v4l2src ! gtk4paintablesink [ 38.201528] ------------[ cut here ]------------ [ 38.202135] WARNING: CPU: 7 PID: 2362 at drivers/gpu/drm/drm_gem.c:1144 drm_gem_mmap_obj+0x1f8/0x210 [ 38.203278] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device uinput nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr bnep nls_ascii i2c_dev loop fuse dm_multipath nfnetlink brcmfmac_wcc hid_magicmouse hci_bcm4377 brcmfmac brcmutil bluetooth ecdh_generic cfg80211 ecc btrfs xor xor_neon rfkill hid_apple raid6_pq joydev aop_als apple_nvmem_spmi industrialio snd_soc_aop apple_z2 snd_soc_cs42l84 tps6598x snd_soc_tas2764 macsmc_reboot spi_nor macsmc_hwmon rtc_macsmc gpio_macsmc macsmc_power regmap_spmi macsmc_input dockchannel_hid panel_summit appledrm nvme_apple dwc3 snd_soc_macaudio drm_client_lib nvme_core phy_apple_atc hwmon apple_sart apple_dockchannel macsmc apple_rtkit_helper spmi_apple_controller aop apple_wdt mfd_core nvmem_apple_efuses pinctrl_apple_gpio apple_isp apple_dcp videobuf2_dma_sg mux_core spi_apple [ 38.203300] videobuf2_memops i2c_pasemi_platform snd_soc_apple_mca videobuf2_v4l2 videodev clk_apple_nco videobuf2_common snd_pcm_dmaengine adpdrm asahi apple_admac adpdrm_mipi drm_dma_helper pwm_apple i2c_pasemi_core drm_display_helper mc cec apple_dart ofpart apple_soc_cpufreq leds_pwm phram [ 38.217677] CPU: 7 UID: 1000 PID: 2362 Comm: gst-launch-1.0 Tainted: G W 6.17.6+ #asahi-dev PREEMPT(full) [ 38.219040] Tainted: [W]=WARN [ 38.219398] Hardware name: Apple MacBook Pro (13-inch, M2, 2022) (DT) [ 38.220213] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 38.221088] pc : drm_gem_mmap_obj+0x1f8/0x210 [ 38.221643] lr : drm_gem_mmap_obj+0x78/0x210 [ 38.222178] sp : ffffc0008dc678e0 [ 38.222579] x29: ffffc0008dc678e0 x28: 0000000000042a97 x27: ffff8000b701b480 [ 38.223465] x26: 00000000000000fb x25: ffffc0008dc67d20 x24: ffffc0008dc67968 [ 38.224402] x23: ffff8000e3ca5600 x22: ffff8000265b7800 x21: ffff80003000c0c0 [ 38.225279] x20: 0000000000000000 x19: ffff8000b68c5200 x18: ffffc0008dc67968 [ 38.226151] x17: 0000000000000000 x16: 0000000000000000 x15: ffffc000810a30a8 [ 38.227042] x14: 00007fff637effff x13: 00005555de91ffff x12: 00007fff63293fff [ 38.227942] x11: 0000000000000000 x10: ffff8000184ecf08 x9 : ffffc0007a1900c8 [ 38.228824] x8 : ffffc0008dc67968 x7 : 0000000000000012 x6 : ffffc0015cf1c000 [ 38.229703] x5 : ffffc0008dc676a0 x4 : ffffc00081a27dc0 x3 : 0000000000000038 [ 38.230607] x2 : 0000000000000003 x1 : 0000000000000003 x0 : 00000000100000fb [ 38.231488] Call trace: [ 38.231806] drm_gem_mmap_obj+0x1f8/0x210 (P) [ 38.232342] drm_gem_mmap+0x140/0x260 [ 38.232813] __mmap_region+0x488/0x9a0 [ 38.233277] mmap_region+0xd0/0x148 [ 38.233703] do_mmap+0x350/0x5c0 [ 38.234148] vm_mmap_pgoff+0x14c/0x200 [ 38.234612] ksys_mmap_pgoff+0x150/0x208 [ 38.235107] __arm64_sys_mmap+0x34/0x50 [ 38.235611] invoke_syscall+0x50/0x120 [ 38.236075] el0_svc_common.constprop.0+0x48/0xf0 [ 38.236680] do_el0_svc+0x24/0x38 [ 38.237113] el0_svc+0x38/0x168 [ 38.237507] el0t_64_sync_handler+0xa0/0xe8 [ 38.238034] el0t_64_sync+0x198/0x1a0 [ 38.238491] ---[ end trace 0000000000000000 ]--- There were discussions in [1] at the end of 2023 that mmap() on imported ---truncated---

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6666 records in the last 180 days details

