CVE-2026-23315

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

7.1 HighFix available

What does this mean?

: 7.1v3.1, from NVD
: 0.13%2nd percentile
Fixed in: 6.6.130.1-1kernel
Published: March 25, 2026
Modified: November 11, 2026
Weakness: CWE-125
Also known as: AZL-80558BELL-CVE-2026-23315CLSA-2026-1778276927CLSA-2026-1778769697CLSA-2026-1789141176DEBIAN-CVE-2026-23315EUVD-2026-15261GHSA-pr34-f48h-6946
Show 32 moreShow less
MGASA-2026-0097MGASA-2026-0098ROOT-OS-DEBIAN-11-CVE-2026-23315ROOT-OS-DEBIAN-12-CVE-2026-23315ROOT-OS-UBUNTU-2204-CVE-2026-23315ROOT-OS-UBUNTU-2404-CVE-2026-23315SUSE-SU-2026:21834-1SUSE-SU-2026:21841-1SUSE-SU-2026:21845-1SUSE-SU-2026:21860-1SUSE-SU-2026:21876-1SUSE-SU-2026:21877-1SUSE-SU-2026:21916-1SUSE-SU-2026:21919-1SUSE-SU-2026:2217-1SUSE-SU-2026:2238-1UBUNTU-CVE-2026-23315USN-8567-1USN-8574-1USN-8574-2USN-8574-3USN-8595-1USN-8595-2USN-8595-3USN-8596-1USN-8606-1USN-8607-1USN-8608-1USN-8609-1USN-8619-1USN-8665-1openSUSE-SU-2026:20826-1

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access.

[fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: High

Exploit likelihood

0.13%Up 0.1 points since Mar 25, 2026

What each source reports

NVD Score used 7.1

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access.

[fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

Record: CVE-2026-23315
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-05

CVE List No score

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access.

[fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

Record: CVE-2026-23315
Updated: 2026-11-05

EUVDEUVD-2026-15261 No score

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access.

[fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

Record: EUVD-2026-15261
Updated: 2026-11-05

GitHub AdvisoriesGHSA-pr34-f48h-6946 7.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix possible oob...

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access.

[fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

Record: GHSA-pr34-f48h-6946
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVBELL-CVE-2026-23315 7.1

Record: BELL-CVE-2026-23315
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-23315 7.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access. [fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

Record: DEBIAN-CVE-2026-23315
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-06

Show 37 moreShow less

OSVROOT-OS-DEBIAN-11-CVE-2026-23315 7.1

CVE-2026-23315 in linux - Patched by Root

Root has patched CVE-2026-23315 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2026-23315
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2026-23315 7.1

CVE-2026-23315 in linux - Patched by Root

Root has patched CVE-2026-23315 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2026-23315
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2026-23315 7.1

CVE-2026-23315 in linux - Patched by Root

Root has patched CVE-2026-23315 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2026-23315
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-06

OSVROOT-OS-UBUNTU-2404-CVE-2026-23315 7.1

CVE-2026-23315 in linux - Patched by Root

Root has patched CVE-2026-23315 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2026-23315
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2026-23315 4.8

Record: UBUNTU-CVE-2026-23315
CVSS 4.0: 4.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-11

OSVAZL-80558 No score

CVE-2026-23315 affecting package kernel for versions less than 6.6.130.1-1

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access.

[fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

Record: AZL-80558
Updated: 2026-11-02

OSVCLSA-2026-1778276927 No score

kernel: Fix of 35 CVEs

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
xfrm: esp: avoid in-place decrypt on shared skb frags
ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
gpiolib: cdev: fix uninitialised kfifo {CVE-2024-36898}
wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() {CVE-2026-23315}
net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check {CVE-2026-23447}
Squashfs: check metadata block offset is within range {CVE-2026-23388}
nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2024-21803}
crypto: scomp - fix req->dst buffer overflow {CVE-2023-52612}
firmware_loader: Block path traversal {CVE-2024-47742}
EDAC/igen6: Avoid segmentation fault on module unload {CVE-2024-56708}
ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689}
firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() {CVE-2024-53068}
tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg {CVE-2024-56633}
bpf: Fix array bounds error with may_goto {CVE-2025-22087}
wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb {CVE-2024-56609}
loop: Fix use-after-free issues {CVE-2023-53111}
ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265}
net: fec: Better handle pm_runtime_get() failing in .remove() {CVE-2023-53308}
udf: Do not bother merging very long extents {CVE-2023-53506}
ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}
binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497}
virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515}
tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560}
netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619}
gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622}
net/mlx5: Fix ECVF vports unload on shutdown flow {CVE-2025-38109}
RDMA/irdma: avoid invalid read in irdma_net_event {CVE-2025-71133}
e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093}
ALSA: scarlett2: Fix buffer overflow in config retrieval {CVE-2026-23078}
bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}

