SUSE CVE-2022-49615

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error The initial settings will be written before the codec probe function. But, the rt711-component doesn't be assigned yet. If IO error happened during initial...

SUSE CVE-2022-49631

In the Linux kernel, the following vulnerability has been resolved: raw: Fix a data-race around sysctlrawl3mdevaccept. While reading sysctlrawl3mdevaccept, it can be changed concurrently. Thus, we need to add READONCE to its reader...

SUSE CVE-2022-49660

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2022-49672

In the Linux kernel, the following vulnerability has been resolved: net: tun: unlink NAPI from device on destruction Syzbot found a race between tun file and device destruction. NAPIs live in struct tunfile which can get destroyed before the netdev so we have to del them explicitly. The current...

SUSE CVE-2022-49683

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Fix refcount leak in adiaxiadcattachclient ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

SUSE CVE-2022-49689

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2022-49690

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2022-49723

In the Linux kernel, the following vulnerability has been resolved: drm/i915/reset: Fix errorstateread ptr + offset use Fix our pointer offset usage in errorstateread when there is no i915gpucoredump but buf offset is non-zero. This fixes a kernel page fault can happen when multiple tests are...

SUSE CVE-2024-57782

An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service...

SUSE CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

SUSE CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

SUSE CVE-2025-26791

DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting mXSS...

SUSE CVE-2025-27221

In the URI gem before 1.0.3 for Ruby, the URI handling methods URI.join, URImerge, URI+ have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host...

SUSE SLES12 Security Update : socat (SUSE-SU-2025:0726-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:0726-1 advisory. - CVE-2015-1379: lack of async-signal-safe signal handlers can lead to crashes or freezing of socat processes bsc922903. Tenable has extracted the...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2025:0734-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0734-1 advisory. - CVE-2025-26594: Use-after-free of the root cursor bsc1237427. - CVE-2025-26595: Buffer overflow in XkbVModMaskText bsc1237429. -...

SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2025:0731-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0731-1 advisory. - CVE-2025-26594: Use-after-free of the root cursor bsc1237427. - CVE-2025-26595: Buffer overflow in XkbVModMaskText bsc1237429. -...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xwayland (SUSE-SU-2025:0729-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0729-1 advisory. - CVE-2025-26594: Use-after-free of the root cursor bsc1237427. - CVE-2025-26595: Buffer overflo...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2025:0723-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0723-1 advisory. Update to version 9.1.1101: - CVE-2024-43790: possible out-of-bounds read when performing a sear...

SUSE SLED15: xorg-x11-server / xorg-x11-server-Xvfb / xorg-x11-server-extra / etc (SUSE-SU-2025:0730-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0730-1 advisory. - CVE-2025-26594: Use-after-free of the root cursor bsc1237427. - CVE-2025-26595: Buffer overflo...

SUSE SLES12 Security Update : procps (SUSE-SU-2025:0725-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0725-1 advisory. - Integer overflow due to incomplete fix for CVE-2023-4016 can lead to segmentation fault in ps command when pid argument has a leading space bsc123684...