CVE-2026-98779: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ACP MFD device leak on init failure acphwinit registers ACP child devices with mfdadddevices before attaching them to the ACP power domain and initializing the hardware. If attaching a child to the power domain...

CVE-2026-98777: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: binder: fix leaked fd fixups on TFUPDATETXN supersede When a TFUPDATETXN transaction supersedes a pending async transaction in a frozen process, the outdated transaction is freed with kfree directly. This skips binderfreetxnfixup...

CVE-2026-98774: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

CVE-2026-98703: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: minstrelht: validate fixed rate index The fixedrateidx debugfs file is a plain u32 attribute, so any value can be written to it. minstrelhtupdatestats then copies the value into mi-maxtprate and mi-maxprobrate, an...

CVE-2026-98692: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Make the DP tunnel activation callback mandatory tbtunnelallocdp takes an optional callback which is run from dprxwork once the DPRX capabilities read has completed. Without that callback tbdpdprxstart reads the...

CVE-2026-98680: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022afifoenable at the buffer enable path, the allocated memory is neve...

CVE-2026-98760: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typecpartnerdesc in tps6598xconnect tps6598xconnect passes a stack-allocated typecpartnerdesc to typecregisterpartner after initializing only usbpd, accessory and identity. typecregisterpartner...

PT-2026-116705

In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure ena device init initializes the MMIO read mechanism with ena com mmio reg read request init, which allocates a coherent DMA buffer for MMIO read responses. The normal removal...

PT-2026-116862

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of rtt min in sock ops A sockops prog reading skops-rtt min never checks the sk type: on the tcp conn request path sock ops-sk is a request sock non-full, and the ctx rewrite casts it to a tcp sock ful...

PT-2026-116774

In the Linux kernel, the following vulnerability has been resolved: llc: fix skb UAF and leaks on llc mac hdr init failure In llc conn ac resend i xxx x set 0 or send rr, if llc mac hdr init fails, kfree skbskb is called instead of kfree skbnskb. This leaks the newly allocated nskb, reads from th...

CVE-2026-98482: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: drop truncated I/RR/RNR PDUs in nfcllcprecvhdlc nfcllcprecvhdlc reads the sequence byte skb-data2, via nfcllcpns/nfcllcpnr, before any length check. The receive path only guarantees the two-byte LLCP header --...

Security update for iperf (important)

openSUSE security update: security update for iperf ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22090-1 Rating: important References: bsc1283528 bsc1283786 bsc1283787 bsc1284404 bsc1284405 Cross-References: CVE-2026-101276 CVE-2026-101283...

PT-2026-116624

LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced in lodepng util.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent...

PT-2026-117020

In the Linux kernel, the following vulnerability has been resolved: net: restrict SO RESERVE MEM to TCP sockets and cap max value Commit 2bb2f5fb21b0 "net: add new socket option SO RESERVE MEM" and commit d00c8ee31729 "net: fix possible NULL deref in sock reserve memory" only checked sk has...

PT-2026-116664

In the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that a memory allocation failure in xrep newbt add blocks results in online repair leaking blocks that were previously allocated to write a new btree, bu...

PT-2026-116848

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls u32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it...

PT-2026-116654

In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altr portb setup Anchor the devres group and the devm-managed IRQ requests in altr portb setup to the actual parent device device-edac-dev instead of the embedded struct device inside...

PT-2026-116670

In the Linux kernel, the following vulnerability has been resolved: smb: client: use finish no open for non-regular inodes An O CREAT open can find an existing symlink or another non-regular inode. cifs atomic open calls finish open on it and attaches a cifsFileInfo. Symlink inodes have no CIFS...

PT-2026-116992

In the Linux kernel, the following vulnerability has been resolved: USB: cdc-acm: skip URB restart in port shutdown if disconnected acm port shutdown is called from the tty-port machinery whenever the last user closes the port. acm disconnect sets acm-disconnected and calls tty port tty vhangup,...

PT-2026-116666

In the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots LOLLM noticed that the inode btree root formatting methods copy too many bytes -- there's only one set of keys in node blocks, not two. This causes memory...