CVE-2026-43436

ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces

5.5 MediumFix available

What does this mean?

: 5.5v3.1, from NVD
: 0.12%2nd percentile
Fixed in: 6.1.167-r0linux-lts
Published: May 8, 2026
Modified: November 11, 2026
Weakness: CWE-476
Also known as: BELL-CVE-2026-43436CLSA-2026-1780562693CLSA-2026-1783362244DEBIAN-CVE-2026-43436EUVD-2026-28742GHSA-g84q-9979-4xf8ROOT-OS-UBUNTU-2204-CVE-2026-43436ROOT-OS-UBUNTU-2404-CVE-2026-43436
Show 27 moreShow less
SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1SUSE-SU-2026:23221-1SUSE-SU-2026:23231-1SUSE-SU-2026:23237-1SUSE-SU-2026:23241-1SUSE-SU-2026:23244-1SUSE-SU-2026:3130-1SUSE-SU-2026:3166-1UBUNTU-CVE-2026-43436USN-8567-1USN-8574-1USN-8574-2USN-8574-3USN-8595-1USN-8595-2USN-8595-3USN-8596-1USN-8606-1USN-8607-1USN-8608-1USN-8609-1USN-8619-1USN-8665-1openSUSE-SU-2026:21555-1

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces

The Scarlett2 mixer quirk in USB-audio driver may hit a NULL dereference when a malformed USB descriptor is passed, since it assumes the presence of an endpoint in the parsed interface in scarlett2_find_fc_interface(), as reported by fuzzer.

For avoiding the NULL dereference, just add the sanity check of bNumEndpoints and skip the invalid interface.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.12%Up 0.1 points since May 9, 2026

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces

For avoiding the NULL dereference, just add the sanity check of bNumEndpoints and skip the invalid interface.

Record: CVE-2026-43436
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-06

CVE List No score

ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces

For avoiding the NULL dereference, just add the sanity check of bNumEndpoints and skip the invalid interface.

Record: CVE-2026-43436
Updated: 2026-11-06

EUVDEUVD-2026-28742 No score

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces

For avoiding the NULL dereference, just add the sanity check of bNumEndpoints and skip the invalid interface.

Record: EUVD-2026-28742
Updated: 2026-11-06

GitHub AdvisoriesGHSA-g84q-9979-4xf8 5.5

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Check...

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces

For avoiding the NULL dereference, just add the sanity check of bNumEndpoints and skip the invalid interface.

Record: GHSA-g84q-9979-4xf8
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

OSVBELL-CVE-2026-43436 5.5

Record: BELL-CVE-2026-43436
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-43436 5.5

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces The Scarlett2 mixer quirk in USB-audio driver may hit a NULL dereference when a malformed USB descriptor is passed, since it assumes the presence of an endpoint in the parsed interface in scarlett2_find_fc_interface(), as reported by fuzzer. For avoiding the NULL dereference, just add the sanity check of bNumEndpoints and skip the invalid interface.

Record: DEBIAN-CVE-2026-43436
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-07

Show 32 moreShow less

OSVROOT-OS-UBUNTU-2204-CVE-2026-43436 5.5

CVE-2026-43436 in linux - Patched by Root

Root has patched CVE-2026-43436 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2026-43436
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVROOT-OS-UBUNTU-2404-CVE-2026-43436 5.5

CVE-2026-43436 in linux - Patched by Root

Root has patched CVE-2026-43436 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2026-43436
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2026-43436 5.1

Record: UBUNTU-CVE-2026-43436
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-11

OSVCLSA-2026-1780562693 No score

kernel: Fix of 111 CVEs

fbcon: Fix OOB access in font allocation {CVE-2025-39967}
fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
macvlan: observe an RCU grace period in macvlan_common_newlink() error path {CVE-2026-23273}
macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
net_sched: sch_sfq: move the limit validation {CVE-2025-37752}
bpf: Fix oob access in cgroup local storage {CVE-2025-38502}
ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588}
driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT {CVE-2026-43475}
unshare: fix unshare_fs() handling {CVE-2026-43472}
netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451}
nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
e1000/e1000e: Fix leak in DMA error cleanup {CVE-2026-43445}
cgroup: fix race between task migration and iteration {CVE-2026-43439}
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
usb: image: mdc800: kill download URB on timeout {CVE-2026-43425}
tipc: fix divide-by-zero in tipc_sk_filter_connect() {CVE-2026-43411}
nouveau/dpcd: return EBUSY for aux xfer if the device is asleep {CVE-2026-43381}
ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() {CVE-2026-43068}
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP {CVE-2026-31424}
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() {CVE-2026-31423}
net/sched: cls_flow: fix NULL pointer dereference on shared blocks {CVE-2026-31422}
net/sched: cls_fw: fix NULL pointer dereference on shared blocks {CVE-2026-31421}
netfilter: ipset: drop logically empty buckets in mtype_del {CVE-2026-31418}
netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416}
sunrpc: fix cache_request leak in cache_release {CVE-2026-31400}
PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set {CVE-2026-43449}
netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() {CVE-2026-43453}
netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
RDMA/umem: Fix double dma_buf_unpin in failure path {CVE-2026-43128}
usbip: validate number_of_packets in usbip_pack_ret_submit() {CVE-2026-31607}
net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown {CVE-2026-23454}
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() {CVE-2025-38441}
nvmet: fix memory leak of bio integrity {CVE-2025-38405}
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. {CVE-2025-38400}
dmaengine: idxd: fix memory leak in error handling path of idxd_alloc {CVE-2025-38015}
bonding: check xdp prog when set bond mode {CVE-2025-22105}
usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD {CVE-2026-31428}
netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp {CVE-2026-31427}
ipv6: avoid overflows in ip6_datagram_send_ctl() {CVE-2026-31415}
net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411}
RDMA/umad: Reject negative data_len in ib_umad_write {CVE-2026-23243}
perf/x86/intel/uncore: Fix die ID init and look up bugs {CVE-2026-43344}
x86/apic: Disable x2apic on resume if the kernel expects so {CVE-2026-43363}
dm: remove fake timeout to avoid leak request {CVE-2026-43314}
drm: Account property blob allocations to memcg {CVE-2026-43287}
HID:…

