SUSE-SU-2026:20870-1 Security update for nghttp2

This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS bsc1259845...

Security update for nghttp2

This update for nghttp2 fixes the following issues: CVE-2026-27135: Assertion failure due to missing state validation can lead to DoS bsc1259845. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

Vienna Symphonic Library Vienna Assistant 安全漏洞

Vienna Symphonic Library Vienna Assistant is a music sampling library download and management tool provided by Vienna Symphonic Library. There is a security vulnerability in Vienna Symphonic Library Vienna Assistant, which stems from the lack of client validation and endpoint validation. This...

PT-2026-28362

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0 Description EVerest is an EV charging software stack. The ISO15118 chargerImpl::handle session setup function uses the v2g ctx variable after it has been freed when ISO15118 initialization fails, such as whe...

The vulnerability of the `__unset_online()` function in the drivers/s390/cio/css.c module of the S390 platform’s Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the unsetonline function in the drivers/s390/cio/css.c module of the S390 platform driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __cpu_map_ring_cleanup() function in the kernel/bpf/cpumap.c module, which is part of the Linux operating system’s BPF interpreter support, allows a malicious actor to cause a service failure.

The vulnerability of the cpumapringcleanup function in the kernel/bpf/cpumap.c module, which is part of the Linux kernel’s BPF interpreter support, is related to incorrect code validation for function return operations. Exploiting this vulnerability could allow an attacker to trigger a system...

The vulnerability of the alloc_wbufs() function in the fs/ubifs/super.c file of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the allocwbufs function in the fs/ubifs/super.c file of the Linux kernel operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cifs_flock() function in the fs/cifs/file.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the cifsflock function in the fs/cifs/file.c module of the Linux kernel file system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mlx5_esw_vport_disable() function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5eswvportdisable function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the add_mtd_device() function in the drivers/mtd/mtdcore.c file of the MTD memory driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the addmtddevice function in the drivers/mtd/mtdcore.c file of the MTD memory driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `bitmap_ip_create()` function in the `net/netfilter/ipset/ip_set_bitmap_ip.c` module of the `netfilter` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bitmapipcreate function in the net/netfilter/ipset/ipsetbitmapip.c module of the netfilter component in the Linux operating system’s kernel is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the lpuart_set_termios() function in the drivers/tty/serial/fsl_lpuart.c file of the console TTY driver in the Linux kernel’s serial port layer allows a attacker to cause a service failure.

The vulnerability of the lpuartsettermios function in the drivers/tty/serial/fsllpuart.c file of the console TTY driver in the Linux kernel’s serial port layer is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the acpi_ffh_address_space_arch_setup() function in the arch/arm64/kernel/acpi.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the acpiffhaddressspacearchsetup function in the arch/arm64/kernel/acpi.c module of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the decrypt_internal() function in the net/tls/tls_sw.c module of the TLS protocol implementation in Linux kernel allows a attacker to access protected information or cause service failure.

The vulnerability of the decryptinternal function in the net/tls/tlssw.c module of the TLS protocol implementation in Linux’s kernel involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the wwan_hwsim_dev_new() function in the drivers/net/wwan/wwan_hwsim.c module of the Linux kernel’s network device driver allows a hacker to cause a service failure.

The vulnerability of the wwanhwsimdevnew function in the drivers/net/wwan/wwanhwsim.c module of the Linux kernel’s network device driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the create_log_context() function in the drivers/md/dm-log.c file of the support for multiple device types (RAID and LVM) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the createlogcontext function in the drivers/md/dm-log.c file of the support for multiple device types RAID and LVM in the Linux kernel is related to insufficient data authentication checks. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the tegra_eqos_probe() function in the drivers/net/ethernet/stmicro/stmmac/dwmac-dwc-qos-eth.c file of the Ethernet adapter support driver from STMicroelectronics’ Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tegraeqosprobe function in the drivers/net/ethernet/stmicro/stmmac/dwmac-dwc-qos-eth.c file of the Ethernet adapter support driver from STMicroelectronics’ Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability could...

The vulnerability of the __ima inode_hash() function in the security/integrity/ima/ima_main.c module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.

The vulnerability of the ima inodehash function in the security/integrity/ima/imamain.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ipcm_init_sk() function in the include/net/ip.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ipcminitsk function in the include/net/ip.h module of the Linux operating system involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the devm_clk_notifier_register() function in the drivers/clk/clk.c module of the timer driver for Samsung Exynos CPUs with Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the devmclknotifierregister function in the drivers/clk/clk.c module of the Samsung Exynos CPU driver for Linux operating systems is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...