SUSE-SU-2026:4706-1

SUSE-SU-2026:4706-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). - CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). - CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). - CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). - CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). - CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). - CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). - CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). - CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). - CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). - CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). - CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). - CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). - CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). - CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). - CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). - CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). - CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). - CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). - CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). - CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971). - CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). - CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). - CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). - CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). - CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). - CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). - CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). - CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). - CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). - CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). - CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). - CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). - CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). - CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). - CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). - CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). - CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). - CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). - CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). - CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512). - CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). - CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). - CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). - CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). - CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). - CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). - CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). - CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). - CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). - CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). - CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). - CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238). - CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). - CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). - CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). - CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). - CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). - CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). - CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). - CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). - CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). - CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). - CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). - CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). - CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). - CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900). - CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). - CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). - CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). - CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). - CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). - CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). - CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). - CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). - CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). - CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). - CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). - CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). - CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc

Есть исправление

Опубликовано

2026-10-16T13:33:59Z

Обновлено

2026-10-17T10:00:05.985817162Z

Стек: system

Проверьте свой сервер →