Every CVE Search/ Get API key

CVE-2026-3150

itsourcecode College Management System display-teacher.php sql injection

5.3 Medium

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.30%Up 0.3 points since Feb 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.3

itsourcecode College Management System display-teacher.php sql injection

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Record
CVE-2026-3150
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
CVSS 3.0
6.3 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
CVSS 2.0
6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
Weakness
CWE-89, CWE-74
Updated
2026-11-02
EUVDEUVD-2026-8623 5.3

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Record
EUVD-2026-8623
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Updated
2026-11-02
GitHub AdvisoriesGHSA-4v56-g6h4-6655 2.1

A security vulnerability has been detected in itsourcecode College Management System 1.0. This...

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Record
GHSA-4v56-g6h4-6655
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-74, CWE-89
Updated
2026-11-02
NVD 2.1

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Record
CVE-2026-3150
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-74, CWE-89
Updated
2026-11-02
OSVopenSUSE-SU-2026:20912-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23380: tracing: Fix WARN_ON in tracing_buffers_mmap_close (bsc#1260539).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31483: s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1261590 bsc#1262771).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31521: module: Fix kernel panic when a symbol st_shndx is out of bounds (bsc#1263102).
  • CVE-2026-31568: s390/mm: Add missing secure storage access fixups for donated memory (bsc#1263068).
  • CVE-2026-31575: mm/userfaultfd: fix hugetlb fault mutex hash calculation (bsc#1263067).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31729: usb: typec: ucsi: validate connector number in ucsi_notify_common() (bsc#1264112).
  • CVE-2026-31736: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled (bsc#1263908).
  • CVE-2026-43012: net/mlx5: Fix switchdev mode rollback in case of failure (bsc#1264016).
  • CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
  • CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
  • CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).
  • CVE-2026-43234: team: avoid NETDEV_CHANGEMTU event when unregistering slave (bsc#1264409).
  • CVE-2026-43252: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300).
  • CVE-2026-43325: wifi: iwlwifi: mvm: don't send a 6E related command when not supported (bsc#1265110).
  • CVE-2026-43328: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (bsc#1264832).
  • CVE-2026-43333: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726).
  • CVE-2026-43338: btrfs: reserve enough transaction items for qgroup ioctls (bsc#1264716).
  • CVE-2026-43341: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044).
  • CVE-2026-43359: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719).
  • CVE-2026-43360: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720).
  • CVE-2026-43361: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722).
  • CVE-2026-43362: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989).
  • CVE-2026-43414: scsi: qla2xxx: Completely fix fcport double free (bsc#1264669).
  • CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
  • CVE-2026-45843: slip: bound decode() reads against the compressed packet length (bsc#1266395).
  • CVE-2026-46110: net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (bsc#1266759).

The following non security issues were fixed:

  • ACPI: x86: cmos_rtc: Clean up address space handler driver (stable-fixes).
  • ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver (git-fixes).
  • ALSA: asihpi: Fix potential OOB array access at reading cache (stable-fixes).
  • ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 (stable-fixes).
  • ALSA: pcm: Don't setup bogus iov_iter for silencing…
Record
openSUSE-SU-2026:20912-1
Updated
2026-11-02
OSVSUSE-SU-2026:22048-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23380: tracing: Fix WARN_ON in tracing_buffers_mmap_close (bsc#1260539).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31483: s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1261590 bsc#1262771).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31521: module: Fix kernel panic when a symbol st_shndx is out of bounds (bsc#1263102).
  • CVE-2026-31568: s390/mm: Add missing secure storage access fixups for donated memory (bsc#1263068).
  • CVE-2026-31575: mm/userfaultfd: fix hugetlb fault mutex hash calculation (bsc#1263067).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31729: usb: typec: ucsi: validate connector number in ucsi_notify_common() (bsc#1264112).
  • CVE-2026-31736: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled (bsc#1263908).
  • CVE-2026-43012: net/mlx5: Fix switchdev mode rollback in case of failure (bsc#1264016).
  • CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
  • CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
  • CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).
  • CVE-2026-43234: team: avoid NETDEV_CHANGEMTU event when unregistering slave (bsc#1264409).
  • CVE-2026-43252: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300).
  • CVE-2026-43325: wifi: iwlwifi: mvm: don't send a 6E related command when not supported (bsc#1265110).
  • CVE-2026-43328: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (bsc#1264832).
  • CVE-2026-43333: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726).
  • CVE-2026-43338: btrfs: reserve enough transaction items for qgroup ioctls (bsc#1264716).
  • CVE-2026-43341: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044).
  • CVE-2026-43359: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719).
  • CVE-2026-43360: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720).
  • CVE-2026-43361: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722).
  • CVE-2026-43362: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989).
  • CVE-2026-43414: scsi: qla2xxx: Completely fix fcport double free (bsc#1264669).
  • CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
  • CVE-2026-45843: slip: bound decode() reads against the compressed packet length (bsc#1266395).
  • CVE-2026-46110: net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (bsc#1266759).

