CVE-2026-23363

wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()

7.1 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt7925_mac_write_txwi_80211 in order to avoid a possible oob access.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: High

Exploit likelihood

0.13%Up 0.1 points since Mar 25, 2026

What each source reports

NVD Score used 7.1

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt7925_mac_write_txwi_80211 in order to avoid a possible oob access.

Record: CVE-2026-23363
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-05

CVE List No score

wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt7925_mac_write_txwi_80211 in order to avoid a possible oob access.

Record: CVE-2026-23363
Updated: 2026-11-05

EUVDEUVD-2026-15343 No score

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt7925_mac_write_txwi_80211 in order to avoid a possible oob access.

Record: EUVD-2026-15343
Updated: 2026-11-05

GitHub AdvisoriesGHSA-2cvc-xjmv-g6cj 7.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: Fix...

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt7925_mac_write_txwi_80211 in order to avoid a possible oob access.

Record: GHSA-2cvc-xjmv-g6cj
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVBELL-CVE-2026-23363 7.1

Record: BELL-CVE-2026-23363
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-23363 7.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() Check frame length before accessing the mgmt fields in mt7925_mac_write_txwi_80211 in order to avoid a possible oob access.

Record: DEBIAN-CVE-2026-23363
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-06

Show 29 moreShow less

OSVROOT-OS-UBUNTU-2404-CVE-2026-23363 5.5

CVE-2026-23363 in linux - Patched by Root

Root has patched CVE-2026-23363 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2026-23363
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2026-23363 7.1

Record: UBUNTU-CVE-2026-23363
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-11

OSVCLSA-2026-1786352940 No score

kernel: Fix of 148 CVEs

KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807}
KVM: x86: Check for invalid/obsolete root after making MMU pages available {CVE-2026-64561}
ubi: Fix use-after-free when volume resizing failed {CVE-2023-53271}
ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() {CVE-2025-37912}
wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() {CVE-2026-53318}
dpll: Prevent duplicate registrations {CVE-2026-23129}
pinmux: fix race causing mux_owner NULL with active mux_usecount {CVE-2025-38632}
HID: apple: validate feature-report field count to prevent NULL pointer dereference {CVE-2025-38557}
thunderbolt: Limit XDomain response copy to actual frame size {CVE-2026-53146}
net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery {CVE-2026-43466}
virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false {CVE-2026-31469}
scsi: target: Reset t_task_cdb pointer in error case {CVE-2025-68782}
ubi: ubi_create_volume: Fix use-after-free when volume creation failed {CVE-2022-49388}
drm/xe/reg_sr: Fix leak on xa_store failure {CVE-2026-23418}
ASoC: soc-core: flush delayed work before removing DAIs and widgets {CVE-2026-43459}
md/raid10: wait barrier before returning discard request with REQ_NOWAIT {CVE-2025-40325}
nbd: defer config put in recv_work {CVE-2025-68372}
nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference {CVE-2026-23148}
net: hns3: using the num_tqps in the vf driver to apply for resources {CVE-2025-71064}
net/mlx5e: Disable MACsec offload for uplink representor profile {CVE-2025-38020}
serial: imx: fix tx statemachine deadlock {CVE-2023-52456}
dm-thin: fix metadata refcount underflow {CVE-2026-46107}
net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure {CVE-2026-53229}
drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
usbnet:fix NPE during rx_complete {CVE-2025-22050}
platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it {CVE-2025-21645}
driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() {CVE-2025-21810}
usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
ALSA: seq: dummy: fix UMP event stack overread {CVE-2026-53241}
pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled {CVE-2026-31655}
net/mlx5: Bridge, fix the crash caused by LAG state check {CVE-2025-21970}
ALSA: timer: Don't take register_mutex with copy_from/to_user() {CVE-2025-23134}
md/raid5: validate payload size before accessing journal metadata {CVE-2026-46070}
nvmet-fc: move lsop put work to nvmet_fc_ls_req_op {CVE-2025-40171}
iommu: Fix potential memory leak in iopf_queue_remove_device() {CVE-2025-21770}
Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak {CVE-2025-40035}
scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails {CVE-2026-45997}
can: dev: can_set_termination(): allow sleeping GPIOs {CVE-2024-56625}
nvme-tcp: fix the memleak while create new ctrl failed {CVE-2024-56632}
ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() {CVE-2026-46146}
pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains {CVE-2026-23187}
wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path {CVE-2025-22128}
octeon_ep: Fix memory leak in octep_device_setup() {CVE-2026-23160}
pinctrl: check the return value of pinmux_ops::get_function_name() {CVE-2025-40030}
net: tun: fix tun_napi_alloc_frags() {CVE-2024-56372}
wifi: iwlwifi: mvm: clean up ROC on failure {CVE-2025-21906}
ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd {CVE-2025-40275}
dpll: fix xa_alloc_cyclic() error handling {CVE-2025-22016}
usb: usbtmc: Flush anchored URBs in usbtmc_release {CVE-2026-31758}
RDMA/siw: Fix potential NULL pointer dereference in header processing…

Record: CLSA-2026-1786352940
Updated: 2026-11-02

OSV No score

wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in mt7925_mac_write_txwi_80211 in order to avoid a possible oob access.

Record: CVE-2026-23363
Updated: 2026-11-07

OSVopenSUSE-SU-2026:20826-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…

Record: openSUSE-SU-2026:20826-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21834-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…

Record: SUSE-SU-2026:21834-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21841-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…

Record: SUSE-SU-2026:21841-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21845-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…

Record: SUSE-SU-2026:21845-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21860-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…

Record: SUSE-SU-2026:21860-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
CVE-2026-31407:…

Record: SUSE-SU-2026:21876-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21877-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
CVE-2026-31407:…

Record: SUSE-SU-2026:21877-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21916-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
CVE-2026-31407:…

Record: SUSE-SU-2026:21916-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
CVE-2026-31407:…

Record: SUSE-SU-2026:21919-1
Updated: 2026-11-02

OSVSUSE-SU-2026:2217-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-68310: s390/pci: Use pci_uevent_ers() in PCI recovery (bsc#1255160).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23395: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (bsc#1260580).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23412: netfilter: bpf: defer hook memory release until rcu readers are done (bsc#1261412).
CVE-2026-23419: net/rds: Fix circular locking dependency in rds_tcp_tune (bsc#1261507).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
CVE-2026-23457: netfilter: nf_conntrack_sip: fix…

Record: SUSE-SU-2026:2217-1
Updated: 2026-11-02

OSVSUSE-SU-2026:2238-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013).
CVE-2025-68310: s390/pci: Use pci_uevent_ers() in PCI recovery (bsc#1255160).
CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
CVE-2026-23395: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (bsc#1260580).
CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
CVE-2026-23412: netfilter: bpf: defer hook memory release until rcu readers are done (bsc#1261412).
CVE-2026-23419: net/rds: Fix circular locking dependency in rds_tcp_tune (bsc#1261507).
CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
CVE-2026-23456: netfilter: nf_conntrack_h323:…

Record: SUSE-SU-2026:2238-1
Updated: 2026-11-02

OSVUSN-8567-1 No score

linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)