USN-8629-3: Linux kernel (HWE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...

USN-8629-3 linux-hwe-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...

CVE-2026-72318

A flaw was found in the Linux kernel's CIFS component. A remote attacker could exploit this vulnerability by providing a specially crafted Distributed File System DFS referral. The system fails to properly validate string offsets within these referrals, which can lead to an out-of-bounds read. Th...

CVE-2026-72319

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. This vulnerability occurs when the system processes Internet Control Message Protocol ICMP errors originating from network tunnels. Specifically, after stripping outer packet headers, the IPVS component fails to ensure that...

SUSE-SU-2026:23241-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command...

CVE-2026-71878

creationtimestamp| type| source ---|---|--- 2026-08-18 20:09:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtezikaxm22j 2026-08-18 21:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf4d3ujvs2j...

SUSE-SU-2026:23194-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command...

CVE-2026-72298

A flaw was found in the Linux kernel's qrtr network component. On 32-bit systems, a 32-bit integer overflow can occur in the qrtrendpointpost function when processing an incoming packet. This overflow can bypass a size validation check, leading to an out-of-bounds write and causing the kernel to...

CVE-2026-72297

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking module. This vulnerability occurs due to insufficient validation of traffic classes during Quality of Service QoS setup. A local user can exploit this by providing out-of-range traffic class values, which are then...

CVE-2026-72295

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for LoongArch architecture. An unvalidated interrupt controller irqchip index in the irqfd routing mechanism could allow a local attacker to perform an out-of-bounds memory access. This could lead to a denial of service or...

CVE-2026-72289

A flaw was found in the KVM Kernel-based Virtual Machine arm64 vgic Virtual Generic Interrupt Controller component of the Linux kernel. During interrupt migration, the vgicpruneaplist function temporarily drops and reacquires locks. If an interrupt is removed from the active processor list aplist...

CVE-2026-72284

A flaw was found in the Kernel-based Virtual Machine KVM subsystem of the Linux kernel, specifically in the handling of Paravirtualized End Of Interrupt PV EOI for x86 virtual CPUs. A local attacker in a guest virtual machine could exploit a race condition where a virtual CPU disables PV EOIs aft...

CVE-2026-72283

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. This vulnerability occurs when the system fails to update an Interrupt Remapping Table Entry IRTE for a bypass operation, which can leave a pointer to a memory location that has already been freed a 'dangling...

CVE-2026-72282

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. The kvmiobusgetdev function, responsible for retrieving I/O bus devices, could return a device that is only matched by its memory address. This creates a race condition where the device might be deallocated before...

SUSE-SU-2026:23193-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command...

CVE-2026-72279

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel. KVM on arm64 architectures incorrectly maps the L1 Virtual Nested Control Register VNCR into the host stage-1, failing to respect read-only memory regions. This could allow a malicious guest to write to a...

CVE-2026-72274

A flaw was found in the Linux kernel's fbdev hecubafb module. A local attacker could exploit this by triggering an error path during the initialization of the hecubafb module. This could lead to a memory leak, potentially causing a denial of service due to resource exhaustion...

CVE-2026-72270

A flaw was found in the Linux kernel's s3fb driver, which handles S3 graphics cards. This vulnerability involves a memory leak within the s3pciprobe function. When certain error conditions occur, memory allocated for display mode lists is not properly freed. This oversight could allow an attacker...

CVE-2026-72261

A flaw was found in the Linux kernel's Sound Open Firmware SOF subsystem, specifically within the ipc3-control component. This vulnerability occurs in the sndsofupdatecontrol function where the size of firmware-provided data is not properly validated against the allocated buffer size. An attacker...

CVE-2026-72258

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture System on Chip ASoC Mediatek MT8183 audio driver. The Audio Front End AFE probe assigns reserved memory but does not release it when the driver is removed or if probe failures occur. This oversight can lead to a memory leak,...