Record: CLSA-2026-1778276927
Updated: 2026-11-02

OSVCLSA-2026-1778769697 No score

kernel: Fix of 31 CVEs

net: skbuff: propagate shared-frag marker through pskb_copy()
HID: ignore non-functional sensor in HP 5MP Camera {CVE-2025-21992}
net: fix crash when config small gso_max_size/gso_ipv4_max_size {CVE-2024-50258}
ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() {CVE-2024-53042}
ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
serial: imx: Add missing .thaw_noirq hook {CVE-2022-49841}
module: ensure that kobject_put() is safe for module type kobjects {CVE-2025-37995}
udf: Fix uninitialized array access for some pathnames {CVE-2023-53165}
ACPICA: Avoid undefined behavior: applying zero offset to null pointer {CVE-2023-53182}
net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381}
platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data {CVE-2026-23370}
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382}
icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398}
net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379}
ice: Fix memory leak in ice_set_ringparam() {CVE-2026-23389}
wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367}
HID: asus: avoid memory leak in asus_report_fixup() {CVE-2026-31524}
xprtrdma: treat all calls not a bcall when bc_serv is NULL {CVE-2022-49321}
mm/mempolicy: fix uninit-value in mpol_rebind_policy() {CVE-2022-49567}
x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails {CVE-2022-49549}
af_unix: Fix a data-race in unix_dgram_peer_wake_me(). {CVE-2022-49344}
bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data {CVE-2022-50536}
net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() {CVE-2023-53578}
wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() {CVE-2023-53570}
mptcp: fix race on unaccepted mptcp sockets {CVE-2022-49669}
ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318}
wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() {CVE-2026-23315}
net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check {CVE-2026-23447}
Squashfs: check metadata block offset is within range {CVE-2026-23388}
apparmor: Fix double free of ns_name in aa_replace_profiles() {CVE-2026-23408}
nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
i2c: piix4: Fix a memory leak in the EFCH MMIO support {CVE-2022-49653}

Record: CLSA-2026-1778769697
Updated: 2026-11-02

OSVCLSA-2026-1789141176 No score

kernel: Fix of 131 CVEs

net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
drm/i915: Fix potential UAF in TTM object purge {CVE-2026-63884}
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
Bluetooth: hci_sync: Protect UUID list traversal {CVE-2026-68189}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731}
Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
net_sched: red: fix a race in __red_change() {CVE-2025-38108}
iio: event: Fix event FIFO reset race {CVE-2026-64496}
netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
media: cx23885: add ioremap return check and cleanup {CVE-2026-68226}
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev {CVE-2026-68176} -…

Record: CLSA-2026-1789141176
Updated: 2026-11-02

OSV No score

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access.

[fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

Record: CVE-2026-23315
Updated: 2026-11-07

OSVMGASA-2026-0097 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.130 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record: MGASA-2026-0097
Updated: 2026-11-02

OSVMGASA-2026-0098 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.130 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2026-0098
Updated: 2026-11-02

OSVopenSUSE-SU-2026:20826-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…

Record: openSUSE-SU-2026:20826-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21834-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…

Record: SUSE-SU-2026:21834-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21841-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…

Record: SUSE-SU-2026:21841-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21845-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…

Record: SUSE-SU-2026:21845-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21860-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…

Record: SUSE-SU-2026:21860-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
CVE-2026-31407:…

Record: SUSE-SU-2026:21876-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21877-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
CVE-2026-31407:…

Record: SUSE-SU-2026:21877-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21916-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
CVE-2026-31407:…

Record: SUSE-SU-2026:21916-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
CVE-2026-31407:…

Record: SUSE-SU-2026:21919-1
Updated: 2026-11-02

OSVSUSE-SU-2026:2217-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-68310: s390/pci: Use pci_uevent_ers() in PCI recovery (bsc#1255160).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23395: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (bsc#1260580).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23412: netfilter: bpf: defer hook memory release until rcu readers are done (bsc#1261412).
CVE-2026-23419: net/rds: Fix circular locking dependency in rds_tcp_tune (bsc#1261507).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix…

Record: SUSE-SU-2026:2217-1
Updated: 2026-11-02

OSVSUSE-SU-2026:2238-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013).
CVE-2025-68310: s390/pci: Use pci_uevent_ers() in PCI recovery (bsc#1255160).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23395: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (bsc#1260580).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23412: netfilter: bpf: defer hook memory release until rcu readers are done (bsc#1261412).
CVE-2026-23419: net/rds: Fix circular locking dependency in rds_tcp_tune (bsc#1261507).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323:…

Record: SUSE-SU-2026:2238-1
Updated: 2026-11-02

OSVUSN-8567-1 No score

linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)