Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-50453: gpiolib: cdev: fix NULL-pointer dereferences bsc1250887. CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue...

The vulnerability of the pci_rootport_aer_stats_incr() function in the drivers/pci/pcie/aer.c module of the Linux operating system’s PCI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pcirootportaerstatsincr function in the drivers/pci/pcie/aer.c module of the Linux operating system’s PCI device driver lies in the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

PT-2026-34373

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the dma-buf feature of the vfio/pci component. The error path within the vfio pci core feature dma buf function incorrectly triggers the entire unwind chain...

The vulnerability of the hisi_pcie_pmu_offline_cpu() function in the drivers/perf/hisilicon/hisi_pcie_pmu.c driver, a performance monitoring driver for Linux kernels, allows a hacker to cause a service failure.

The vulnerability of the hisipciepmuofflinecpu function in the drivers/perf/hisilicon/hisipciepmu.c driver for monitoring Linux kernel performance is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE CVE-2026-23361

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

CVE-2026-23361

A flaw was found in the Linux kernel. A race condition exists in the handling of Message Signaled Interrupts eXtended MSI-X within the PCI subsystem. When an MSI-X interrupt is raised, a PCI posted write transaction may not complete before its associated Address Translation Unit ATU entry is...

CVE-2026-23361

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

UBUNTU-CVE-2026-23361

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

CVE-2026-23361

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

CVE-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

The vulnerability of the pci_get_other_drvdata() function in the drivers/net/ethernet/mellanox/mlx5/core/dev.c file of the Mellanox Ethernet network adapter support driver for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the pcigetotherdrvdata function in the drivers/net/ethernet/mellanox/mlx5/core/dev.c file of the Mellanox Ethernet adapter support driver in the Linux operating system is related to an unauthorized call to a verification function. Exploiting this vulnerability could allow an...

PT-2026-34361

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel between a concurrent split and refault of a PUD entry. Specifically, the splitting of a PUD entry in the walk pud range function can race with...

CVE-2026-23361: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

The vulnerabilities of the functions ath11kpcipm_suspend() and ath11kpcipm_resume() in the drivers/net/wireless/ath/ath11k/pci.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the functions ath11kpcipmsuspend and ath11kpcipmresume in the drivers/net/wireless/ath/ath11k/pci.c module of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to the execution of operations outside of the buffer in memory...

The vulnerability of the zpci_device_reserved() function in the arch/s390/pci/pci.c module of the S390 platform support module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zpcidevicereserved function in the arch/s390/pci/pci.c module of the S390 platform support library in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

USN-8116-1: Linux kernel (Intel IoTG Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - ATM...

Linux Distros Unpatched Vulnerability : CVE-2026-23264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert drm/amd: Check if ASPM is enabled from PCIe subsystem This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied...

SUSE CVE-2026-23264

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after commit 0ab5d711ec74 "drm/amd: Refactor amdgpuaspm to be...

CVE-2026-23264

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after commit 0ab5d711ec74 "drm/amd: Refactor amdgpuaspm to be...

CVE-2026-23264 Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after commit 0ab5d711ec74 "drm/amd: Refactor amdgpuaspm to be...