In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds_ib_conn_path_shutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the wait_event call, which blocks other work items in the queue. Fix this by changing wait_event to wait_event timeout, and looping until the wait check succeeds.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8962-1 advisory.

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux     kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a     denial of service (system crash). (CVE-2022-1205)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - USB Gadget drivers;

    - ARM32 architecture;

    - ARM64 architecture;

    - OpenRISC architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Speakup Console Speech Driver;

    - ACPI drivers;

    - Serial ATA and Parallel ATA drivers;

    - Auxiliary display drivers;

    - Drivers core;

    - Bluetooth drivers;

    - Character device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - Clocksource drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - Google firmware drivers;

    - FPGA Framework;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - HSI subsystem;

    - Hardware monitoring drivers;

    - CoreSight HW tracing drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - On-Chip Interconnect management framework;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Multiple devices driver;

    - Media drivers;

    - Analog Devices digital potentiometer driver;

    - Broadcom VK accelerator driver;

    - Fastrpc Driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - MediaTek network drivers;

    - Near Field Communication (NFC) drivers;

    - NTB driver;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - Device tree and open firmware driver;

    - PA-RISC drivers;

    - PCI subsystem;

    - PHY drivers;

    - Pin controllers subsystem;

    - Chrome hardware platform drivers;

    - Mellanox platform drivers;

    - Microsoft Surface platform drivers;

    - x86 platform drivers;

    - Power supply drivers;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - RPMSG subsystem;

    - Real Time Clock drivers;

    - S/390 drivers;

    - SCSI subsystem;

    - SPI subsystem;

    - small TFT LCD display modules;

    - Greybus lights staging drivers;

    - Media staging drivers;

    - Realtek RTL8723BS SDIO drivers;

    - TCM subsystem;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - Userspace I/O drivers;

    - USB DSL drivers;

    - Cypress C67X00 USB driver;

    - USB core drivers;

    - USB Host Controller drivers;

    - Mustek MDC800 USB digital camera driver;

    - USB Serial drivers;

    - USB Mass Storage drivers;

    - USB Type-C Connector System Software Interface driver;

    - USB over IP driver;

    - vDPA drivers;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - W1 Dallas's 1-wire bus driver;

    - Watchdog drivers;

    - File systems infrastructure;

    - BFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - eCrypt file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - FAT file system;

    - FUSE (File system in Userspace);

    - HFS+ file system;

    - HugeTLB file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - NTFS3 file system;

    - OCFS2 file system;

    - OrangeFS file system;

    - SMB network file system;

    - SquashFS file system;

    - UBI file system;

    - UDF file system;

    - XFS file system;

    - BPF subsystem;

    - IPv4 networking;

    - Internal shared memory driver;

    - Networking core;

    - Scheduler infrastructure;

    - Sun RPC protocol;

    - Virtio network driver;

    - Amateur Radio drivers;

    - IP tunnels definitions;

    - Network traffic control;

    - SCTP protocol;

    - TCP network protocol;

    - eXpress Data Path;

    - XFRM subsystem;

    - User-space API (UAPI);

    - io_uring subsystem;

    - Audit subsystem;

    - Perf events;

    - KCOV code coverage framework;

    - Locking primitives;

    - RCU subsystem;

    - Signal handling mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Kernel build system;

    - Heterogeneous memory management;

    - UCS-2 string library;

    - Memory management;

    - Appletalk network protocol;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Ceph Core library;

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv6 networking;

    - IUCV driver;

    - KCM (Kernel Connection Multiplexor) sockets driver;

    - MAC80211 subsystem;

    - MultiProtocol Label Switching driver;

    - Multipath TCP;

    - Netfilter;

    - NFC subsystem;

    - Open vSwitch;

    - Packet sockets;

    - Phonet protocol;

    - Qualcomm IPC Router (QRTR);

    - RDS protocol;

    - SMC sockets;

    - TIPC protocol;

    - VMware vSockets driver;

    - Wireless networking;

    - AppArmor security module;

    - Integrity Measurement Architecture(IMA) framework;

    - Landlock security;

    - SELinux security module;

    - Simplified Mandatory Access Control Kernel framework;

    - ALSA framework;

    - Generic PCM loopback sound driver;

    - Generic sound devices;

    - ESS ES18xx ALSA driver;

    - Digigram PCXHR ALSA driver;

    - Cirrus Logic audio codecs;

    - QCOM ASoC drivers;

