SUSE-SU-2026:1770-1 Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.133 fixes various security issues The following security issues were fixed: - CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size bsc1258073. - CVE-2025-71066: net/sched: ets: Always remove class...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: riscv, bpf: Sign extension for struct ops correctly handles return values. The nsbpfqdisc selftest triggers a kernel panic: Unable to handle kernel paging request at virtual address ffffffffa38dbf58. Current testprogs pgtable:...

kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO

A flaw was found in the Linux kernel's network handling. A local user could craft a specific Generic Segmentation Offload GSO packet with UDP Fragmentation Offload UFO characteristics. This crafted packet could lead to an underflow in the qdiscpktleninit function, causing a kernel NULL pointer...