Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-39468: smb: client: fix deadlock in smb2findsmbtcon bsc1227103, bsc1280176. CVE-2026-72041: espintcp: use skmsgfreepartial to fix partial send bsc1275510...

SUSE-SU-2026:4939-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-39468: smb: client: fix deadlock in smb2findsmbtcon bsc1227103, bsc1280176. - CVE-2026-72041: espintcp: use skmsgfreepartial to fix partial send bsc1275510. ...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2026-72041: espintcp: use skmsgfreepartial to fix partial send bsc1275510. CVE-2026-72110: bpf,fork: wipe -bpfstorage before bailouts that access it bsc1277357...

SUSE-SU-2026:4938-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-72041: espintcp: use skmsgfreepartial to fix partial send bsc1275510. - CVE-2026-72110: bpf,fork: wipe -bpfstorage before bailouts that access it bsc1277357....

Important: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-90037

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A race condition exists during the cleanup of NFSv4 client connections, specifically when the system attempts to reclaim resources from timed-out clients. This can lead to a use-after-free vulnerability, where the system trie...

CVE-2026-89997

A flaw was found in the Linux kernel's device mapper dm component. A local attacker could exploit a race condition between the resume and remove input/output control ioctl operations. This could lead to a use-after-free vulnerability, potentially allowing for arbitrary code execution or denial of...

CVE-2026-90000

A flaw was found in the Linux kernel's hid-rmi driver. A malicious or specially crafted Human Interface Device HID can provide undersized Remote Memory Interface RMI reports, leading to out-of-bounds memory access. This vulnerability allows for information disclosure, where sensitive heap content...

CVE-2026-90030

A flaw was found in the Linux kernel's DWC3 USB controller driver. When the forceRM bit is incorrectly set during an EndTransfer command, a transfer may remain active even after completion. A subsequent StartTransfer on the same endpoint can then trigger writes to an unmapped memory buffer, leadi...

CVE-2026-90001

A flaw was found in the Linux kernel's HID Human Interface Device BPF Berkeley Packet Filter component. A race condition exists between the device destruction and BPF link release paths, which can lead to a struct hiddevice being freed twice. This double-free vulnerability results in a...

CVE-2026-90014

A flaw was found in the Linux kernel's tracing subsystem. The showeventfilters and showeventtriggers files, which display event filters and triggers, do not correctly maintain a reference to the trace array. This allows the trace array to be freed while a user is actively reading these files...

CVE-2026-90013

A flaw was found in the Linux kernel's tracing subsystem. When an options file is opened, it fails to properly manage references to the associated trace array. This oversight allows a local attacker to trigger a use-after-free condition by removing the trace array instance while the options file ...

CVE-2026-89968

A flaw was found in the nvmet-tcp component of the Linux kernel. A remote attacker can exploit this vulnerability by sending an unsolicited H2CData PDU Protocol Data Unit before the target transmits an R2T Ready To Transfer for a write command. This can cause the command to be completed twice,...

CVE-2026-99123

A flaw was found in the Linux kernel's Virtual Sockets vsock virtio transport. Incoming packets for connecting sockets are not properly validated against their expected source address. A local, unprivileged attacker can exploit this vulnerability by sending crafted packets during connection setup...

Exploit for CVE-2026-97555

CVE-2026-97555 — cifs DACL owner/group heap overflow English...

CVE-2026-99130

A flaw was found in the Linux kernel's iouring subsystem. A local attacker can exploit this vulnerability to cause a Denial of Service DoS by triggering an infinite loop during process exit. This issue occurs when an exiting task attempts to cancel requests on an iouring ring with pending work th...

CVE-2026-99129

A flaw was found in the Linux kernel. A local user could exploit a time-of-check to time-of-use TOCTOU race condition during Security-Enhanced Linux SELinux permission checks for Berkeley Packet Filter BPF tokens. By altering a token file descriptor between kernel lookups, an attacker could bypas...

CVE-2026-99128

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP subsystem. A remote attacker can exploit this vulnerability to cause a Denial of Service DoS by sending specially crafted network packets with invalid chunk lengths. Because the packet parser fails to properly valida...

CVE-2026-99194

A flaw was found in the Linux kernel's Aeroflex Ethernet driver. During device probing, the driver attempts to attach the physical network interface before its network device operations are assigned. A local user can exploit this condition on systems with network traffic shaping enabled to trigge...

CVE-2026-99126

A flaw was found in the Linux kernel's s390 CTCM Channel-to-Channel driver. A denial of service DoS can occur when the driver processes invalid Exchange Station Identification XID data during channel negotiation. If a peer XID is missing or a channel pairing mismatch occurs, the driver attempts t...