    - Realtek audio codecs;

    - WCD audio codecs;

    - Amlogic Meson SoC drivers;

    - Rockchip ASoC drivers;

    - SoC audio core drivers;

    - Spreadtrum ASoC drivers;

    - STI ASoC drivers;

    - Xilinx ASoC drivers;

    - USB sound devices;

    - Perf tools; (CVE-2022-49234, CVE-2022-49359, CVE-2022-49562, CVE-2022-49651, CVE-2022-49858,     CVE-2022-50071, CVE-2022-50303, CVE-2022-50406, CVE-2023-52676, CVE-2023-53231, CVE-2023-53320,     CVE-2023-53707, CVE-2024-41062, CVE-2024-46754, CVE-2024-49568, CVE-2024-50017, CVE-2024-53187,     CVE-2024-53210, CVE-2024-53220, CVE-2024-54683, CVE-2024-57945, CVE-2024-57982, CVE-2024-57999,     CVE-2024-58094, CVE-2024-58095, CVE-2024-58096, CVE-2025-21649, CVE-2025-21651, CVE-2025-21759,     CVE-2025-21801, CVE-2025-21812, CVE-2025-21947, CVE-2025-22039, CVE-2025-22057, CVE-2025-22083,     CVE-2025-22103, CVE-2025-37861, CVE-2025-37920, CVE-2025-38069, CVE-2025-38097, CVE-2025-38239,     CVE-2025-38259, CVE-2025-38349, CVE-2025-38361, CVE-2025-38615, CVE-2025-38643, CVE-2025-39726,     CVE-2025-39779, CVE-2025-39810, CVE-2025-39925, CVE-2025-40102, CVE-2025-40123, CVE-2025-68190,     CVE-2025-68794, CVE-2026-23191, CVE-2026-31420, CVE-2026-43088, CVE-2026-43437, CVE-2026-43456,     CVE-2026-46113, CVE-2026-46158, CVE-2026-46170, CVE-2026-46242, CVE-2026-52944, CVE-2026-52988,     CVE-2026-53078, CVE-2026-53089, CVE-2026-64561, CVE-2026-64581, CVE-2026-68236, CVE-2026-68399,     CVE-2026-68476, CVE-2026-72323, CVE-2026-74268, CVE-2026-74378, CVE-2026-74496, CVE-2026-74582,     CVE-2026-74626, CVE-2026-74632, CVE-2026-74637, CVE-2026-74647, CVE-2026-74662, CVE-2026-74663,     CVE-2026-74666, CVE-2026-74668, CVE-2026-74743, CVE-2026-80536, CVE-2026-80547, CVE-2026-80548,     CVE-2026-80552, CVE-2026-80553, CVE-2026-80555, CVE-2026-80557, CVE-2026-80562, CVE-2026-80583,     CVE-2026-80587, CVE-2026-80590, CVE-2026-80671, CVE-2026-80689, CVE-2026-80737, CVE-2026-80765,     CVE-2026-80766, CVE-2026-80767, CVE-2026-80768, CVE-2026-80781, CVE-2026-80782, CVE-2026-80783,     CVE-2026-80788, CVE-2026-80789, CVE-2026-80790, CVE-2026-80792, CVE-2026-80793, CVE-2026-80794,     CVE-2026-80795, CVE-2026-80796, CVE-2026-80797, CVE-2026-80798, CVE-2026-80799, CVE-2026-80800,     CVE-2026-80801, CVE-2026-80802, CVE-2026-80803, CVE-2026-80805, CVE-2026-80806, CVE-2026-80807,     CVE-2026-80808, CVE-2026-80809, CVE-2026-80812, CVE-2026-80814, CVE-2026-80819, CVE-2026-80823,     CVE-2026-80824, CVE-2026-80826, CVE-2026-80827, CVE-2026-80828, CVE-2026-80829, CVE-2026-80830,     CVE-2026-80831, CVE-2026-80832, CVE-2026-80833, CVE-2026-80834, CVE-2026-80840, CVE-2026-80842,     CVE-2026-80843, CVE-2026-80844, CVE-2026-80846, CVE-2026-80848, CVE-2026-80854, CVE-2026-80855,     CVE-2026-80856, CVE-2026-80863, CVE-2026-80888, CVE-2026-80912, CVE-2026-80916, CVE-2026-80917,     CVE-2026-80918, CVE-2026-80921, CVE-2026-80923, CVE-2026-80928, CVE-2026-80930, CVE-2026-80931,     CVE-2026-80932, CVE-2026-80938, CVE-2026-80941, CVE-2026-80944, CVE-2026-80949, CVE-2026-80951,     CVE-2026-80952, CVE-2026-80963, CVE-2026-80964, CVE-2026-80965, CVE-2026-80966, CVE-2026-80967,     CVE-2026-80968, CVE-2026-80969, CVE-2026-80971, CVE-2026-80972, CVE-2026-80973, CVE-2026-80976,     