CLSA-2026-1792367386 TuxCare security update for @next/swc-linux-arm64-gnu (2 CVEs)

TuxCare rebuilt @next/swc-linux-arm64-gnu to address 2 CVEs. Fixed in 15.5.23-tuxcare.2...

CLSA-2026-1792367383 TuxCare security update for @next/swc-linux-arm64-gnu (2 CVEs)

TuxCare rebuilt @next/swc-linux-arm64-gnu to address 2 CVEs. Fixed in 15.5.24-tuxcare.2...

CLSA-2026-1792367384 TuxCare security update for @next/swc-linux-arm64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-arm64-gnu to address 1 CVE. Fixed in 15.5.26-tuxcare.2...

CLSA-2026-1792367382 TuxCare security update for @next/swc-linux-arm64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-arm64-gnu to address 1 CVE. Fixed in 15.5.25-tuxcare.2...

CLSA-2026-1792367381 TuxCare security update for @next/swc-linux-arm64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-arm64-gnu to address 1 CVE. Fixed in 15.5.26-tuxcare.1...

CLSA-2026-1792367380 TuxCare security update for @next/swc-linux-arm64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-arm64-gnu to address 1 CVE. Fixed in 15.5.24-tuxcare.1...

CLSA-2026-1792367379 TuxCare security update for @next/swc-linux-arm64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-arm64-gnu to address 1 CVE. Fixed in 15.5.23-tuxcare.1...

CLSA-2026-1792367377 TuxCare security update for @next/swc-linux-arm64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-arm64-gnu to address 1 CVE. Fixed in 15.5.25-tuxcare.1...

SUSE CVE-2026-98433

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix secure device page leak on uvpagein failure In kvmppcsvmpagein, if uvpagein fails after kvmppcuvmemgetpage has succeeded, the secure device page is never released. kvmppcuvmemgetpage sets a bit in...

SUSE CVE-2026-98434

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

SUSE CVE-2026-98437

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

SUSE CVE-2026-98438

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...

SUSE CVE-2026-98439

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...

SUSE CVE-2026-98440

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction We free the shadow S2 structures from kvmarchflushshadowall, which is a Bad Ideatm. Freeing the page tables is fair game this is what this callback is for...

SUSE CVE-2026-98441

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up processing both again but with different sets of extensions. The series of events: 1. The...

SUSE CVE-2026-98442

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport - nfctexpectinsert -...

SUSE CVE-2026-98443

In the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer handling when recovering iunlink buckets LOLLM pointed out a bug in xlogrecoveriunlinkbucket: 1. We don't null out previp after releasing it, which can lead to UAF problems if the inodegc flush call in...

SUSE CVE-2026-98444

In the Linux kernel, the following vulnerability has been resolved: xfs: drop dquot flush lock when we can't find a buffer to flush LOLLM noticed that xfsqmflushone fails to drop the dquot flush lock if it can't grab the buffer associated with the dquot. Since there's no buffer, nobody else is...

SUSE CVE-2026-98446

In the Linux kernel, the following vulnerability has been resolved: xfs: don't let hiddenspace go negative in xfsmetafileresvinit LOLLM points out that if the amount of fdblocks that we can reserve for a metadata btree file goes below the space already used by that file, then the hiddenspace...

SUSE CVE-2026-98447

In the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots LOLLM noticed that the inode btree root formatting methods copy too many bytes -- there's only one set of keys in node blocks, not two. This causes memory...