SUSE-SU-2026:24285-1 Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT pa...

SUSE-SU-2026:24329-1 Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT pa...

SUSE-SU-2026:24284-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT pa...

SUSE-SU-2026:24328-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT pa...

SUSE-SU-2026:24327-1 Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT pa...

SUSE-SU-2026:24283-1 Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT pa...

kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

kernel: ipv6: validate extension header length before copying to cmsg

A flaw was found in the Linux kernel's IPv6 networking stack. An unprivileged local user could exploit a vulnerability in how IPv6 extension header lengths are handled. By manipulating these headers using nftables, an attacker can trigger an out-of-bounds read, leading to information disclosure...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...

kernel: ipv6: exthdrs: refresh nh after handling HAO option

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option HAO, the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value TLV options,...

kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()

A flaw was found in the Linux kernel's SCSI target subsystem. This vulnerability, a buffer overflow, occurs in the tgptgpmembersshow function when processing long iSCSI IQN names. An attacker could potentially exploit this by providing a specially crafted input, leading to the disclosure of...

SUSE-SU-2026:4733-1 Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

CVE-2026-98435

A flaw was found in the Linux kernel's Altera EDAC Error Detection and Correction driver. Device-managed interrupt requests and resource groups in the altrportbsetup function were improperly associated with a temporary per-port device structure rather than the parent device. A local privileged us...

CVE-2026-98434

A flaw was found in the Linux kernel. Due to a missing range validation check in the sysctl subsystem, configured minimum and maximum limits were not enforced during specific millisecond-to-jiffies conversions. A local user with permission to modify kernel parameters could provide out-of-bounds...

CVE-2026-98433

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for PowerPC architectures. When handling secure virtual machines, a failure during secure memory paging fails to release allocated device memory and internal metadata. A local user can exploit this vulnerability by...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix integer overflow in rununpack volume boundary check The volume boundary check lcn + len sbi-used.bitmap.nbits utilizes raw addition, which can wrap around for large lcn and len values, thereby bypassing validation. Use...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: nflog: validate MAC header was set before dumping it The fallback path of dumpmacheader guards access to the MAC header only when “skb-macheader != skb-networkheader”, without checking skbmacheaderwasset. When the MAC...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: bound bootloader receive buffering cc1352bootloaderrx appends each serdev chunk to the fixed rxbuffer prior to parsing bootloader packets. This helper can retain leftover bytes between callbacks, and may...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Protect RNDIS options with mutex The class/subclass/protocol options are susceptible to race conditions, as they can be accessed concurrently via configfs. Use an existing mutex to protect these options. This...