CVE-2026-80977, CVE-2026-80978, CVE-2026-80983, CVE-2026-80987, CVE-2026-80988, CVE-2026-80994,     CVE-2026-81000, CVE-2026-81001, CVE-2026-81002, CVE-2026-81003, CVE-2026-81005, CVE-2026-81007,     CVE-2026-81008, CVE-2026-81017, CVE-2026-89440, CVE-2026-89444, CVE-2026-89456, CVE-2026-89457,     CVE-2026-89458, CVE-2026-89461, CVE-2026-89463, CVE-2026-89464, CVE-2026-89469, CVE-2026-89470,     CVE-2026-89471, CVE-2026-89474, CVE-2026-89475, CVE-2026-89476, CVE-2026-89477, CVE-2026-89478,     CVE-2026-89479, CVE-2026-89480, CVE-2026-89482, CVE-2026-89483, CVE-2026-89485, CVE-2026-89487,     CVE-2026-89488, CVE-2026-89489, CVE-2026-89490, CVE-2026-89491, CVE-2026-89493, CVE-2026-89494,     CVE-2026-89495, CVE-2026-89496, CVE-2026-89497, CVE-2026-89498, CVE-2026-89504, CVE-2026-89508,     CVE-2026-89510, CVE-2026-89511, CVE-2026-89512, CVE-2026-89515, CVE-2026-89524, CVE-2026-89525,     CVE-2026-89532, CVE-2026-89533, CVE-2026-89538, CVE-2026-89540, CVE-2026-89541, CVE-2026-89542,     CVE-2026-89548, CVE-2026-89549, CVE-2026-89551, CVE-2026-89554, CVE-2026-89555, CVE-2026-89557,     CVE-2026-89559, CVE-2026-89560, CVE-2026-89562, CVE-2026-89563, CVE-2026-89569, CVE-2026-89573,     CVE-2026-89575, CVE-2026-89576, CVE-2026-89582, CVE-2026-89585, CVE-2026-89586, CVE-2026-89594,     CVE-2026-89595, CVE-2026-89596, CVE-2026-89597, CVE-2026-89599, CVE-2026-89605, CVE-2026-89606,     CVE-2026-89607, CVE-2026-89608, CVE-2026-89609, CVE-2026-89615, CVE-2026-89616, CVE-2026-89617,     CVE-2026-89621, CVE-2026-89626, CVE-2026-89627, CVE-2026-89628, CVE-2026-89643, CVE-2026-89649,     CVE-2026-89650, CVE-2026-89653, CVE-2026-89655, CVE-2026-89656, CVE-2026-89662, CVE-2026-89663,     CVE-2026-89665, CVE-2026-89669, CVE-2026-89673, CVE-2026-89674, CVE-2026-89684, CVE-2026-89694,     CVE-2026-89696, CVE-2026-89697, CVE-2026-89699, CVE-2026-89704, CVE-2026-89706, CVE-2026-89710,     CVE-2026-89711, CVE-2026-89712, CVE-2026-89720, CVE-2026-89723, CVE-2026-89724, CVE-2026-89725,     CVE-2026-89726, CVE-2026-89729, CVE-2026-89730, CVE-2026-89732, CVE-2026-89733, CVE-2026-89736,     CVE-2026-89741, CVE-2026-89742, CVE-2026-89749, CVE-2026-89752, CVE-2026-89753, CVE-2026-89765,     CVE-2026-89777, CVE-2026-89778, CVE-2026-89779, CVE-2026-89780, CVE-2026-89781, CVE-2026-89782,     CVE-2026-89783, CVE-2026-89784, CVE-2026-89785, CVE-2026-89786, CVE-2026-89787, CVE-2026-89789,     CVE-2026-89792, CVE-2026-89796, CVE-2026-89816, CVE-2026-89817, CVE-2026-89821, CVE-2026-89823,     CVE-2026-89843, CVE-2026-89845, CVE-2026-89846, CVE-2026-89847, CVE-2026-89849, CVE-2026-89850,     CVE-2026-89851, CVE-2026-89852, CVE-2026-89853, CVE-2026-89854, CVE-2026-89855, CVE-2026-89856,     CVE-2026-89858, CVE-2026-89861, CVE-2026-89863, CVE-2026-89864, CVE-2026-89865, CVE-2026-89871,     CVE-2026-89872, CVE-2026-89876, CVE-2026-89878, CVE-2026-89879, CVE-2026-89880, CVE-2026-89881,     CVE-2026-89883, CVE-2026-89887, CVE-2026-89888, CVE-2026-89890, CVE-2026-89891, CVE-2026-89892,     CVE-2026-89893, CVE-2026-89894, CVE-2026-89895, CVE-2026-89896, CVE-2026-89897, CVE-2026-89901,     CVE-2026-89923, CVE-2026-89924, CVE-2026-89925, CVE-2026-89926, CVE-2026-89927, CVE-2026-89930,     