SUSE CVE-2026-63930

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the errputbuffers cleanup path of iiohwconsumeralloc, the code was using listforeachentry to iterate through buffers while calling iiobufferput which can free the...

SUSE CVE-2026-63996

In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: require exact CDB reply length Malicious SFP module could respond with rpllen longer than what cmiscdbprocessreply expected, leading to OOB writes. Malicious HW is a bit theoretical but some modules may just be bug...

SUSE CVE-2026-64008

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix UAF via dangling GEM handle in createbo rocketioctlcreatebo inserts a GEM handle into the file's IDR via drmgemhandlecreate early on, then performs several operations that can fail sgt allocation, drmmm insert,...

SUSE CVE-2026-64098

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates virtiogpucursorplaneupdate and virtiogpuresourceflush lock the framebuffer BO's dmaresv via virtiogpuarraylockresv and ignore its return value. The function can fail wit...

SUSE CVE-2026-64118

In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qedcxttablesalloc If one of the later PF or VF CID bitmap allocations fails, qedcidmapalloc jumps to cidmapfail and frees the previously allocated CID bitmaps before returning an error. qedcxttablesalloc...

SUSE CVE-2026-64126

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMTOPADDEXTADVDATA is registered as a variable-length command, with MGMTADDEXTADVDATASIZE as the fixed header size. The handler then uses cp-advdatalen and...

SUSE CVE-2026-64165

In the Linux kernel, the following vulnerability has been resolved: ARM: integrator: Fix early initialization Starting with commit bdb249fce9ad4 "ARM: integrator: read counter using syscon/regmap", intcpinitearly calls sysconregmaplookupbycompatible which in turn calls ofsysconregister. This...

SUSE CVE-2026-64171

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pmruntime leak on mutexlock failure If tegrai2cmutexlock fails, the function returns without calling pmruntimeput, leaking the runtime PM reference acquired by the preceding pmruntimegetsync. This prevents the...

SUSE CVE-2026-64182

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblknrpoisoninc and memblknrpoisonsub look up a memory block via findmemoryblockbyid, which acquires a reference to the memory block device. Both helpers...

SUSE CVE-2026-64191

In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxfer uses data-block0 as the transfer length. The existing check only clamps it to avoid overrunning the chip-words256 register array,...

USN-8574-1 linux-gcp-fips vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

CVE-2026-64131

A flaw was found in the Linux kernel's memory management subsystem. The unmapping process for device-private and exclusive memory pages incorrectly checks if a virtual memory area VMA is anonymous. This can lead to spurious warnings during process teardown when a folio is part of a private...

CVE-2026-64130

A flaw was found in the Linux kernel's memory management subsystem. When the initonfree feature is enabled, the system may fail to properly initialize memory tags for 'huge zero folios' large blocks of memory filled with zeros before they are mapped to user space. This oversight can lead to the...

CVE-2026-64153

A flaw was found in the drm/msm Direct Rendering Manager / Qualcomm MSM driver within the Linux kernel. This vulnerability arises from an incorrect handling of return values in the iommumapsgtable function. Previously, the function would trigger a warning instead of properly returning an error wh...

CVE-2026-64171

A flaw was found in the Linux kernel's i2c Tegra module. This vulnerability occurs when a mutex lock fails, leading to a power management PM runtime reference leak. This leak prevents the affected device from entering runtime suspend, which can lead to increased power consumption or other resourc...

CVE-2026-64182

A flaw was found in the Linux kernel's memory management subsystem. Specifically, the functions responsible for tracking poisoned memory blocks memblknrpoisoninc and memblknrpoisonsub fail to properly release a device reference after looking up a memory block. This oversight leads to a continuous...

CVE-2026-64165

A flaw was found in the Linux kernel, specifically within the ARM Integrator/CP architecture. During early system initialization, a memory allocation function is called before the memory management system is fully ready. This can lead to a kernel crash, resulting in a Denial of Service DoS for th...

CVE-2026-64129

A flaw was found in the Linux kernel's memory management component. This vulnerability, located in the migratevmainserthugepmdpage function, can lead to a spinlock being permanently held if a specific address space check fails. This unreleased spinlock can cause a system deadlock, resulting in a...

CVE-2026-64152

A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem when iommudebug is enabled. This issue occurs because an error handling path attempts to unmap memory without a proper initial mapping, leading to an inconsistent state within the IOMMU's debugging and...

CVE-2026-15811

A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...