SUSE CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

The vulnerability of the ice_set_ringparam() function in the drivers/net/ethernet/intel/ice/ice_ethtool.c file of the Ethernet network adapter driver for Intel’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icesetringparam function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Ethernet network adapter driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to induce a system failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ath11k_macDestroy() function in the drivers/net/wireless/ath/ath11k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a hacker to access protected information or cause service failure.

The vulnerability of the ath11kmacDestroy function in the drivers/net/wireless/ath/ath11k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this...

The vulnerability of the vidtv_start_feed() function in the drivers/media/test-drivers/vidtv/vidtv_bridge.c file of the Linux kernel-based multimedia device driver module allows a hacker to cause a service failure.

The vulnerability of the vidtvstartfeed function in the drivers/media/test-drivers/vidtv/vidtvbridge.c file of the Linux kernel multimedia device driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `logicvc_drm_config_parse()` function in the `drivers/gpu/drm/logicvc/logicvc_drm.c` file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the logicvcdrmconfigparse function in the drivers/gpu/drm/logicvc/logicvcdrm.c file of the Direct Rendering Infrastructure DRI driver module in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability can allow a remote attacker to cau...

The vulnerability of the mtk_xdp_setup() function in the drivers/net/ethernet/mediatek/mtk_eth_soc.c file of the network adapter driver for mediatek’s Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mtkxdpsetup function in the drivers/net/ethernet/mediatek/mtkethsoc.c file of the network adapter driver for mediatek in the Linux operating system is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could...

The vulnerability of the xe_vm_madvise_ioctl() function in the drivers/gpu/drm/xe/xe_vm_madvise.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xevmmadviseioctl function in the drivers/gpu/drm/xe/xevmmadvise.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability in the function amdgpu_dm_update_connector_after_detect(), located in the driver/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the amdgpudmupdateconnectorafterdetect function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper memory release memory leak. Exploiting this...

The vulnerability of the irdma_create_user_ah() function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver allows a hacker to cause a service failure.

The vulnerability of the irdmacreateuserah function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a attacker to cause a servic...

CVE-2026-74722

A flaw was found in the Linux kernel's btrfs filesystem. A local attacker could exploit a memory leak in the btrfsdoencodedwrite function. This occurs because an extent changeset is not properly freed before the function returns. Successful exploitation of this memory leak could lead to a denial ...

EUVD-2026-64924

The UMP Stream responder library in lib/midi2/umpstreamresponder.c builds reply packets in a 16-byte struct midiump uint32t data4. The builders makeendpointinfo and makefunctionblockinfo populate only the first two words res.data0 and res.data1 and, before this fix, declared their result as an...

SUSE-SU-2026:3757-1 Security update for the Linux Kernel (Live Patch 55 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.222 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT...

CVE-2026-74623

A flaw was found in the Linux kernel's atlantic network driver. When a network interface using this driver is deinitialized while under transmit TX or XDPTX load, certain transmit buffers are not properly released. This oversight leads to a memory leak, which can prevent the proper shutdown of...

CVE-2026-74620

A flaw was found in the Linux kernel's net/sched subsystem, specifically within the actgact and actpolice modules. A local user could exploit this vulnerability by providing a specially crafted control action that bypasses proper range checks. This improper handling of control actions leads to an...

CVE-2026-9728 TOCTOU race in mbox_send syscall verifier allows userspace to leak kernel memory

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

CVE-2026-9728 TOCTOU race in mbox_send syscall verifier allows userspace to leak kernel memory

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

CVE-2026-74692

A flaw was found in the Linux kernel's net/smc component. A time-of-check to time-of-use TOCTOU race condition allows a remote attacker to exploit a window where the listener's state is checked without proper locking. By opening TCP connections while the server is closing, an attacker can cause a...

CVE-2026-74719

A flaw was found in the Linux kernel's Server Message Block SMB over Remote Direct Memory Access RDMA SMC protocol implementation. A remote attacker, by sending a duplicate link confirmation or addition request, can cause a memory leak. This occurs because the system overwrites an existing memory...