References

5 references

URL	Tags
https://git.kernel.org/stable/c/feb17524aa4ec3377…
https://git.kernel.org/stable/c/1a1360264f699521e…
https://git.kernel.org/stable/c/21fade52ab9fb1336…
https://git.kernel.org/stable/c/b4cf91658a636618f…
https://git.kernel.org/stable/c/7254b31a13aaa0c2c…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 5ba3f757f0592ca001266b4a6214d0332349909c , < feb17524aa4ec337749344be0db52b88663e25ab (git) Affected: 5ba3f757f0592ca001266b4a6214d0332349909c , < 1a1360264f699521e001e7739009ee3ee3c6a4f5 (git) Affected: 5ba3f757f0592ca001266b4a6214d0332349909c , < 21fade52ab9fb13368a5709e60b0d9909197aeae (git) Affected: 5ba3f757f0592ca001266b4a6214d0332349909c , < b4cf91658a636618f1437beec971dec25dec28eb (git) Affected: 5ba3f757f0592ca001266b4a6214d0332349909c , < 7254b31a13aaa0c2c0f9ffbc335b718656117ff4 (git)
Linux	Linux	Affected: 2.6.39 Unaffected: 0 , < 2.6.39 (semver) Unaffected: 6.6.140 , ≤ 6.6.* (semver) Unaffected: 6.12.90 , ≤ 6.12.* (semver) Unaffected: 6.18.32 , ≤ 6.18.* (semver) Unaffected: 7.0.9 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/common/videobuf2/videobuf2-dma-sg.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "feb17524aa4ec337749344be0db52b88663e25ab",
              "status": "affected",
              "version": "5ba3f757f0592ca001266b4a6214d0332349909c",
              "versionType": "git"
            },
            {
              "lessThan": "1a1360264f699521e001e7739009ee3ee3c6a4f5",
              "status": "affected",
              "version": "5ba3f757f0592ca001266b4a6214d0332349909c",
              "versionType": "git"
            },
            {
              "lessThan": "21fade52ab9fb13368a5709e60b0d9909197aeae",
              "status": "affected",
              "version": "5ba3f757f0592ca001266b4a6214d0332349909c",
              "versionType": "git"
            },
            {
              "lessThan": "b4cf91658a636618f1437beec971dec25dec28eb",
              "status": "affected",
              "version": "5ba3f757f0592ca001266b4a6214d0332349909c",
              "versionType": "git"
            },
            {
              "lessThan": "7254b31a13aaa0c2c0f9ffbc335b718656117ff4",
              "status": "affected",
              "version": "5ba3f757f0592ca001266b4a6214d0332349909c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/common/videobuf2/videobuf2-dma-sg.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.39"
            },
            {
              "lessThan": "2.6.39",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.90",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.32",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.90",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.32",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.9",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: videobuf2: Set vma_flags in vb2_dma_sg_mmap\n\nvb2_dma_contig sets VMA flags VM_DONTEXPAND and VM_DONTDUMP and I do not\nsee a reason why vb2_dma_sg should behave differently. This avoids\nhitting `WARN_ON(!(vma-\u003evm_flags \u0026 VM_DONTEXPAND));` in\ndrm_gem_mmap_obj() during mmap() of an imported dma-buf from the out of\ntree Apple ISP camera capture driver which uses vb2_dma_sg_memops.\n\ngst-launch-1.0 v4l2src ! gtk4paintablesink\n\n[   38.201528] ------------[ cut here ]------------\n[   38.202135] WARNING: CPU: 7 PID: 2362 at drivers/gpu/drm/drm_gem.c:1144 drm_gem_mmap_obj+0x1f8/0x210\n[   38.203278] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer\nsnd_seq snd_seq_device uinput nf_conntrack_netbios_ns\nnf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib\nnft_reject_inet nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat\nnf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr bnep\nnls_ascii i2c_dev loop fuse dm_multipath nfnetlink brcmfmac_wcc\nhid_magicmouse hci_bcm4377 brcmfmac brcmutil bluetooth ecdh_generic\ncfg80211 ecc btrfs xor xor_neon rfkill hid_apple raid6_pq joydev\naop_als apple_nvmem_spmi industrialio snd_soc_aop apple_z2\nsnd_soc_cs42l84 tps6598x snd_soc_tas2764 macsmc_reboot spi_nor\nmacsmc_hwmon