The vulnerability of the rxrpc_preparse_xdr_yfs_rxgk() function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the conntrack mechanism for monitoring network connections in the netfilter component of the Linux operating system’s kernel allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the conntrack mechanism for monitoring network connections in the netfilter component of the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...

The vulnerability of the mcp251x_open() function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver allows a hacker to cause a service failure.

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amdgpu_bo_create_list_entry_array() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c source file of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the amdgpubocreatelistentryarray function in the drivers/gpu/drm/amd/amdgpu/amdgpubolist.c source file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system leads to unmanageable resource consumption. Exploiting this vulnerability c...

The vulnerability of the wg_netns_exit_rtnl() function in the drivers/net/wireguard/device.c file of the network device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wgnetnsexitrtnl function in the drivers/net/wireguard/device.c file of the Linux kernel’s network device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the read_key_from_user_keying() function in the kernel/crash_dump_dm_crypt.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the readkeyfromuserkeying function in the kernel module crashdumpdmcrypt.c of the Linux operating system is related to the inclusion of proprietary information in the debugging code. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the blk_alloc_ext_minor() function in the block/genhd.c module, which supports the block-level kernel in the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the blkallocextminor function in the block/genhd.c module, which supports the block-level kernel in the Linux operating system, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the security_fs_context_dup() function in the security/security.c module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.

The vulnerability of the securityfscontextdup function in the security/security.c module of the Linux kernel’s security subsystem is related to the use of unreliable input data during security decision-making. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xfrm_policy_fini() function in the net/xfrm/xfrm_policy.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrmpolicyfini function in the net/xfrm/xfrmpolicy.c module, which is part of the Linux kernel’s networking functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the esp_output_done() function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the espoutputdone function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the smbdirect_socket_init() function in the fs/smb/common/smbdirect/smbdirect_socket.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the smbdirectsocketinit function in the fs/smb/common/smbdirect/smbdirectsocket.h module of the Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ext4_feature_set_ok() function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4featuresetok function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system is related to improper validation of consistency in input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the rxrpc_input_packet_on_conn() function in the net/rxrpc/io_thread.c module, which is part of the RxRPC session support for Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcinputpacketonconn function in the net/rxrpc/iothread.c module, which supports RxRPC session sockets in Linux kernels, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause service failures...

Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.45 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

SUSE-SU-2026:3771-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE-SU-2026:3770-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE-SU-2026:3768-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

CVE-2026-74731

A flaw was found in the Linux kernel's schedext component. A race condition can occur during the disabling of a sub-scheduler that was never properly linked into the scheduler hierarchy. This can lead to a use-after-free vulnerability, where exited tasks are re-homed onto a dying hierarchy. This...