openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21910-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21910-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214:...

PT-2026-98713

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.48 Description A concurrency issue exists in the mlxsw spectrum PTP implementation. The function mlxsw sp1 ptp ht gc collect is executed from a garbage-collection workqueue rather than the NAPI poll context...

PT-2026-98762

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the net/ipv6/mcast.c component, RCU-protected lists including np-ipv6 mc list, idev-mc list, and idev-mc tomb are updated using direct pointer assignments instead of the required rcu...

CVE-2026-98099

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcuassignpointer for rcu list updates Several places in net/ipv6/mcast.c update RCU-protected lists np-ipv6mclist, idev-mclist, idev-mctomb using direct pointer assignments instead of rcuassignpointer: 1. In...

PT-2026-98539

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the ieee802154 module within the hwsim component. The hwsim update pib function performs an unserialized read-swap-free operation on phy-pib. While the...

PT-2026-98543

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the idpf driver where Tx/Rx DIM works are not drained before the memory they reside in is freed. The tx dim and rx dim works are embedded in the idpf q vector...

PT-2026-98573

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ASOC ALSA System on Chip sti component, the uni reader init function registers a shared IRQ before initializing the reader-irq lock variable. This sequence allows a pending...

PT-2026-98583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the tracing component. The event hist trigger named init function adds a trigger to the global named triggers list before completing its...

PT-2026-98815

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the NVMe subsystem where the nvme query fdp info function is called per-path, leading to potential concurrent access issues. Specifically, the function populat...

PT-2026-98463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mptcp scheduler during subflow sockets state changes. This occurs when data transmission on a selected socket fails, potentially leading to a subsequent...

PT-2026-98493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs healthmon unmount function performs an unlocked insertion of the unmount event into the health monitor's event list. This lack of...

PT-2026-98507

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Multipath TCP MPTCP implementation between the disconnect function and the retransmission rtx process. This race can lead to an inconsistent status within...

PT-2026-98667

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RISC-V IOMMU Input-Output Memory Management Unit where command queue publishing is not properly serialized. This can lead to the software producer state advancing...

PT-2026-98695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Concurrent subbuffer resizes in the tracing component can lead to crashes of trace pipe raw readers or the leakage of uninitialized memory to userspace caused by stale size values. The...

Linux Distros Unpatched Vulnerability : CVE-2026-98099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: mcast: use rcuassignpointer for rcu list updates Several places in net/ipv6/mcast.c update RCU-protected lists np-ipv6mclist, idev-mclist, idev-mctomb usi...

CVE-2026-98101: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use copy-on-write RCU updates in ip6mcsource pmc-sflist is read locklessly under rcureadlock by inet6mccheck during packet reception in the UDP and RAW multicast receive paths. ip6mcsource mutated psl-sladdr and...

SUSE CVE-2026-93218

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...

SUSE CVE-2026-93239

In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Fix the lockless page-table walk in showpte showpte walks page tables locklessly and can run with interrupts enabled. A concurrent teardown can free a table page while it is being walked. It can also clear a parent ent...

SUSE CVE-2026-93247

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix 'hdev-discovery.uuids' NULL dereference 'uuidcount' member of struct 'discoverystate' is assigned and read without any locks, so there is a chance of situation when uuidcount != 0, but uuids is NULL and there...

SUSE CVE-2026-93285

In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fsgckthread in f2fssbinfo Instead of allocating f2fsgckthread dynamically, embed it in f2fssbinfo. This simplifies lifetime management and prepares for fixing race conditions during teardown. - sbistore -...