rtc_macsmc gpio_macsmc macsmc_power regmap_spmi\nmacsmc_input dockchannel_hid panel_summit appledrm nvme_apple dwc3\nsnd_soc_macaudio drm_client_lib nvme_core phy_apple_atc hwmon\napple_sart apple_dockchannel macsmc apple_rtkit_helper\nspmi_apple_controller aop apple_wdt mfd_core nvmem_apple_efuses\npinctrl_apple_gpio apple_isp apple_dcp videobuf2_dma_sg mux_core\nspi_apple\n[   38.203300]  videobuf2_memops i2c_pasemi_platform snd_soc_apple_mca videobuf2_v4l2 videodev clk_apple_nco videobuf2_common snd_pcm_dmaengine adpdrm asahi apple_admac adpdrm_mipi drm_dma_helper pwm_apple i2c_pasemi_core drm_display_helper mc cec apple_dart ofpart apple_soc_cpufreq leds_pwm phram\n[   38.217677] CPU: 7 UID: 1000 PID: 2362 Comm: gst-launch-1.0 Tainted: G        W           6.17.6+ #asahi-dev PREEMPT(full)\n[   38.219040] Tainted: [W]=WARN\n[   38.219398] Hardware name: Apple MacBook Pro (13-inch, M2, 2022) (DT)\n[   38.220213] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)\n[   38.221088] pc : drm_gem_mmap_obj+0x1f8/0x210\n[   38.221643] lr : drm_gem_mmap_obj+0x78/0x210\n[   38.222178] sp : ffffc0008dc678e0\n[   38.222579] x29: ffffc0008dc678e0 x28: 0000000000042a97 x27: ffff8000b701b480\n[   38.223465] x26: 00000000000000fb x25: ffffc0008dc67d20 x24: ffffc0008dc67968\n[   38.224402] x23: ffff8000e3ca5600 x22: ffff8000265b7800 x21: ffff80003000c0c0\n[   38.225279] x20: 0000000000000000 x19: ffff8000b68c5200 x18: ffffc0008dc67968\n[   38.226151] x17: 0000000000000000 x16: 0000000000000000 x15: ffffc000810a30a8\n[   38.227042] x14: 00007fff637effff x13: 00005555de91ffff x12: 00007fff63293fff\n[   38.227942] x11: 0000000000000000 x10: ffff8000184ecf08 x9 : ffffc0007a1900c8\n[   38.228824] x8 : ffffc0008dc67968 x7 : 0000000000000012 x6 : ffffc0015cf1c000\n[   38.229703] x5 : ffffc0008dc676a0 x4 : ffffc00081a27dc0 x3 : 0000000000000038\n[   38.230607] x2 : 0000000000000003 x1 : 0000000000000003 x0 : 00000000100000fb\n[   38.231488] Call trace:\n[   38.231806]  drm_gem_mmap_obj+0x1f8/0x210 (P)\n[   38.232342]  drm_gem_mmap+0x140/0x260\n[   38.232813]  __mmap_region+0x488/0x9a0\n[   38.233277]  mmap_region+0xd0/0x148\n[   38.233703]  do_mmap+0x350/0x5c0\n[   38.234148]  vm_mmap_pgoff+0x14c/0x200\n[   38.234612]  ksys_mmap_pgoff+0x150/0x208\n[   38.235107]  __arm64_sys_mmap+0x34/0x50\n[   38.235611]  invoke_syscall+0x50/0x120\n[   38.236075]  el0_svc_common.constprop.0+0x48/0xf0\n[   38.236680]  do_el0_svc+0x24/0x38\n[   38.237113]  el0_svc+0x38/0x168\n[   38.237507]  el0t_64_sync_handler+0xa0/0xe8\n[   38.238034]  el0t_64_sync+0x198/0x1a0\n[   38.238491] ---[ end trace 0000000000000000 ]---\n\nThere were discussions in [1] at the end of 2023 that mmap() on imported\n---truncated---"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-14T18:08:26.067Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/feb17524aa4ec337749344be0db52b88663e25ab"
        },
        {
          "url": "https://git.kernel.org/stable/c/1a1360264f699521e001e7739009ee3ee3c6a4f5"
        },
        {
          "url": "https://git.kernel.org/stable/c/21fade52ab9fb13368a5709e60b0d9909197aeae"
        },
        {
          "url": "https://git.kernel.org/stable/c/b4cf91658a636618f1437beec971dec25dec28eb"
        },
        {
          "url": "https://git.kernel.org/stable/c/7254b31a13aaa0c2c0f9ffbc335b718656117ff4"
        }
      ],
      "title": "media: videobuf2: Set vma_flags in vb2_dma_sg_mmap",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46312",
    "datePublished": "2026-06-08T15:50:42.964Z",
    "dateReserved": "2026-05-13T15:03:33.111Z",
    "dateUpdated": "2026-06-14T18:08:26.067Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2026:4687-1

CVE-2022-50645 (GCVE-0-2022-50645)

CVE-2026-100075 (GCVE-0-2026-100075)

CVE-2026-31663 (GCVE-0-2026-31663)

CVE-2026-43428 (GCVE-0-2026-43428)

CVE-2026-45834 (GCVE-0-2026-45834)

CVE-2026-45836 (GCVE-0-2026-45836)

CVE-2026-46044 (GCVE-0-2026-46044)

CVE-2026-46196 (GCVE-0-2026-46196)

CVE-2026-46304 (GCVE-0-2026-46304)

CVE-2026-46312 (GCVE-0-2026-46312)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour