55075 matches found
SUSE CVE-2026-64048
In the Linux kernel, the following vulnerability has been resolved: net/smc: reject CHID-0 ACCEPT that matches an empty ismdev slot On the SMC-D client, slot 0 of ini-ismdev/ini-ismchid is reserved for an SMC-Dv1 device. smcfindismv2deviceclnt populates V2 entries starting at index 1, so when no ...
SUSE CVE-2026-64103
In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal path The ISCI completion tasklet is initialized in iscihostalloc drivers/scsi/isci/init.c:496 and scheduled from both MSI-X and legacy interrupt handlers...
SUSE CVE-2026-64106
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range numeventidbits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits than the virtual ITS supports. The live MAPD path rejects that...
SUSE CVE-2026-64112
In the Linux kernel, the following vulnerability has been resolved: rbd: eliminate a race in lockdwork draining on unmap Given how rbdlockaddrequest and rbdimgexclusivelock are written, lockdwork may be requeued more than it's actually needed: for example in case a new I/O request comes in while ...
SUSE CVE-2026-64131
In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping device-private/exclusive pages Device private and exclusive entries are only supported for anonymous folios. This condition is tested in migratedevicepages and makedeviceexclusive...
SUSE CVE-2026-64167
In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel khofillkimage unconditionally populates the kimage with KHO metadata for every kexec image type. When the image is a crash kernel, this can be problematic as the crash kernel can run in a small...
SUSE CVE-2026-64178
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...
CVE-2026-63974
A flaw was found in the Bluetooth hcisync component of the Linux kernel. When the hcidevclosesync function is called during a device reset, the system may experience queuing timeouts. This occurs because the HCICMDDRAINWORKQUEUE flag is not properly set, which can lead to system instability or a...
CVE-2026-64003
A flaw was found in the Linux kernel's SCSI Small Computer System Interface core. During a SCSI host recovery, the scsirunhostqueues function may incorrectly ignore devices that are in a partially removed state. This oversight can cause pending requests for these devices to become stuck, leading ...
CVE-2026-63990
A flaw was found in the Linux kernel's bonding driver. This vulnerability allows a local user to cause a kernel crash, leading to a Denial of Service DoS, by attempting to enslave a virtual Controller Area Network CAN device to a bonding master. The bonding driver, designed for Ethernet-like...
CLEANSTART-2026-EJ83238 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33186, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42506 applied in versions: 1.1.2-r0
Multiple security vulnerabilities affect the smarter-device-manager package. These issues are resolved in later releases. See references for individual vulnerability details...
MINI-GW3X-3XX5-44Q5
Bulletin has no description...
kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP implementation. A remote Bluetooth Low Energy BLE device can exploit this by sending a specially crafted L2CAP ECRED reconfiguration response. This can lead to the corruption of the channel list,...
CVE-2026-64103
A flaw was found in the Linux kernel's ISCI IntelR C600 Series Chipset Storage Control Unit SCSI driver. This vulnerability occurs during device removal, where a timing issue can allow the system to attempt to use memory that has already been released. This 'use-after-free' condition could be...
CVE-2026-63810
A flaw was found in the Linux kernel. This vulnerability allows a local user to cause a system crash, leading to a Denial of Service DoS, by attempting to mount the internal bdev pseudo-filesystem. This action triggers a null pointer dereference within the kernel, which could also potentially be...
CVE-2026-64182
A flaw was found in the Linux kernel's memory management subsystem. Specifically, the functions responsible for tracking poisoned memory blocks memblknrpoisoninc and memblknrpoisonsub fail to properly release a device reference after looking up a memory block. This oversight leads to a continuous...
CVE-2026-64180
A flaw was found in the Linux kernel's memory hotplug component. When memory blocks are removed, the removememoryblocksandaltmaps function fails to release a previously acquired reference to the memory block device. This oversight results in a memory leak, which could lead to system instability o...
MINI-933H-G6FH-99JM
Bulletin has no description...