The following non security issues were fixed:

  • ACPI: x86: cmos_rtc: Clean up address space handler driver (stable-fixes).
  • ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver (git-fixes).
  • ALSA: asihpi: Fix potential OOB array access at reading cache (stable-fixes).
  • ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 (stable-fixes).
  • ALSA: pcm: Don't setup bogus iov_iter for silencing…
Record
SUSE-SU-2026:22048-1
Updated
2026-11-02
Show 7 moreShow less
OSVSUSE-SU-2026:22076-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23380: tracing: Fix WARN_ON in tracing_buffers_mmap_close (bsc#1260539).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31483: s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1261590 bsc#1262771).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31521: module: Fix kernel panic when a symbol st_shndx is out of bounds (bsc#1263102).
  • CVE-2026-31568: s390/mm: Add missing secure storage access fixups for donated memory (bsc#1263068).
  • CVE-2026-31575: mm/userfaultfd: fix hugetlb fault mutex hash calculation (bsc#1263067).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31729: usb: typec: ucsi: validate connector number in ucsi_notify_common() (bsc#1264112).
  • CVE-2026-31736: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled (bsc#1263908).
  • CVE-2026-43012: net/mlx5: Fix switchdev mode rollback in case of failure (bsc#1264016).
  • CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
  • CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
  • CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).
  • CVE-2026-43234: team: avoid NETDEV_CHANGEMTU event when unregistering slave (bsc#1264409).
  • CVE-2026-43252: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300).
  • CVE-2026-43325: wifi: iwlwifi: mvm: don't send a 6E related command when not supported (bsc#1265110).
  • CVE-2026-43328: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (bsc#1264832).
  • CVE-2026-43333: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726).
  • CVE-2026-43338: btrfs: reserve enough transaction items for qgroup ioctls (bsc#1264716).
  • CVE-2026-43341: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044).
  • CVE-2026-43359: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719).
  • CVE-2026-43360: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720).
  • CVE-2026-43361: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722).
  • CVE-2026-43362: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989).
  • CVE-2026-43414: scsi: qla2xxx: Completely fix fcport double free (bsc#1264669).
  • CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
  • CVE-2026-45843: slip: bound decode() reads against the compressed packet length (bsc#1266395).
  • CVE-2026-46110: net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (bsc#1266759).

The following non security issues were fixed:

  • ACPI: x86: cmos_rtc: Clean up address space handler driver (stable-fixes).
  • ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver (git-fixes).
  • ALSA: asihpi: Fix potential OOB array access at reading cache (stable-fixes).
  • ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 (stable-fixes).
  • ALSA: pcm: Don't setup bogus iov_iter for silencing…
Record
SUSE-SU-2026:22076-1
Updated
2026-11-02
OSVSUSE-SU-2026:22087-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23380: tracing: Fix WARN_ON in tracing_buffers_mmap_close (bsc#1260539).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31483: s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1261590 bsc#1262771).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31521: module: Fix kernel panic when a symbol st_shndx is out of bounds (bsc#1263102).
  • CVE-2026-31568: s390/mm: Add missing secure storage access fixups for donated memory (bsc#1263068).
  • CVE-2026-31575: mm/userfaultfd: fix hugetlb fault mutex hash calculation (bsc#1263067).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31729: usb: typec: ucsi: validate connector number in ucsi_notify_common() (bsc#1264112).
  • CVE-2026-31736: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled (bsc#1263908).
  • CVE-2026-43012: net/mlx5: Fix switchdev mode rollback in case of failure (bsc#1264016).
  • CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
  • CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
  • CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).
  • CVE-2026-43234: team: avoid NETDEV_CHANGEMTU event when unregistering slave (bsc#1264409).
  • CVE-2026-43252: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300).
  • CVE-2026-43325: wifi: iwlwifi: mvm: don't send a 6E related command when not supported (bsc#1265110).
  • CVE-2026-43328: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (bsc#1264832).
  • CVE-2026-43333: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726).
  • CVE-2026-43338: btrfs: reserve enough transaction items for qgroup ioctls (bsc#1264716).
  • CVE-2026-43341: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044).
  • CVE-2026-43359: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719).
  • CVE-2026-43360: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720).
  • CVE-2026-43361: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722).
  • CVE-2026-43362: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989).
  • CVE-2026-43414: scsi: qla2xxx: Completely fix fcport double free (bsc#1264669).
  • CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
  • CVE-2026-45843: slip: bound decode() reads against the compressed packet length (bsc#1266395).
  • CVE-2026-46110: net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (bsc#1266759).

