CVE-2026-98029

A flaw was found in the Linux kernel's Netronome Flow Processor NFP network driver. The driver fails to validate the user-provided buffer size when retrieving network flow steering rules. An unprivileged local user can exploit this vulnerability to trigger an out-of-bounds memory write or a null...

CVE-2026-98027

A flaw was found in the Linux kernel's Marvell 88E6xxx switch driver. The driver fails to validate the caller's buffer boundary when retrieving network policy rules, leading to memory writes beyond the allocated buffer or a null pointer dereference. A local unprivileged user can exploit this...

CVE-2026-98008

A flaw was found in the Linux kernel's Cadence MACB ethernet driver. A local user with administrative privileges could cause a denial of service DoS by triggering a driver unbind operation or an initialization failure on a device configured with a fixed-link connection. In this configuration, the...

CVE-2026-97526

A flaw was found in the Linux kernel's s390 Processor Activity Instrumentation PAI performance monitoring unit. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the operating system. When a CPU is dynamically added hotplugged during an active performance...

CVE-2026-97519

A flaw was found in the Linux kernel's Intel Xe graphics driver. When device core dump cleanup routines are triggered without a completed capture, the driver attempts to access uninitialized snapshot data. A local user could exploit this issue to cause a null pointer dereference, resulting in a...

CVE-2026-97516

A flaw was found in the Linux kernel's rtw88 wireless driver. The driver fails to verify whether certain hardware configuration settings exist before accessing them during firmware adaptivity processing. On systems equipped with specific wireless chipsets, this flaw triggers a null pointer...

MGASA-2026-0459 Updated libxml2 packages fix security vulnerabilities

The updated packages fix several security issues: Stack-Based Buffer Overflow in libxml2. CVE-2026-11979 In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. CVE-2026-86137 In libxml2 before 2.15.4, xmlDictAddQString ...

Updated libxml2 packages fix security vulnerabilities

The updated packages fix several security issues: Stack-Based Buffer Overflow in libxml2. CVE-2026-11979 In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. CVE-2026-86137 In libxml2 before 2.15.4, xmlDictAddQString ...

CVE-2026-93825

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI subsystem. This vulnerability allows a local user to cause a Denial of Service DoS through a system crash. The issue occurs because the spigetdevicematchdata function does not verify whether a device identifier exists before...

CVE-2026-97507

A flaw was found in the Linux kernel's DM1105 media driver. A local user could cause a Denial of Service DoS through a kernel crash if Direct Memory Access DMA memory allocation fails during device initialization. Because the driver ignores the allocation return value, it proceeds to use a null...

CVE-2026-97506

A flaw was found in the Linux kernel's Intel IXP4xx crypto driver. When memory allocation fails while constructing buffer descriptor chains for cryptographic operations, the driver attempts to access an invalid null pointer. A local user could exploit this flaw under low-memory conditions to...

Security update for 389-ds

This update for 389-ds fixes the following issues: CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote co...

SUSE-SU-2026:4380-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4377-1 Security update for redis7

This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4375-1 Security update for redis7

This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

Security update for redis

This update for redis fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4370-1 Security update for redis

This update for redis fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...