SUSE CVE-2026-43157

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps rxfcpfvfbmap and txfcpfvfbmap are allocated by cgxlmacinit but never freed in cgxlmacexit. Unbinding and rebinding the driver therefore triggers kmemleak:...

SUSE CVE-2026-43183

In the Linux kernel, the following vulnerability has been resolved: media: cx25821: Fix a resource leak in cx25821devsetup Add releasememregion if ioremap fails to release the memory region obtained by cx25821getresources...

SUSE CVE-2026-43199

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query Fix a "scheduling while atomic" bug in mlx5eipsecinitmacs by replacing mlx5querymacaddress with etheraddrcopy to get the local MAC address directly from...

SUSE CVE-2026-43219

In the Linux kernel, the following vulnerability has been resolved: net: cpswnew: Fix potential unregister of netdev that has not been registered yet If an error occurs during registernetdev for the first MAC in cpswregisterports, even though cpsw-slaves0.ndev is set to NULL, cpsw-slaves1.ndev...

SUSE CVE-2026-43256

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: vfe: Fix out-of-bounds access in vfeisrregupdate vfeisr iterates using MSMVFEIMAGEMASTERSNUM7 as the loop bound and passes the index to vfeisrregupdate. However, vfe-line array is defined with VFELINENUMMAX4:...

SUSE CVE-2026-43259

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: set platform driver data Add missing platformsetdrvdata as the data will be used in remove...

SUSE CVE-2026-43260

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix RSS context delete logic We need to free the corresponding RSS context VNIC in FW everytime an RSS context is deleted in driver. Commit 667ac333dbb7 added a check to delete the VNIC in FW only when netifrunning is tru...

SUSE CVE-2026-43413

In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Fix NULL pointer exception during userscan userscan invokes updated sasuserscan for channel 0, and if successful, iteratively scans remaining channels 1 to shost-maxchannel via scsiscanhostselected in commit...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: descheduler, cilium, cass-operator, rancher, aws-application-networking-k8s, karma, bank-vaults, harbor-registry, polaris, velero-plugin-for-microsoft-azure, ko, telegraf, gcsfuse, addon-resizer, caddy, paranoia, rancher-fleet, rancher-helm, kor, kubewatch,...

CVE-2026-43473

A flaw was found in the Linux kernel's mpi3mr SCSI driver. When the creation of reply or request queues fails, the driver may attempt to access and modify memory that has already been freed during cleanup. This can be exploited by a local user, leading to a system crash and a Denial of Service Do...

CVE-2026-43467

A flaw was found in the Linux kernel's mlx5core driver. A local user or process can trigger a system crash by attempting to move a network device to switchdev mode when the device does not support IPsec. This occurs because the kernel incorrectly tries to clean up IPsec resources that do not exis...

CVE-2026-43465

A flaw was found in the Linux kernel's mlx5e driver. This vulnerability arises from incorrect fragment counting when XDP eXpress Data Path multi-buffer programs modify the XDP buffer layout. This issue could allow a local attacker or a specially crafted network packet to trigger a negative...

CVE-2026-43466

A flaw was found in the Linux kernel's mlx5e network driver. During a transmit TX error recovery process, a desynchronization occurs in the Direct Memory Access DMA First-In, First-Out FIFO buffer. This desynchronization causes the system to incorrectly unmap memory addresses, which can lead to...

CVE-2026-43464

A flaw was found in the Linux kernel's mlx5e driver. When using eXpress Data Path XDP multi-buffer programs, an attacker could manipulate the XDP buffer layout. This manipulation leads to incorrect tracking of page fragments, causing a critical error in memory management. The issue can result in ...

GHSA-497X-JCXF-M478 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, kubernetes-csi-driver-nfs-fips, reports-server, aws-efs-csi-driver-fips, nrdot-collector-k8s-fips, sftpgo-plugin-eventstore, grpcurl-fips, dagger, gatus-fips, hydra-fips, crossplane-provider-aws-opensearchserverless-fips, minio, peerdb-flow,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, kubernetes-csi-driver-nfs-fips, reports-server, aws-efs-csi-driver-fips, nrdot-collector-k8s-fips, sftpgo-plugin-eventstore, grpcurl-fips, hcledit, dagger, gatus-fips, amazon-ssm-agent-fips, hydra-fips,...

CVE-2026-39819 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, kubernetes-csi-driver-nfs-fips, reports-server, aws-efs-csi-driver-fips, nrdot-collector-k8s-fips, sftpgo-plugin-eventstore, grpcurl-fips, hcledit, dagger, gatus-fips, amazon-ssm-agent-fips, hydra-fips,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, kubernetes-csi-driver-nfs-fips, reports-server, aws-efs-csi-driver-fips, nrdot-collector-k8s-fips, sftpgo-plugin-eventstore, grpcurl-fips, hcledit, dagger, gatus-fips, amazon-ssm-agent-fips, hydra-fips,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, kubernetes-csi-driver-nfs-fips, reports-server, aws-efs-csi-driver-fips, nrdot-collector-k8s-fips, sftpgo-plugin-eventstore, grpcurl-fips, hcledit, dagger, gatus-fips, amazon-ssm-agent-fips, hydra-fips,...

GHSA-5M4P-2GJX-P2G8 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, kubernetes-csi-driver-nfs-fips, reports-server, aws-efs-csi-driver-fips, nrdot-collector-k8s-fips, sftpgo-plugin-eventstore, grpcurl-fips, hcledit, dagger, gatus-fips, amazon-ssm-agent-fips, hydra-fips,...