SUSE-SU-2026:3775-1 Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

SUSE-SU-2026:3774-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-3176)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : USB: core: Limit the length of unkillable synchronous timeoutsCVE-2026-43428 usb: typec: ucsi: validate connector number in...

The vulnerability of the `bnxt_async_event_process()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` file of the Ethernet network adapter driver for Broadcom’s Linux operating system, which allows a hacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the bnxtasynceventprocess function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Ethernet network adapter driver for Broadcom’s Linux operating system is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability coul...

The vulnerability of the audit_classes_init() function in the lib/audit.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the auditclassesinit function in the lib/audit.c module of the Linux kernel is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the read_dma_buffer() function in the drivers/hid/intel-thc-hid/intel-thc/intel-thc-dma.c driver module of the Linux kernel’s input device subsystem allows a hacker to cause a service failure.

The vulnerability of the readdmabuffer function in the drivers/hid/intel-thc-hid/intel-thc/intel-thc-dma.c file of the Linux kernel subsystem for controlling peripheral devices is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the bpf_int_jit_compile() function in the arch/arm64/net/bpf_jit_comp.c module, which is part of the network support functionality on the ARM 64-bit kernel of the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpfintjitcompile function in the arch/arm64/net/bpfjitcomp.c module, which is part of the networking support on the ARM 64-bit Linux operating system, is related to errors during pointer scaling. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the lec_arp_clear_vccs() function in the net/atm/lec.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the lecarpclearvccs function in the net/atm/lec.c module, which is part of the networking functions in the Linux kernel, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mt76_connac2_mac_write_txwi_80211() function in the drivers/net/wireless/mediatek/mt76/mt76_connac_mac.c file of the mediatek wireless adapter driver for the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the mt76connac2macwritetxwi80211 function in the drivers/net/wireless/mediatek/mt76/mt76connacmac.c file of the wireless adapter driver for mediatek’s Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...

The vulnerability of the functions alx_suspend() and alx_resume() in the drivers/net/ethernet/atheros/alx/main.c file of the Linux kernel’s Ethernet network adapter driver allows a hacker to cause a service failure.

The vulnerability of the functions alxsuspend and alxresume in the drivers/net/ethernet/atheros/alx/main.c file of the Linux kernel’s Ethernet network adapter driver is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the spi_register_controller() function in the drivers/spi/spi.c module of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the spiregistercontroller function in the drivers/spi/spi.c module of the Linux operating system’s SPI device driver lies in the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the pm_restore_gfp_mask() function in the kernel/power/main.c file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pmrestoregfpmask function in the kernel/power/main.c file of the Linux operating system is related to a violation of expected behavior. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the `tcp_bpf_send_verdict()` function in the `net/ipv4/tcp_bpf.c` module, which is part of the IPv4 protocol implementation in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the tcpbpfsendverdict function in the net/ipv4/tcpbpf.c module of the Linux operating system’s IPv4 protocol implementation leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qlt_free_session_done() function in the drivers/scsi/qla2xxx/qla_target.c driver for Linux SCSI device drivers allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the qltfreesessiondone function in the drivers/scsi/qla2xxx/qlatarget.c driver for Linux SCSI device drivers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected...

The vulnerability of the ice_devlink_reinit_down() function in the drivers/net/ethernet/intel/ice/devlink/devlink.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icedevlinkreinitdown function in the drivers/net/ethernet/intel/ice/devlink/devlink.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the pointer L. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to insufficient logging. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, a...

The vulnerability of the rvu_mbox_handler_cgx_set_link_mode() and _sdp_init() functions in the Ethernet adapter driver for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the rvumboxhandlercgxsetlinkmode and sdpinit functions in the Ethernet adapter driver for Linux operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mpfs_sys_controller_probe() function in the drivers/soc/microchip/mpfs-sys-controller.c file of the SOC kernel driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mpfssyscontrollerprobe function in the drivers/soc/microchip/mpfs-sys-controller.c file of the Linux operating system’s SOC System on Chip kernel module is related to improper memory release. Exploitation of this vulnerability can allow a remote attacker to cause a servic...

The vulnerability of the smc_rx_pipe_buf_release() function in the net/smc/smc_rx.c module of the SMC protocol family, which is part of the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smcrxpipebufrelease function in the net/smc/smcrx.c module of the SMC protocol family implementation in the Linux operating system’s kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...