CVE-2026-64448

A flaw was found in the Linux kernel's Server Message Block SMB client. An attacker, by operating a malicious SMB server, could send specially crafted responses during the session negotiation phase. This could cause the client to read beyond the intended memory buffer, potentially leading to the...

CVE-2026-64441

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. This vulnerability involves out-of-bounds reads in several functions responsible for parsing information elements IE and attributes. Due to missing checks on the size of incoming data, these functions can read beyond the intended memo...

CVE-2026-64355

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter devmap feature. When handling devmap broadcast redirects, fragmented network frames are not properly managed during the cloning process. This can lead to an out-of-bounds access, where the system attempts to read or write data beyo...

CVE-2026-64524

A flaw was found in the Linux kernel's drm/hyperv component. A malicious Hyper-V guest could exploit an out-of-bounds memory access vulnerability by sending a crafted resolution response. This could potentially lead to information disclosure or a denial of service. Additionally, an issue with the...

CVE-2026-64332

A flaw was found in the Linux kernel's USB ULPI UTMI+ Low Pin Interface driver. This vulnerability occurs during early ULPI device registration failures, where the allocated device name is not properly freed. A local attacker could potentially exploit this memory leak, leading to a denial of...

Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues: The following security issues were fixed: CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648...

SUSE-SU-2026:3383-1 Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpecte...

Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GF...

SUSE-SU-2026:3388-1 Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach...

Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes one security issue: The following security issue was fixed: CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:3376-1 Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes one security issue: The following security issue was fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060...

CVE-2026-64326

A flaw was found in the Linux kernel's block device handling. When a block device is unexpectedly removed, the bdevmarkdead function can unconditionally attempt to synchronize the device, even if it is no longer present. This can lead to a system hang, effectively causing a Denial of Service DoS,...

CVE-2026-64538

A flaw was found in the Linux kernel's IPv6 networking component. A null pointer dereference vulnerability exists in the fib6nhmtuchange function. This can occur when the idev in6device pointer is cleared during network interface shutdown, but the fib6nhmtuchange function attempts to dereference ...

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. CVE-2026-53366: ipv4: account for fraggap on the paged...

SUSE-SU-2026:3372-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. - CVE-2026-53366: ipv4: account for fraggap on the paged...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.26 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.26 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: CVE-2026-46120: ip6gre: Use cached t-net in ip6erspanchangelink bsc1267893. CVE-2026-46173: exit: prevent preemption of oopsing TASKDEAD task bsc1267723...

CVE-2026-64240

A flaw was found in the Linux kernel's igorplugusb driver. This vulnerability occurs because the driver incorrectly passes a pointer instead of the actual USB control request setup packet to the USB core. As a result, the USB core misinterprets the data, leading to an invalid request type and...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.31 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption

A flaw was found in the Linux kernel's Input-Output Memory Management Unit IOMMU virtualized direct memory access VT-d component. This vulnerability occurs when the system attempts to perform cleanup operations without a valid device identifier, leading to a null pointer dereference or incorrect...