Record: CLSA-2026-1780562693
Updated: 2026-11-02

OSVCLSA-2026-1783362244 No score

kernel: Fix of 122 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113}
KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113}
Bluetooth: bcsp: receive data only if registered {CVE-2025-40308}
xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788}
xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts {CVE-2026-43429}
net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708}
net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
net: usb: pegasus: validate USB endpoints {CVE-2026-23290}
net: usb: pegasus: enable basic endpoint checking {CVE-2026-43156}
USB: usbcore: Introduce usb_bulk_msg_killable() {CVE-2026-43429}
USB: core: Add routines for endpoint checks in old drivers {CVE-2026-43156}
nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399}
tpm: Cap the number of PCR banks {CVE-2025-71077}
clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() {CVE-2023-53704}
dm: fix a race condition in retrieve_deps {CVE-2023-54324}
ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127}
mlx5: fix skb leak while fifo resync and push {CVE-2023-54238}
mmc: vub300: fix return value check of mmc_add_host() {CVE-2022-50251}
bonding: annotate data-races around slave->last_rx {CVE-2026-23212}
RDMA/irdma: Fix data race on CQP completion stats {CVE-2023-54302}
bpf: cpumap: Fix memory leak in cpu_map_update_elem {CVE-2023-53441}
fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829}
vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850}
team: prevent adding a device which is already a team device lower {CVE-2024-58071}
net: stmmac: move the EST lock to struct stmmac_priv {CVE-2024-38594}
drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too {CVE-2024-50108}
rxrpc: Fix handling of received connection abort {CVE-2024-58053}
bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911}
scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690}
net: atlantic: Fix DMA mapping for PTP hwts ring {CVE-2024-26680}
wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() {CVE-2024-47713}
drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) {CVE-2024-49905}
dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134}
smb: client: validate the whole DACL before rewriting it in cifsacl {CVE-2026-31709}
PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062}
cachefiles: fix dentry leak in cachefiles_open_file() {CVE-2024-49870}
mm: revert "mm: shmem: fix data-race in shmem_getattr()" {CVE-2024-53136}
memcg: fix soft lockup in the OOM process {CVE-2024-57977}
resource: fix region_intersects() vs add_memory_driver_managed() {CVE-2024-49878}
r8169: add tally counter fields added with RTL8125 {CVE-2024-49973}
svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() {CVE-2024-53215}
ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths {CVE-2026-43066}
wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() {CVE-2025-71273}
net: netlink: af_netlink: Prevent empty skb by adding a check on len. {CVE-2021-47606}
extcon: Modify extcon device to be created after driver data is set {CVE-2022-49308}
tick/nohz: unexport __init-annotated tick_nohz_full_setup() {CVE-2022-49675}
bridge:…

Record: CLSA-2026-1783362244
Updated: 2026-11-02

OSV No score

ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces

For avoiding the NULL dereference, just add the sanity check of bNumEndpoints and skip the invalid interface.

Record: CVE-2026-43436
Updated: 2026-11-07

OSVopenSUSE-SU-2026:21555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: openSUSE-SU-2026:21555-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23066-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: SUSE-SU-2026:23066-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23068-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: SUSE-SU-2026:23068-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23193-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
CVE-2026-46040: inotify:…

Record: SUSE-SU-2026:23193-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23194-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
CVE-2026-46040: inotify: fix…

Record: SUSE-SU-2026:23194-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23221-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: SUSE-SU-2026:23221-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23231-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: SUSE-SU-2026:23231-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23237-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: SUSE-SU-2026:23237-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23241-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
CVE-2026-46040: inotify:…

Record: SUSE-SU-2026:23241-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23244-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
CVE-2026-46040: inotify: fix…

Record: SUSE-SU-2026:23244-1
Updated: 2026-11-02

OSVSUSE-SU-2026:3130-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
CVE-2026-43199: net/mlx5e: Fix 'scheduling while atomic' in IPsec MAC address query (bsc#1264556).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).
CVE-2026-43260: bnxt_en: Fix RSS context delete logic (bsc#1264429).
CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
CVE-2026-43337: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
CVE-2026-45922: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). -…

Record: SUSE-SU-2026:3130-1
Updated: 2026-11-02

OSVSUSE-SU-2026:3166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
CVE-2026-43199: net/mlx5e: Fix 'scheduling while atomic' in IPsec MAC address query (bsc#1264556).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).
CVE-2026-43260: bnxt_en: Fix RSS context delete logic (bsc#1264429).
CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
CVE-2026-43337: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
CVE-2026-45922: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). -…

Record: SUSE-SU-2026:3166-1
Updated: 2026-11-02

OSVUSN-8567-1 No score

linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)