Security update for openexr

This update for openexr fixes the following issue: CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed bsc1282700. Patch Instructions: To install this SUSE update u...

CVE-2026-98355: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to calling the event tracing code with cltpath-kobj-name being NULL and thus...

PT-2026-106507

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the drm/amdgpu component where the amdgpu amdkfd clear kfd mapping function assumes that a non-NULL kfd dev has a fully populated node array. This assumption is incorrect...

PT-2026-106531

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description Transport drivers like rmi i2c and rmi spi call the functions rmi driver suspend and rmi driver resume during system power management events. If the physical RMI driver failed to bind or...

PT-2026-106572

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use after free issue exists in the dma-buf/dma-fence component. A previous fix intended to prevent a NULL pointer dereference changed the validation logic to check the ops pointer...

PT-2026-106597

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A null pointer dereference occurs in the Linux kernel when a module is unloaded while a perf connection is active. The function pmu detach event sets the event-pmu pointer to null, which...

PT-2026-106599

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description In the drm/amdgpu component, the function nbio v7 9 handle ras controller intr no bifring dereferences ras and obj without verifying if they are NULL. Because amdgpu ras get context and...

PT-2026-106614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge vlan component where errors during switchdev deletion in the vlan del function can lead to an inconsistent state, memory leaks during flushing, or a NULL...

PT-2026-106631

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A NULL pointer dereference occurs in the skfp driver when setting the MAC address of a down interface. The function skfp ctl set mac address calls ResetAdapter without verifying if the...

PT-2026-106637

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the ALSA hda component where a tracepoint is triggered before verifying if a stream has been successfully assigned. When hardware streams are exhausted, stream assignment...

PT-2026-106643

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A NULL-pointer dereference exists in the ALSA PCM component. The snd pcm timer init function calls snd device register to add a new snd timer structure to the global timer list before...

PT-2026-106664

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 wireless driver where the ieee80211 stop mesh function fails to properly abort a Channel Switch Announcement CSA when leaving a mesh network. Because the...

PT-2026-106675

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A crash occurs in mac80211 when the cfg80211 calculate bi data function calls rdev get radio mask using the wdev-netdev variable while it is NULL. This happens specifically with wireless...

PT-2026-106684

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A null pointer dereference occurs in the RDMA/rtrs client. When the init path function returns an error, the system attempts cleanup via the rtrs clt close conns function. This process can...

PT-2026-106685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA component where the bnxt re init dcb wq function ignores a failed allocation. Consequently, the async DCB handler subsequently calls queue work using a NULL...

CVE-2026-98314: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...

CVE-2026-98346: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't get the radio mask for netdev-less wdevs cfg80211calculatebidata calls rdevgetradiomask with wdev-netdev, which can be NULL and then crashes in mac80211. To avoid that, invert the order of checks since...

Linux Distros Unpatched Vulnerability : CVE-2026-98182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: refuse to make a monitor active when it has no queue A monitor interface only gets a TXQ if it's created active, and one can't be added later...

Linux Distros Unpatched Vulnerability : CVE-2026-98346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: don't get the radio mask for netdev-less wdevs cfg80211calculatebidata calls rdevgetradiomask with wdev-netdev, which can be NULL and then crash...

Linux Distros Unpatched Vulnerability : CVE-2026-98314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer...