SUSE-SU-2026:3630-1 Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6

This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6,...

CVE-2026-72008

A flaw was found in the pmdomain: mediatek driver of the Linux kernel. This vulnerability occurs due to incorrect handling of Hardware Voter HWV type power domains during cleanup and power-on checks. Specifically, the driver might use inappropriate functions for checking power status and performi...

CVE-2026-74442

A flaw was found in the Linux kernel's drm/vmwgfx driver. This vulnerability occurs when the vmwvkmsinit function fails to initialize a workqueue, leaving a pointer as NULL. During module unload, the vmwvkmscleanup function attempts to destroy this NULL workqueue, leading to a kernel panic. A loc...

CVE-2026-68463

A flaw was found in the Linux kernel, specifically within the mmc: sdhci-esdhc-imx component responsible for managing multimedia card MMC host controllers. During system suspend operations, an error in power management could cause the system to attempt accessing hardware that is not properly...

CVE-2026-74470

A flaw was found in the scsidebug module of the Linux kernel. This vulnerability occurs in the respreportzones function when handling specific allocation lengths, leading to an integer underflow. On 32-bit systems, this can cause an out-of-bounds write, which results in a kernel panic. A local...

h2 unbounded empty DATA frames

The h2 crate, used internally by hyper, had a flaw that would accept and queue empty DATA frames without limit. If streams were not actively drained, this could lead to unbounded memory usage, or a panic if the length overflows. Low severity. Patched in v0.4.16...

BIT-GOLANG-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

PT-2026-80713

The h2 crate, used internally by hyper, had a flaw that would accept and queue empty DATA frames without limit. If streams were not actively drained, this could lead to unbounded memory usage, or a panic if the length overflows. Low severity. Patched in v0.4.16...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: udisks2 (UTSA-2026-090565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090565 advisory. A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this...

Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-101489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101489 advisory. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100492 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in brip6fragment brip6fragment gets prevhdr, a point...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100525 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udffreeblocks checks the logical...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100732 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery In case of a TX error CQE, a recovery flo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100547 advisory. In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nextho...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099917)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099917 advisory. In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nextho...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100570)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100570 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfre...

Linux kernel ec_bhf DoS

The vulnerability of the ecbhf component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100293 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocat...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099741 advisory. In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099742 advisory. In the Linux kernel, the following vulnerability has been resolved: Revert IB/isert: Fix incorrect release of isert connection Commit: 699826f4e30a IB/isert: Fix...