{"id":"SUSE-SU-2026:0765-1","aliases":[],"status":"published","title":"Security update for smc-tools","description":"This update for smc-tools fixes the following issues:\n\nUpdate to version 1.8.7 (jsc#PED-14601).\n\nSecurity issues fixed:\n\n- VUL-1: smc-tools: predictable /tmp file allows for local denial of service (bsc#1230052, bsc#1258495).\n\nOther updates and bugfixes:\n\n- smc_rnics: fix regression when PFT not available\n- smcd/smcr: prevent DoS on statistics workfile present in /tmp/\n- man pages: update man page for smc_pnet\n- smc-tools: display sndbuf/RMB stats only if supported by the kernel\n- smc_rnics: add support for Network Express RNIC in smc_rnics\n- smc_rnics: add PFT and VF columns to smc_rnics output\n- libnetlink: fix function declaration to use a void prototype\n- smc_rnics: update smc_chk to extract PNetID from column 9\n- man pages: update man page for --rawids option and PFT and VF columns\n- smc_rnics: fix missing PPrt values in smc_rnics -r output","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-03-03T12:59:51Z","modified":"2026-03-04T22:17:11Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"smc-tools","fixed_in":["1.8.7-150700.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"smc-tools","fixed_in":["1.8.7-150700.3.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"smc-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-150700.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"smc-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-150700.3.3.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260765-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230052","tags":["report"]},{"url":"https://bugzilla.suse.com/1258495","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2026:0765-1","title":"Security update for smc-tools","description":"This update for smc-tools fixes the following issues:\n\nUpdate to version 1.8.7 (jsc#PED-14601).\n\nSecurity issues fixed:\n\n- VUL-1: smc-tools: predictable /tmp file allows for local denial of service (bsc#1230052, bsc#1258495).\n\nOther updates and bugfixes:\n\n- smc_rnics: fix regression when PFT not available\n- smcd/smcr: prevent DoS on statistics workfile present in /tmp/\n- man pages: update man page for smc_pnet\n- smc-tools: display sndbuf/RMB stats only if supported by the kernel\n- smc_rnics: add support for Network Express RNIC in smc_rnics\n- smc_rnics: add PFT and VF columns to smc_rnics output\n- libnetlink: fix function declaration to use a void prototype\n- smc_rnics: update smc_chk to extract PNetID from column 9\n- man pages: update man page for --rawids option and PFT and VF columns\n- smc_rnics: fix missing PPrt values in smc_rnics -r output\n","status":"published","published":"2026-03-03T12:59:51Z","modified":"2026-03-04T22:17:11.726356Z","updated_at":"2026-11-02T15:54:01.262144Z"}]}}