SUSE CVE-2026-43460

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.117), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.117)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-43513 Source advisory: OSV:GHSA-5MP6-JRQ3-R938...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.117), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.117)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-43513 Source advisory: GHSA-5MP6-JRQ3-R938...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-41293 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-41293 Source advisory: OSV:GHSA-R29C-68GH-XP6X...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-41293 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-41293 Source advisory: GHSA-R29C-68GH-XP6X...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-42498 Source advisory: GHSA-FV25-8XCX-GQJC...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-43513 Source advisory: OSV:GHSA-5MP6-JRQ3-R938...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-41284 Source advisory: OSV:GHSA-GX5V-XP9W-J4CG...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.117), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.117)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-43514 Source advisory: OSV:GHSA-9M89-8FRQ-C98C...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-43514 Source advisory: OSV:GHSA-9M89-8FRQ-C98C...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-41284 Source advisory: GHSA-GX5V-XP9W-J4CG...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-43514 Source advisory: GHSA-9M89-8FRQ-C98C...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-42498 Source advisory: OSV:GHSA-FV25-8XCX-GQJC...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.117), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.117)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-43512 Source advisory: OSV:GHSA-H6FC-48RJ-7QQH...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-43512 Source advisory: GHSA-H6FC-48RJ-7QQH...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.21), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.21)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-43514 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-16643278...

PT-2026-61486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the spi: ep93xx driver where the system may dereference an error pointer. This occurs when the driver falls back to PIO Programmed Input/Output mode following a DMA...

CVE-2026-43460

A flaw was found in the Linux kernel's rockchip-sfc driver. This vulnerability occurs because the driver attempts to unregister a Serial Peripheral Interface SPI controller twice during device removal. This double-free operation can lead to memory corruption, which may allow a local attacker to...

CVE-2025-71299

A flaw was found in the Linux kernel's spi-cadence-quadspi driver. When processing Device Tree DT descriptions for attached flash devices, a missing or broken DT description can lead to a runtime power management PM disable in the error handling path of the probe function. This can result in...

EUVD-2026-28767

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic: spifc-a4: Fix DMA mapping error handling Fix three bugs in amlsfcdmabuffersetup error paths: 1. Unnecessary goto: When the first DMA mapping sfc-daddr fails, nothing needs cleanup. Use direct return instead of goto...