The vulnerability in the vdpa_nl_policy structure of the drivers/vdpa/vdpa.c module of the vDPA device driver for the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vdpanlpolicy structure in the drivers/vdpa/vdpa.c file of the vDPA device driver for the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `setup_backlight_device()` function of the `drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c` file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the setupbacklightdevice function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an...

The vulnerability of the ext4_feature_set_ok() function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4featuresetok function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system is related to improper validation of consistency in input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the xfrm_policy_fini() function in the net/xfrm/xfrm_policy.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrmpolicyfini function in the net/xfrm/xfrmpolicy.c module, which is part of the Linux kernel’s networking functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the simplify_symbols() function in the kernel/module/main.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the simplifysymbols function in the kernel/module/main.c module of the Linux operating system is related to the improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rxrpc_input_packet_on_conn() function in the net/rxrpc/io_thread.c module, which is part of the RxRPC session support for Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcinputpacketonconn function in the net/rxrpc/iothread.c module, which supports RxRPC session sockets in Linux kernels, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the rxrpc_post_response() function in the net/rxrpc/conn_event.c module exposes session sockets supported by the RxRPC support in the Linux operating system, allowing a attacker to cause a service failure.

The vulnerability of the rxrpcpostresponse function in the net/rxrpc/connevent.c module, which is part of the RxRPC session support in Linux kernel, is related to incorrect comparisons when using erroneous factors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the rxrpc_preparse_xdr_yfs_rxgk() function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.45 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

SUSE-SU-2026:3771-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE-SU-2026:3770-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE-SU-2026:3768-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

CVE-2026-74731

A flaw was found in the Linux kernel's schedext component. A race condition can occur during the disabling of a sub-scheduler that was never properly linked into the scheduler hierarchy. This can lead to a use-after-free vulnerability, where exited tasks are re-homed onto a dying hierarchy. This...

CVE-2026-74724

A flaw was found in the Linux kernel's IPVS IP Virtual Server component. A local attacker can exploit this vulnerability by manipulating packets processed by IPVS, specifically within the ipvsnaticmp function. This manipulation can lead to an out-of-bounds write due to improper handling of the IP...

CVE-2026-74723

A flaw was found in the Linux kernel. A local attacker could craft a btrfs image with a malformed LZO compressed file extent. This could lead to an out-of-bounds read during decompression, potentially causing a denial of service...

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

SUSE-SU-2026:3761-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...