The vulnerability of the esp_output_done() function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the espoutputdone function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `magicmouse_report_fixup()` function in the `drivers/hid/hid-magicmouse.c` driver module of the Linux kernel’s input device subsystem allows a hacker to trigger a maintenance failure.

The vulnerability of the magicmousereportfixup function in the drivers/hid/hid-magicmouse.c driver of the Linux kernel’s input device subsystem relates to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the conntrack mechanism for monitoring network connections in the netfilter component of the Linux operating system’s kernel allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the conntrack mechanism for monitoring network connections in the netfilter component of the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to induce a system failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver exposes confidential or sensitive information in error messages from the command shell. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the process_sdp() function in the net/netfilter/nf_conntrack_sip.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the processsdp function in the net/netfilter/nfconntracksip.c module of the netfilter component in the Linux operating system’s kernel is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the `cavium_map_pf regs()` function in the `drivers/char/hw_random/cavium-rng-vf.c` driver module, which is part of the Linux kernel’s support for alphanumeric devices. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the caviummappf regs function in the drivers/char/hwrandom/cavium-rng-vf.c driver module, which is part of the Linux kernel’s character-to-digit device support mechanism, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the functions ip6tunnel_xmit() (included in net/ip6_tunnel.h) and iptunnel_xmit() (from net/ipv4/ip_tunnel_core.c) in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ip6tunnelxmit function included in net/ip6tunnel.h and the iptunnelxmit function in net/ipv4/iptunnelcore.c in the Linux operating system is related to unmanaged recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the privcmd_init() function in the drivers/xen/privcmd.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the privcmdinit function in the drivers/xen/privcmd.c module of the Linux kernel is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the u32_classify() function in the net/sched/cls_u32.c module of the network scheduling subsystem of the Linux operating system allows a attacker to access protected information or cause service interruptions.

The vulnerability of the u32classify function in the net/sched/clsu32.c module of the network scheduling subsystem of the Linux operating system is related to incorrect checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability may allow an attacker to acces...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.45 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

SUSE-SU-2026:3771-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE-SU-2026:3770-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE-SU-2026:3768-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

CVE-2026-74731

A flaw was found in the Linux kernel's schedext component. A race condition can occur during the disabling of a sub-scheduler that was never properly linked into the scheduler hierarchy. This can lead to a use-after-free vulnerability, where exited tasks are re-homed onto a dying hierarchy. This...

CVE-2026-74724

A flaw was found in the Linux kernel's IPVS IP Virtual Server component. A local attacker can exploit this vulnerability by manipulating packets processed by IPVS, specifically within the ipvsnaticmp function. This manipulation can lead to an out-of-bounds write due to improper handling of the IP...

CVE-2026-74723

A flaw was found in the Linux kernel. A local attacker could craft a btrfs image with a malformed LZO compressed file extent. This could lead to an out-of-bounds read during decompression, potentially causing a denial of service...

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...