CVE-2026-89932, CVE-2026-89936, CVE-2026-89937, CVE-2026-89939, CVE-2026-89945, CVE-2026-89946,     CVE-2026-89947, CVE-2026-89948, CVE-2026-89949, CVE-2026-89951, CVE-2026-89952, CVE-2026-89953,     CVE-2026-89954, CVE-2026-89964, CVE-2026-89965, CVE-2026-89968, CVE-2026-89969, CVE-2026-89973,     CVE-2026-89979, CVE-2026-89982, CVE-2026-89983, CVE-2026-89984, CVE-2026-89989, CVE-2026-89993,     CVE-2026-89997, CVE-2026-89999, CVE-2026-90000, CVE-2026-90007, CVE-2026-90011, CVE-2026-90015,     CVE-2026-90017, CVE-2026-90018, CVE-2026-90019, CVE-2026-90020, CVE-2026-90025, CVE-2026-90031,     CVE-2026-90032, CVE-2026-90033, CVE-2026-90034, CVE-2026-90049, CVE-2026-90053, CVE-2026-90054,     CVE-2026-90055, CVE-2026-90056, CVE-2026-90058, CVE-2026-90062, CVE-2026-90063, CVE-2026-90067,     CVE-2026-90068, CVE-2026-90070, CVE-2026-90071, CVE-2026-90072, CVE-2026-90073, CVE-2026-90074,     CVE-2026-90075, CVE-2026-90078, CVE-2026-90081, CVE-2026-90088, CVE-2026-90102, CVE-2026-90103,     CVE-2026-90107, CVE-2026-90114, CVE-2026-90126, CVE-2026-90128, CVE-2026-90140, CVE-2026-90141,     CVE-2026-90143, CVE-2026-90151, CVE-2026-90157, CVE-2026-90160, CVE-2026-90198, CVE-2026-90202,     CVE-2026-90203, CVE-2026-90209, CVE-2026-90214, CVE-2026-90216, CVE-2026-90218, CVE-2026-90219,     CVE-2026-90221, CVE-2026-90222, CVE-2026-90223, CVE-2026-90224, CVE-2026-90225, CVE-2026-90226,     CVE-2026-90228, CVE-2026-90245, CVE-2026-90248, CVE-2026-90249, CVE-2026-90251, CVE-2026-90257,     CVE-2026-90274, CVE-2026-90281, CVE-2026-90283, CVE-2026-90284, CVE-2026-90285, CVE-2026-90286,     CVE-2026-90290, CVE-2026-90292, CVE-2026-90293, CVE-2026-90294, CVE-2026-90295, CVE-2026-90296,     CVE-2026-90297, CVE-2026-90298, CVE-2026-90302, CVE-2026-90303, CVE-2026-90307, CVE-2026-90314,     CVE-2026-90316, CVE-2026-90318, CVE-2026-90319, CVE-2026-90327, CVE-2026-90329, CVE-2026-90334,     CVE-2026-90341, CVE-2026-90348, CVE-2026-90360, CVE-2026-90361, CVE-2026-90362, CVE-2026-90372,     CVE-2026-90378, CVE-2026-90382, CVE-2026-90386, CVE-2026-90388, CVE-2026-90391, CVE-2026-90393,     CVE-2026-90394, CVE-2026-90395, CVE-2026-90403, CVE-2026-90411, CVE-2026-90413, CVE-2026-90414,     CVE-2026-90415, CVE-2026-90416, CVE-2026-90419, CVE-2026-90420, CVE-2026-90431, CVE-2026-90434,     CVE-2026-90435, CVE-2026-92476, CVE-2026-92494, CVE-2026-92496, CVE-2026-92498, CVE-2026-92501,     CVE-2026-92504, CVE-2026-92508, CVE-2026-92521, CVE-2026-92522, CVE-2026-92524, CVE-2026-93037,     CVE-2026-93039, CVE-2026-93040, CVE-2026-93041, CVE-2026-93046, CVE-2026-93048, CVE-2026-93049,     CVE-2026-93051, CVE-2026-93052, CVE-2026-93053, CVE-2026-93054, CVE-2026-93055, CVE-2026-93056,     CVE-2026-93061, CVE-2026-93067, CVE-2026-93095, CVE-2026-93098, CVE-2026-93102, CVE-2026-93103,     CVE-2026-93108, CVE-2026-93109, CVE-2026-93110, CVE-2026-93114, CVE-2026-93115, CVE-2026-93120,     CVE-2026-93130, CVE-2026-93131, CVE-2026-93138, CVE-2026-93140, CVE-2026-93141, CVE-2026-93145,     CVE-2026-93151, CVE-2026-93158, CVE-2026-93159, CVE-2026-93160, CVE-2026-93161, CVE-2026-93165,     CVE-2026-93167, CVE-2026-93170, CVE-2026-93177, CVE-2026-93178, CVE-2026-93183, CVE-2026-93185,     