CLSA-2026-1792753697 Fix of 14 CVEs

CVE-2026-74480 - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 CVE-2026-74581 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 CVE-2026-80714 - ipvs: do not propagate one-packet flag to synced conns CVE-2026-80714 CVE-2026-43503 - net: skbuff: propagate...

CLSA-2026-1792753605 Fix of 16 CVEs

CVE-2026-74581 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 CVE-2026-46331 - net/sched: fix pedit partial COW leading to page cache corruption CVE-2026-46331 CVE-2026-64007 - netfilter: synproxy: refresh tcphdr after skbensurewritable CVE-2026-64007 CVE-2026-31532 - can: raw: fix...

CVE-2026-98783

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. The driver fails to verify whether the display overlay adaptor platform device is successfully registered during initialization. If the registration fails, the system attempts to use an invalid memory pointer,...

CVE-2026-98778

A flaw was found in the Linux kernel's Android Binder driver. This vulnerability allows a local user to cause a Denial of Service DoS or application disruption by triggering the unexpected closure of unrelated file descriptors in a target process. When an asynchronous transaction update supersede...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2023-54158: btrfs: don't free qgroup space unless specified bsc1256076. CVE-2023-54180: btrfs: handle case when repair happens with dev-replace bsc1255995...

SUSE-SU-2026:4892-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-54158: btrfs: don't free qgroup space unless specified bsc1256076. - CVE-2023-54180: btrfs: handle case when repair happens with dev-replace bsc1255995. -...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated...

CVE-2026-98777

A flaw was found in the Linux kernel's Android Binder inter-process communication IPC driver. When an asynchronous transaction supersedes an earlier pending transaction in a frozen process, the kernel frees the outdated transaction without releasing associated file descriptor references. A local...

K000163863: Linux kernel vulnerabilities CVE-2026-31554 and CVE-2026-63807

Security Advisory Description CVE-2026-31554 In the Linux kernel, the following vulnerability has been resolved: futex: Require sysfutexrequeue to have identical flags Nicholas reported that his LLM found it was possible to create a UaF when sysfutexrequeue is used with different flags. The initi...

CVE-2026-98774

A flaw was found in the Linux kernel's Rust Binder driver. When a thread terminates while handling an active outgoing transaction, deferred work items on the thread's task list are not properly cleaned up during thread release. A local attacker could exploit this vulnerability to cause a resource...

CVE-2026-98772

A flaw was found in the Linux kernel's USB serial subsystem. This flaw may result in a Denial of Service DoS due to a use-after-free vulnerability. During multiport device disconnection, a race condition allows background completion handlers to access port driver data after it has already been...

CVE-2026-98773

A flaw was found in the Linux kernel's CDC ACM Communications Device Class Abstract Control Model USB driver. A timing race condition during device disconnection and port closure can lead to a use-after-free vulnerability when communication requests attempt to access already freed memory buffers....

CVE-2026-98775

A flaw was found in the Linux kernel's Nitro Enclaves driver. An error-handling defect during enclave creation allows memory to be accessed after it has already been freed. A local attacker could exploit this use-after-free condition to cause a system crash, resulting in a Denial of Service DoS, ...

SUSE-SU-2026:4889-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf bsc1272386. - CVE-2026-68158: libceph: Fix multiplication overflow in...

SUSE-SU-2026:4888-1 Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-63795: 9p: avoid putting oldfid in p9clientwalk error path bsc1272136. - CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput append...

RLSA-2026:87375 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 For more details about the security issues, including the impact, a CVSS score,...

CVE-2026-98771

A flaw was found in the Linux kernel's Sierra Wireless USB storage driver. This vulnerability can lead to an information disclosure because the driver does not verify whether a complete data response is received from an attached device, leaving kernel memory uninitialized. A malicious or emulated...

CVE-2026-98770

A flaw was found in the Linux kernel's USB gadget MIDI 2.0 driver. Under-sized descriptor arrays allow a local user to trigger an out-of-bounds memory access when setting up a large number of MIDI jacks through the configuration filesystem configfs. This issue primarily results in memory corrupti...

CVE-2026-98769

A flaw was found in the Linux kernel's Universal Serial Bus USB audio gadget driver. A connected USB host can send a specially crafted audio control request with an invalid command index, causing an out-of-bounds heap memory read and write. This flaw primarily allows an attacker to cause a Denial...

CVE-2026-98767

A flaw was found in the Linux kernel's DWC3 USB gadget driver. When an invalid event buffer count exceeding the buffer size is encountered, the driver fails to acknowledge and clear the hardware interrupt source before returning. This leaves the interrupt line continuously asserted, triggering an...