SUSE-SU-2026:5034-1 Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

CVE-2026-99076

A flaw was found in the Linux kernel's IPv6 UDP implementation. This flaw allows information disclosure through a side-channel vulnerability in the routing exception cache. An off-path remote attacker can exploit this flaw by sending crafted Internet Control Message Protocol version 6 ICMPv6 erro...

CVE-2026-99078

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. When processing high-speed network traffic using XDP eXpress Data Path sockets under low-memory conditions, a failure during receive queue replenishment can cause previously freed memory buffers to be released again through sta...

CVE-2026-99072

A flaw was found in the Linux kernel's IPv4 networking subsystem. A local user with network administration privileges can trigger a race condition when updating routing nexthop configurations concurrently with route notifications, causing a NULL pointer dereference. This flaw can lead to a kernel...

CVE-2026-99069

A flaw was found in the Linux kernel's atiremote2 input driver. A local user can exploit this type confusion vulnerability to cause a Denial of Service DoS. The issue occurs because the driver's device attribute handlers improperly treat an interface pointer as a parent device pointer. By...

CVE-2026-99020

A flaw was found in the Linux kernel's TPS6594 regulator driver. This flaw allows a local user or system process triggering device initialization to cause a Denial of Service DoS via an out-of-bounds memory read. The driver specifies more voltage range entries than exist in the descriptor table...

CVE-2026-99017

A flaw was found in the Linux kernel. Under specific configurations on RISC-V systems using T-Head processors, the kernel does not execute early boot checks required to identify hardware errata. As a result, the default mitigation for the Ghostwrite hardware vulnerability is not applied, which ma...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: ethtool: cmis: require exact CDB reply length

A flaw was found in the Linux kernel's ethtool CMIS Common Management Interface Specification module. A malicious SFP Small Form-Factor Pluggable module could provide a reply with a length longer than expected, leading to an out-of-bounds write. This vulnerability can result in memory corruption...

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-63968: ipv...

Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521...

CVE-2026-99091

A flaw was found in the Linux kernel's Bluetooth subsystem. When pending management commands are flushed during an adapter power-off or device removal event, the kernel incorrectly reports command status values using internal memory pointer data instead of the intended error code. A local user ca...

CVE-2026-99195

A flaw was found in the Linux kernel's OpenCores Ethernet driver ethoc. During device initialization, the driver connects the physical network interface before assigning its network device operations. A local attacker capable of triggering device probing on a system configured with network traffi...

CVE-2026-99180

A flaw was found in the Linux kernel's Unicode subsystem. This issue occurs because character mapping tables used for case-insensitive file lookups are freed immediately upon unmounting a filesystem without waiting for active path lookups to complete. A local user could exploit this race conditio...

CVE-2026-99177

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. This vulnerability may lead to a Denial of Service DoS due to improper locking when marking guest memory pages as modified during AMD Secure Encrypted Virtualization SEV operations. A local user with permissions to...

Exploit for CVE-2026-98432

Checks whether a Linux host may be exposed to CVE-2026-98432...

Exploit for CVE-2026-98432

cve-2026-98432-check Verifica se um host descarta SYN TCP I...

CVE-2026-99201

A flaw was found in the Linux kernel's netlink subsystem. An unprivileged local user can exploit this vulnerability by manipulating netlink sockets with chosen port identifiers and observing exposed table bucket order. This flaw results in an information disclosure, allowing an attacker to infer...

CVE-2026-99191

In the Linux kernel, the following vulnerability has been resolved: calipso: keep BIG TCP payloadlen in calipsoskbuffsetattr calipsoskbuffsetattr adjusts payloadlen by the length of the option it inserts or resizes: payload = ntohsip6hdr-payloadlen; ip6hdr-payloadlen = htonspayload + lendelta; GR...