Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2023-54158: btrfs: don't free qgroup space unless specified bsc1256076. CVE-2023-54180: btrfs: handle case when repair happens with dev-replace bsc1255995...

SUSE-SU-2026:4892-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-54158: btrfs: don't free qgroup space unless specified bsc1256076. - CVE-2023-54180: btrfs: handle case when repair happens with dev-replace bsc1255995. -...

CLSA-2026-1792752282 kernel: Fix of 90 CVEs

can: esdusb: kill anchored URBs before freeing netdevs CVE-2026-64585 - ext4: fix kernel BUG in ext4writeinlinedataend CVE-2026-74308 - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop CVE-2026-72348 - xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst...

CLSA-2026-1792751773 kernel: Fix of 88 CVEs

can: esdusb: kill anchored URBs before freeing netdevs CVE-2026-64585 - ext4: fix kernel BUG in ext4writeinlinedataend CVE-2026-74308 - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop CVE-2026-72348 - xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst...

CLSA-2026-1792751700 kernel: Fix of 106 CVEs

net: skbuff: propagate shared-frag marker in skbzerocopy - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 - net: skbuff: propagate shared-frag marker through frag-transfer helpers CVE-2026-43503 - ALSA: virtio: reset device before deleting virtqueues CVE-2026-98264 - ALSA: usb-audio:...

CLSA-2026-1792750763 kernel: Fix of 91 CVEs

net: skbuff: propagate shared-frag marker in skbzerocopy - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 - net/sched: fix pedit partial COW leading to page cache corruption CVE-2026-46331 - ipvs: do not...

CLSA-2026-1792749577 kernel: Fix of 97 CVEs

net: skbuff: propagate shared-frag marker in skbzerocopy - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 - net/sched: fix pedit partial COW leading to page cache corruption CVE-2026-46331 - ipvs: do not...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated...

CVE-2026-98777

A flaw was found in the Linux kernel's Android Binder inter-process communication IPC driver. When an asynchronous transaction supersedes an earlier pending transaction in a frozen process, the kernel frees the outdated transaction without releasing associated file descriptor references. A local...

K000163863: Linux kernel vulnerabilities CVE-2026-31554 and CVE-2026-63807

Security Advisory Description CVE-2026-31554 In the Linux kernel, the following vulnerability has been resolved: futex: Require sysfutexrequeue to have identical flags Nicholas reported that his LLM found it was possible to create a UaF when sysfutexrequeue is used with different flags. The initi...

CVE-2026-98774

A flaw was found in the Linux kernel's Rust Binder driver. When a thread terminates while handling an active outgoing transaction, deferred work items on the thread's task list are not properly cleaned up during thread release. A local attacker could exploit this vulnerability to cause a resource...

CVE-2026-98773

A flaw was found in the Linux kernel's CDC ACM Communications Device Class Abstract Control Model USB driver. A timing race condition during device disconnection and port closure can lead to a use-after-free vulnerability when communication requests attempt to access already freed memory buffers....

CVE-2026-98772

A flaw was found in the Linux kernel's USB serial subsystem. This flaw may result in a Denial of Service DoS due to a use-after-free vulnerability. During multiport device disconnection, a race condition allows background completion handlers to access port driver data after it has already been...

CVE-2026-98775

A flaw was found in the Linux kernel's Nitro Enclaves driver. An error-handling defect during enclave creation allows memory to be accessed after it has already been freed. A local attacker could exploit this use-after-free condition to cause a system crash, resulting in a Denial of Service DoS, ...

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf bsc1272386. CVE-2026-68158: libceph: Fix multiplication overflow in...

SUSE-SU-2026:4889-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf bsc1272386. - CVE-2026-68158: libceph: Fix multiplication overflow in...

Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: CVE-2026-63795: 9p: avoid putting oldfid in p9clientwalk error path bsc1272136. CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput appends to...

SUSE-SU-2026:4888-1 Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-63795: 9p: avoid putting oldfid in p9clientwalk error path bsc1272136. - CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput append...

Exploit for Use After Free in Google Android

CVE-2019-2215 on Skyworth / Coocaa TVs 9S60, Android 8.0 Te...

RLSA-2026:87374 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 For more details about the...