The following non security issues were fixed:

  • ACPI: x86: cmos_rtc: Clean up address space handler driver (stable-fixes).
  • ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver (git-fixes).
  • ALSA: asihpi: Fix potential OOB array access at reading cache (stable-fixes).
  • ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 (stable-fixes).
  • ALSA: pcm: Don't setup bogus iov_iter for silencing…
Record
SUSE-SU-2026:22087-1
Updated
2026-11-02
OSVSUSE-SU-2026:22108-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
  • CVE-2026-31767: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (bsc#1264124).
  • CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero (bsc#1264091).
  • CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
  • CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
  • CVE-2026-43059: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (bsc#1264184).
  • CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
  • CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
  • CVE-2026-43068: ext4: avoid…
Record
SUSE-SU-2026:22108-1
Updated
2026-11-02
OSVSUSE-SU-2026:22137-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
  • CVE-2026-31767: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (bsc#1264124).
  • CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero (bsc#1264091).
  • CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
  • CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
  • CVE-2026-43059: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (bsc#1264184).
  • CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
  • CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
  • CVE-2026-43068: ext4: avoid…
Record
SUSE-SU-2026:22137-1
Updated
2026-11-02
OSVSUSE-SU-2026:2450-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: Add workaround for Cortex-A76 erratum 1286807 (bsc#1266290).
  • CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23279: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (bsc#1260468).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23367: wifi: radiotap: reject radiotap with unknown bits (bsc#1260731).
  • CVE-2026-23396: wifi: mac80211: fix NULL deref in mesh_matches_local() (bsc#1260729).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-23448: net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check (bsc#1261750).
  • CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700).
  • CVE-2026-31415: ipv6: avoid overflows in ip6_datagram_send_ctl() (bsc#1262099).
  • CVE-2026-31421: net/sched: cls_fw: fix NULL pointer dereference on shared blocks (bsc#1262061).
  • CVE-2026-31447: ext4: reject mount if bigalloc with s_first_data_block != 0 (bsc#1262614).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31498: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (bsc#1262751).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31515: af_key: validate families in pfkey_send_migrate() (bsc#1262752).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31532: can: af_can: export can_sock_destruct() (bsc#1262757).
  • CVE-2026-31540: drm/i915/gt: Check set_default_submission() before deferencing (bsc#1263011).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31668: seg6: separate dst_cache for input and output paths in seg6 lwtunnel (bsc#1263140).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
  • CVE-2026-31778: ALSA: caiaq: fix stack out-of-bounds read in init_card (bsc#1263923).
  • CVE-2026-43020: Bluetooth: MGMT: validate LTK enc_size on load (bsc#1264006).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb in…
Record
SUSE-SU-2026:2450-1
Updated
2026-11-02
OSVSUSE-SU-2026:2482-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31591: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish (bsc#1263122).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
  • CVE-2026-31767: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (bsc#1264124).
  • CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
  • CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info- leak (bsc#1264091).
  • CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
  • CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
  • CVE-2026-43059: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete…
Record
SUSE-SU-2026:2482-1
Updated
2026-11-02
OSVSUSE-SU-2026:2591-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31591: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish (bsc#1263122).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
  • CVE-2026-31767: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (bsc#1264124).
  • CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
  • CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info- leak (bsc#1264091).
  • CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
  • CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
  • CVE-2026-43059: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete…
Record
SUSE-SU-2026:2591-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1.160000.2.15
6.12.0-160000.34.1.160000.2.15
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1.160000.2.15
6.12.0-160000.34.1.160000.2.15
Show 51 moreShow less
Affected packages
PackageAffectedFixed
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1.160000.2.15
6.12.0-160000.34.1.160000.2.15
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 6.12.0-160000.34.1
6.12.0-160000.34.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-47.1.21.24
6.4.0-47.1.21.24
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-47.1.21.24
6.4.0-47.1.21.24
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kgraft-patch-SLE12-SP5_Update_84
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 84 CVEs
 before 1-8.7.1
1-8.7.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1.150700.17.35.4
6.4.0-150700.53.60.1.150700.17.35.4
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.2
6.4.0-150700.53.60.2
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-livepatch-SLE15-SP7_Update_16
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 103 CVEs
 before 1-150700.15.3.2
1-150700.15.3.2
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 103 CVEs
 before 6.4.0-150700.53.60.1
6.4.0-150700.53.60.1
kernel-livepatch-SLE15-SP7-RT_Update_16
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 102 CVEs
 before 1-150700.1.5.2
1-150700.1.5.2
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 102 CVEs
 before 6.4.0-150700.7.59.2
6.4.0-150700.7.59.2
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 102 CVEs
 before 6.4.0-150700.7.59.2
6.4.0-150700.7.59.2
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 102 CVEs
 before 6.4.0-150700.7.59.1
6.4.0-150700.7.59.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-3150 is a medium vulnerability (CVSS 5.3) in Angeljudesuarez College Management System, published February 25, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 154 references and the rest of 9 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open