CVE-2026-93188, CVE-2026-93189, CVE-2026-93191, CVE-2026-93203, CVE-2026-93204, CVE-2026-93206,     CVE-2026-93213, CVE-2026-93214, CVE-2026-93219, CVE-2026-93222, CVE-2026-93226, CVE-2026-93234,     CVE-2026-93236, CVE-2026-93242, CVE-2026-93245, CVE-2026-93252, CVE-2026-93256, CVE-2026-93261,     CVE-2026-93262, CVE-2026-93264, CVE-2026-93268, CVE-2026-93271, CVE-2026-93274, CVE-2026-93280,     CVE-2026-93283, CVE-2026-93286, CVE-2026-93287, CVE-2026-93288, CVE-2026-93782, CVE-2026-93783,     CVE-2026-93784, CVE-2026-93785, CVE-2026-93789, CVE-2026-93795, CVE-2026-93797, CVE-2026-93798,     CVE-2026-93800, CVE-2026-93802, CVE-2026-93803, CVE-2026-93805, CVE-2026-93807, CVE-2026-93808,     CVE-2026-93811, CVE-2026-93812, CVE-2026-93813, CVE-2026-93815, CVE-2026-93816, CVE-2026-93819,     CVE-2026-93820, CVE-2026-93821, CVE-2026-93822, CVE-2026-93825, CVE-2026-93830, CVE-2026-97407,     CVE-2026-97408, CVE-2026-97411, CVE-2026-97413, CVE-2026-97416, CVE-2026-97417, CVE-2026-97418,     CVE-2026-97419, CVE-2026-97420, CVE-2026-97421, CVE-2026-97430, CVE-2026-97434, CVE-2026-97435,     CVE-2026-97436, CVE-2026-97437, CVE-2026-97438, CVE-2026-97439, CVE-2026-97440, CVE-2026-97441,     CVE-2026-97443, CVE-2026-97444, CVE-2026-97445, CVE-2026-97446, CVE-2026-97448, CVE-2026-97449,     CVE-2026-97450, CVE-2026-97451, CVE-2026-97452, CVE-2026-97453, CVE-2026-97454, CVE-2026-97455,     CVE-2026-97456, CVE-2026-97472, CVE-2026-97475, CVE-2026-97476, CVE-2026-97481, CVE-2026-97482,     CVE-2026-97483, CVE-2026-97484, CVE-2026-97485, CVE-2026-97486, CVE-2026-97487, CVE-2026-97488,     CVE-2026-97489, CVE-2026-97490, CVE-2026-97491, CVE-2026-97492, CVE-2026-97502, CVE-2026-97506,     CVE-2026-97507, CVE-2026-97508, CVE-2026-97510, CVE-2026-97523, CVE-2026-97524, CVE-2026-97568,     CVE-2026-97572, CVE-2026-97573, CVE-2026-97576, CVE-2026-97582, CVE-2026-97592, CVE-2026-97596,     CVE-2026-97598, CVE-2026-97601, CVE-2026-97604, CVE-2026-97608, CVE-2026-97611, CVE-2026-97612,     CVE-2026-97899, CVE-2026-97904, CVE-2026-97905, CVE-2026-97909, CVE-2026-97910, CVE-2026-97923,     CVE-2026-97926, CVE-2026-97927, CVE-2026-97930, CVE-2026-97931, CVE-2026-97940, CVE-2026-97948,     CVE-2026-97951, CVE-2026-97954, CVE-2026-97957, CVE-2026-97958, CVE-2026-97959, CVE-2026-97963,     CVE-2026-97964, CVE-2026-97969, CVE-2026-97970, CVE-2026-97981, CVE-2026-97982, CVE-2026-97991,     CVE-2026-97993, CVE-2026-97995, CVE-2026-97998, CVE-2026-98006, CVE-2026-98009, CVE-2026-98010,     CVE-2026-98011, CVE-2026-98012, CVE-2026-98013, CVE-2026-98014, CVE-2026-98015, CVE-2026-98016,     CVE-2026-98022, CVE-2026-98023, CVE-2026-98025, CVE-2026-98027, CVE-2026-98030, CVE-2026-98031,     CVE-2026-98063, CVE-2026-98064, CVE-2026-98066, CVE-2026-98068, CVE-2026-98069, CVE-2026-98070,     CVE-2026-98071, CVE-2026-98072, CVE-2026-98074, CVE-2026-98075, CVE-2026-98076, CVE-2026-98077,     CVE-2026-98078, CVE-2026-98080, CVE-2026-98088, CVE-2026-98090, CVE-2026-98091, CVE-2026-98094,     CVE-2026-98095, CVE-2026-98096, CVE-2026-98098, CVE-2026-98108, CVE-2026-98113, CVE-2026-98116,     CVE-2026-98121, CVE-2026-98123, CVE-2026-98130, CVE-2026-98154, CVE-2026-98157, CVE-2026-98158)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4935-1 advisory.

