SUSE SLED15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:3658-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3658-1 advisory. Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-74 bsc1274867 - CVE-2026-74934: Site...

Linux Distros Unpatched Vulnerability : CVE-2026-74656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: fix use-after-free in fibnhcupdatemtu fibnhcupdatemtu walks the nexthop exception table under RTNL, but RTNL does not serialize this walk with PMTU...

Linux Distros Unpatched Vulnerability : CVE-2026-74675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which...

Linux Distros Unpatched Vulnerability : CVE-2026-76017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted networ...

Linux Distros Unpatched Vulnerability : CVE-2026-74629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/dibs: Correct freeing of dmbclientidarr A dibs device interrupt handler can be active after dibsdevdel and may still access dmbclientidarr. UAF In case of a...

Linux Distros Unpatched Vulnerability : CVE-2026-74687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: at91sam9wdt: prevent timer rearm during teardown at91ping rearms the watchdog timer from its callback. timerdelete neither waits for a running callbac...

Linux Distros Unpatched Vulnerability : CVE-2026-74637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Fix group leader use-after-free after sibling detach perfgroupdetach handles leader and sibling detach differently. When the group leader is detached...

Linux Distros Unpatched Vulnerability : CVE-2026-74608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: Fix use-after-free in cifstryaddingchannels cifstryaddingchannels takes a temporary reference to an interface before dropping ifacelock. If...

Linux Distros Unpatched Vulnerability : CVE-2026-74730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed...

PT-2026-79692

In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9 wdt: prevent timer rearm during teardown at91 ping rearms the watchdog timer from its callback. timer delete neither waits for a running callback nor prevents it from rearming the timer, so probe failure or...

PT-2026-79647

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in ump to endpoint caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the...

PT-2026-79634

In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmb clientid arr A dibs device interrupt handler can be active after dibs dev del and may still access dmb clientid arr. UAF In case of a failure in dibs dev add being called by dibs lo dev probe dmb...

PT-2026-79593

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctp outq flush rtx moves a gap-acked chunk onto another transport's transmitted list without updating chunk-transport: if chunk-tsn gap acked list move...

PT-2026-79693

In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctp make heartbeat ack caches the destination transport in chunk-transport without taking a reference. When src out of asoc ok is enabled, the HEARTBEAT ACK may remain...

PT-2026-79695

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism dev exit A ism interrupt handler can be active in parallel with ism dev exit, accessing freed data structures. No new interrupts will be generated after unregister ieq. Drain ongoing...

PT-2026-79644

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs on resubmission capture urb complete resubmits each capture URB without anchoring it: usb get urburb; ret = usb submit urburb, GFP ATOMIC; Anchoring is a property of a submission, not of th...

PT-2026-79735

In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfs server' during a FREE STATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREE STATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the...

PT-2026-79614

In the Linux kernel, the following vulnerability has been resolved: tipc: read le-link under the node lock in tipc node link down tipc node link down caches the link pointer before taking n-lock: struct tipc link l = le-link; / unlocked / if !l return; tipc node write lockn; if !tipc link is...

Linux Distros Unpatched Vulnerability : CVE-2026-74588

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a gap- acked chunk onto another transport's transmitted list without...

Linux Distros Unpatched Vulnerability : CVE-2026-74604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert thermal/drivers/hwmon: Cleanup coding style a bit Revert commit 030a48b0f6ce thermal/drivers/hwmon: Cleanup coding style a bit that introduced a...