SUSE-SU-2026:4749-1 Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

CVE-2026-90365

A flaw was found in the mt76 Wi-Fi driver in the Linux kernel. During device unregistration, certain work items resetwork and rcwork were not properly cancelled. This oversight could allow these work items to execute on an unregistered hardware, potentially leading to unexpected behavior, resourc...

CVE-2026-90363

A flaw was found in the Linux kernel's drm/msm component. During the initialization of Kernel Mode Setting KMS, an error handling path attempts to deallocate resources twice. This double deallocation leads to a use-after-free error, which can cause a system crash. A local attacker could potential...

CVE-2026-90359

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When BPF programs are attached to functions that return 16-byte values using specific trampoline types such as fexit, fmodret, fsession, or structops, the BPF trampoline incorrectly preserves only 8 bytes of the return...

CVE-2026-90358

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter x86 trampoline. When processing 128-bit arguments, the system incorrectly calculates the required stack size for saving registers. This under-allocation leads to memory corruption by overwriting adjacent stack slots. A local attack...

CVE-2026-90357

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the mt76: mt7915 driver. This vulnerability occurs when a Target Wake Time TWT flow is added to an internal list but not correctly unlinked if the firmware rejects the agreement. This improper handling can lead to the reu...

CVE-2026-90356

A flaw was found in the Linux kernel's mt76 wifi driver, specifically in the mt7996 component. This vulnerability arises from an incorrect order of operations during a full reset, where Virtual Interface VIF links are freed before their corresponding Wireless Client ID WCID entries are cleared...

CVE-2026-90353

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability arises from a use-after-free error in the external PHY physical layer registration error path. When the main PHY initialization fails after the external PHY has been registered, the external PHY hardware is prematurely...

CVE-2026-90351

A flaw was found in the Linux kernel's mt76 mt7996 Wi-Fi driver. When the primary PCIe function's Wireless Ethernet Dispatch WED attachment fails, the system incorrectly proceeds to attach the secondary function's WED. This leaves the device in an inconsistent state, which can lead to a system...

CVE-2026-90350

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability occurs because the driver does not properly check the validity of link identifiers, allowing an attacker to provide an invalid identifier. This can lead to reading memory outside of its intended boundaries, which may...

CVE-2026-90329

A flaw was found in the Human Interface Device HID subsystem of the Linux kernel. This vulnerability arises from a race condition during the probe process, where report callbacks can attempt to access resources that have already been freed due to a failed probe. This can lead to a use-after-free...

CVE-2026-90057

A flaw was found in the Linux kernel's Serial Line Internet Protocol SLIP implementation. A local attacker could exploit a race condition during a tty hangup operation, causing the slipreceivebuf function to access memory after it has been freed. This use-after-free vulnerability can lead to...

CVE-2026-80925

A flaw was found in the Linux kernel's VLAN module. When hardware VLAN TX offload is enabled or disabled, it can lead to timing issues, known as data races, where different parts of the system access and modify shared data concurrently without proper synchronization. This can cause the system to...

CVE-2026-80924

A flaw was found in the Linux kernel's Kerberos 5 krb5 cryptography module. When handling derived key buffers, the cryptokrb5prepareencryption and cryptokrb5preparechecksum functions incorrectly use kfree instead of kfreesensitive for memory deallocation. This oversight leaves sensitive key...

CVE-2026-80923

A flaw was found in the Linux kernel. When the ttyregisterdriver function fails, the global dbcttydriver pointer is not properly cleared. This can lead to a use-after-free vulnerability during module unload, where the system attempts to unregister an already freed driver, potentially causing syst...

CVE-2026-80922

A flaw was found in the Linux kernel's qcom-rng cryptographic driver. This vulnerability incorrectly prevented the generation of zero as a random number. By making the output distinguishable from truly random numbers, this flaw could lead to a reduction in the entropy of the random number...

CVE-2026-80920

A flaw was found in the Linux kernel's iouring subsystem. This vulnerability occurs when the system attempts to signal an event while holding a lock, which can lead to a recursive signaling loop. This improper handling of event notifications can cause the system to become unresponsive, resulting ...

CVE-2026-80916

A flaw was found in the Linux kernel's kcov component. A race condition occurs in PREEMPTRT kernels when softirq handlers, running as preemptible task threads, are preempted by higher-priority softirq threads on the same CPU. This can lead to data corruption of the KCOV state, kernel crashes, and...

CVE-2026-80914

A flaw was found in the Bluetooth ISO subsystem of the Linux kernel. A use-after-free vulnerability can occur in the isoconnready function if a listener socket is closed concurrently while a child socket is being created. This can lead to a dangling pointer being dereferenced upon a later...

CVE-2026-98477

A flaw was found in the Linux kernel's performance monitoring subsystem perf. When switching tasks during performance event handling, the kernel can pass an uninitialized NULL pointer to hardware performance monitoring drivers. A local user can exploit this issue during task execution to trigger ...