SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2026:3680-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3680-1 advisory. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. -...

PT-2026-82138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra gcm do one req function where the rctx-cryptlen calculation is performed incorrectly. If a caller fails to invoke tegra gcm setauthsize, the ctx-authsize...

PT-2026-82142

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC tas2562 component where the tas2562 volume control put function fails to validate control values written by userspace. This lack of validation allows the...

PT-2026-82148

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop issue exists in the XFS file system during online fsck operations. The xrep iunlink resolve bucket function, which reconstructs incore prev and next unlinked list pointe...

PT-2026-82162

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The xcrb msg to type6cprb msgx function lacks proper input validation. This leads to several issues: signed integer variables may overflow during 4-byte boundary alignment, resulting in...

PT-2026-82165

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fsm notoper function within the s390/vfio ccw component. This routine is triggered when a device is lost and is no longer operational. Because this process can occ...

PT-2026-82137

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the af unix module where the garbage collector GC may partially free a dead Strongly Connected Component SCC. This occurs during a race condition when unix add edges...

PT-2026-82126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter flowtable where the nf flow table iterate function only treats original-direction tuple nodes as owning entries. This allows the Garbage Collector GC to...

PT-2026-82194

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fb io read function where a pointer desynchronization occurs if copy to user performs a partial copy, such as when a user buffer is faulty. In this scenario, the...

PT-2026-82196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fbdev component where the mode string function uses snprintf, which may return a value exceeding the remaining buffer space. The show modes function accumulates th...

PT-2026-82152

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xlog recover do reg buffer function fails to properly validate the bounds of a buffer log item's dirty bitmap. During mount-time log...

PT-2026-82182

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the hynitron cstxxx driver allows for the corruption of the touch state of previously active slots. This occurs because the driver fails to properly validate the touch count an...

PT-2026-82186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow exists in the synaptics-rmi4 driver. In the rmi f54 work function, an error during report request or command verification causes the code to bypass the logic that...

PT-2026-82188

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the byd disconnect function. The function uses timer delete before freeing the driver's private data, which fails to wait for a running byd clear touch callbac...

PT-2026-82193

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A NULL pointer dereference exists in the drm/panthor component. The function panthor fw load section entry fails to handle zero-sized firmware sections correctly by skipping the creation...

PT-2026-82195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fbdev component where the fb set var function can delete a mode from the info-modelist when userspace provides FB ACTIVATE INV MODE via FBIOPUT VSCREENINFO. While...

PT-2026-82118

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the regmap sdw mbq poll busy function where the system attempts to call the readable reg callback without verifying if it is set. Because this callback is optional,...

The vulnerability of the vub300_disconnect() function in the drivers/mmc/host/vub300.c module of the MMC/SD/SDIO card driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vub300disconnect function in the drivers/mmc/host/vub300.c module of the MMC/SD/SDIO card driver for the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the reset_add gpio_aux_device() function in the drivers/reset/core.c file of the Linux kernel-based universal reset controller driver allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the resetadd gpioauxdevice function in the drivers/reset/core.c file of the Linux kernel-based universal reset controller driver relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the rxrpc_preparse_xdr_yfs_rxgk() function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an...