SUSE-SU-2026:24371-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull bsc1255531. - CVE-2026-43091: xfrm: Wait for RCU readers during policy netns...

CLSA-2026-1783791022 Fix of 64 CVEs

CVE-2026-31607 - usbip: validate numberofpackets in usbippackretsubmit CVE-2026-31607 CVE-2026-31527 - driver core: platform: use generic driveroverride infrastructure CVE-2026-31527 CVE-2026-43493 - crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 CVE-2026-43038 - ipv6: icmp:...

SUSE-SU-2026:24379-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull bsc1255531. - CVE-2026-43091: xfrm: Wait for RCU readers during policy netns...

CLSA-2026-1779202181 Fix CVE(s): CVE-2022-50067, CVE-2026-46300, CVE-2026-46333

Ubuntu: 4.15.0-256.267 CVE-2026-46333 - ptrace: require CAPSYSPTRACE when task has no mm CVE-2026-46333 CVE-2026-46300 - net: skbuff: propagate shared-frag marker through copy/coalesce/gro/shift paths CVE-2026-46300 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags...

CLSA-2026-1791858923 Fix of 174 CVEs

CVE-2026-90205 - ocfs2: validate orphan slot during inode read CVE-2026-90205 CVE-2026-93054 - uio: Fix stale info pointer in failed registration path CVE-2026-93054 CVE-2026-93103 - RDMA/hfi1: Preserve unit 0 on allocation failure CVE-2026-93103 CVE-2026-89833 - f2fs: fix to avoid potential...

CVE-2026-98617

A flaw was found in the Linux kernel's Meta Host Network Interface fbnic driver. The driver incorrectly associates receive queues with network processing vectors and fails to verify whether the datapath is active before allocating queue memory. A privileged local user could trigger this flaw duri...

CVE-2026-98616

A flaw was found in the Linux kernel's fbnic driver. This flaw allows a local user to trigger a kernel crash, resulting in a Denial of Service DoS. During power management suspend or failed resume operations, the driver frees interrupt vectors without clearing the active vector counter. When the...

CVE-2026-98615

A flaw was found in the Linux kernel's fbnic network driver. A local user with administrative privileges could trigger a Denial of Service DoS by initiating a reset or teardown of the firmware mailbox. Because the driver fails to properly drain pending write requests from the hardware pipeline...

CVE-2026-98614

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS by triggering an infinite loop during retransmission path selection. When all candidate network paths are in an unconfirmed...

CVE-2026-98612

A flaw was found in the Linux kernel's CATC USB Ethernet driver. The driver fails to properly validate packet length boundaries when processing incoming multi-packet network transfers. An attacker could exploit this flaw by providing crafted packet headers, causing the driver to read beyond the...

CVE-2026-98613

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local user with permissions to load BPF programs can trigger a Denial of Service DoS by creating deeply nested or cyclical object references using local kernel pointers. During object cleanup, synchronous recursive...

CVE-2026-98611

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. The bpfcryptoctxcreate function attempts to read reserved fields from a parameter structure prior to verifying that the supplied buffer is sufficiently large. A local user capable of loading BPF programs can exploit this...

CVE-2026-98610

A flaw was found in the Linux kernel's Hierarchical Fair Service Curve HFSC network packet scheduler. A local user with network administration privileges, such as within a user namespace, can exploit this flaw to cause a Denial of Service DoS. Due to a lack of revalidation when traffic class leve...

Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed: CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

CVE-2026-98642

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF memory allocator. A race condition occurs when bulk memory allocation and memory cleanup run concurrently without adequate synchronization. A local attacker could exploit this flaw to trigger a use-after-free condition, leading to ...

CVE-2026-98738

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs when the Security Manager Protocol SMP accesses remote Out-of-Band OOB pairing data without proper locking while the data is concurrently being removed. A local attacker can exploit this flaw to trigger a...

CVE-2026-98733

A flaw was found in the Linux kernel's Bluetooth subsystem. Inadequate synchronization when handling fragmented isochronous ISO data packets allows a race condition between packet queueing and transmission operations. A local user could exploit this flaw to trigger a use-after-free condition,...

CVE-2026-98737

A flaw was found in the Linux kernel's Bluetooth subsystem. This flaw allows a local user to cause a Denial of Service DoS or potentially escalate privileges due to a use-after-free condition. The issue arises from a race condition where synchronous command routines access inquiry cache entries...

CVE-2026-98708

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user could exploit this flaw to cause a Denial of Service DoS or system instability. During in-place channel context replacement, an old channel context can be freed prematurely while still referenced by its replacement...

CVE-2026-98696

A flaw was found in the Linux kernel's USB serial subsystem. A local user with administrative privileges could exploit this flaw to cause a Denial of Service DoS or memory corruption. During the unloading of a USB serial driver module, drivers are deregistered in an incorrect sequence, allowing...