    The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

    The following security issues were fixed:

    - CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
    - CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
    - CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
    - CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
    - CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
    - CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()     (bsc#1264851).
    - CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
    - CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
    - CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
    - CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
    - CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
    - CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
    - CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
    - CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked     (bsc#1273764).
    - CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
    - CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
    - CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
    - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
    - CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
    - CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
    - CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
    - CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
    - CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
    - CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
    - CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
    - CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
    - CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
    - CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
    - CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
    - CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
    - CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
    - CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
    - CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()     (bsc#1277614).
    - CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
    - CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
    - CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
    - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
    - CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
    - CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
    - CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
    - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state     (bsc#1275564).
    - CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
    - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
    - CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
    - CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
    - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
    - CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
    - CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260).
    - CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706).
    - CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
    - CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
    - CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
    - CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).
    - CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477).
    - CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).
    - CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144).
    - CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
    - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
    - CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525).
    - CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).
    - CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726).
    - CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865).
    - CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized     (bsc#1281991).
    - CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979).
    - CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162).
    - CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742).
    - CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784).
    - CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir     (bsc#1282932).
    - CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()     (bsc#1282808).
    - CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access     (bsc#1283037).
    - CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768).
    - CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()     (bsc#1282770).
    - CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142).
    - CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
    - CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
    - CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()     (bsc#1283945).
    - CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283795).
    - CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736).
    - CVE-2026-97945: replace with mainline version and update References (bsc#1283144).
    - CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823).
    - CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
    - CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
    - CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979).
    - CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd()     (bsc#1283936).
    - CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
    - CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415).
    - CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559).
    - CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581).
    - CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
    - CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
    - CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking     (bsc#1284606).
    - CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462).
    - CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
    - CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295).
    - CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647).
    - CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291).
    - CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection     (bsc#1284791).
    - CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289).
    - CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
    - CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649).
    - CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288).
    - CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655).
    - CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept     (bsc#1284424).
    - CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

    The following non security issues were fixed:

    - ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes).
    - ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git-fixes).
    - ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes).
    - ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git-fixes).
    - ASoC: Intel: avs: Reset the stream unless it is already prepared (git-fixes).
    - ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes).
    - ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes).
    - ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes).
    - ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git-fixes).
    - ASoC: stm32: spdifrx: fix synchronization state check (git-fixes).
    - ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes).
    - Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes).
    - Bluetooth: btintel: validate DDC record lengths (git-fixes).
    - Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes).
    - Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes).
    - Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git-fixes).
    - Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes).
    - Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes).
    - Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes).
    - Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git-fixes).
    - Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes).
    - Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes).
    - Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes).
    - Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes).
    - Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes).
    - Bluetooth: ISO: Serialize concurrent connect calls (git-fixes).
    - Bluetooth: MGMT: Fix status of pending commands flushed on power off (git-fixes).
    - Bluetooth: RFCOMM: Fix initial port reference race (git-fixes).
    - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git-fixes).
    - Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes).
    - crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872).
    - Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes).
    - Drivers: hv: Don't reset VMBus connection state on error/exit paths (git-fixes).
    - Drivers: hv: vmbus: fix typo 'substract' in comment (git-fixes).
    - drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes).
    - drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git-fixes).
    - drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git-fixes).
    - drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes).
    - drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes).
    - drm/aspeed: Balance the display clock enable on teardown (git-fixes).
    - drm/dp: don't mark the AUX backlight enabled when enabling failed (git-fixes).
    - drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes).
    - drm/gud: don't keep a connector without a CRTC as connector_state (git-fixes).
    - drm/i915/gem: Prevent overstepping exec array boundary (git-fixes).
    - drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes).
    - drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes).
    - drm/imagination: Size page table preallocation by device address (git-fixes).
    - drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes).
    - drm/vc4: Free the BO cache size list on teardown (git-fixes).
    - drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes).
    - gpio: exar: initialize the ID before registering its cleanup (git-fixes).
    - gpio: xilinx: fix runtime PM leak on request error path (git-fixes).
    - IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes).
    - KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199).
    - KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199).
    - KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199).
    - KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199).
    - KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199).
    - KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git-fixes).
    - KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199).
    - KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).
    - KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).
    - memstick: core: wait for request completion before freeing card (git-fixes).
    - memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes).
    - mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes).
    - mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes).
    - mmc: mtk-sd: Cancel request timeout work on remove (git-fixes).
    - mmc: sdhci-sprd: disable runtime PM on remove (git-fixes).
    - net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes).
    - net: mctp-i2c: fix duplicate reception of old data (bsc#1266730).
    - net: usb: ax88179_178a: fix rx frame length for non-last packets (git-fixes).
    - netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
    - PCI: hv: Probe vPCI buses asynchronously (git-fixes).
    - PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes).
    - pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes).
    - power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git-fixes).
    - power: supply: Fix maintenance charge table kernel-doc (git-fixes).
    - power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes).
    - powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645).
    - powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199).
    - printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989).
    - pseries/plpks: clear SED key data after use (bsc#1215199).
    - pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199).
    - pseries/plpks: clear signed update authentication buffer (bsc#1215199).
    - pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199).
    - pseries/plpks: make narrowing conversions explicit (bsc#1215199).
    - pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199).
    - regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git-fixes).
    - s390/cio: Purge based on the cdev's online status (bsc#1284429).
    - s390/topology: Use zero-based numbering for containing (bsc#1275518).
    - selftests/net: convert arp_ndisc_untracked_subnets.sh to run it in unique namespace (bsc#1285880).
    - serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git-fixes).
    - tools/hv: fix typo 'retrive' in comment (git-fixes).
    - tools: gpio: fix building from the top level with O= (git-fixes).
    - vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).
    - wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes).
    - wifi: mt76: mt792x: pick the SAR table layout from the table itself (git-fixes).
    - wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes).
    - xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4892-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

    The following security issues were fixed:

    - CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076).
    - CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995).
    - CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
    - CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()     (bsc#1264851).
    - CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670).
    - CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
    - CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked     (bsc#1273764).
    - CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
    - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
    - CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288).
    - CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).
    - CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853).
    - CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
    - CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659).
    - CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080).
    - CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
    - CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273).
    - CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
    - CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()     (bsc#1277614).
    - CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964).
    - CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844).
    - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
    - CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387).
    - CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
    - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state     (bsc#1275564).
    - CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
    - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
    - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
    - CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313).
    - CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
    - CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
    - CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058).
    - CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).
    - CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
    - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
    - CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).
    - CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784).
    - CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744).
    - CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()     (bsc#1282808).
    - CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755).
    - CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762).
    - CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()     (bsc#1282770).
    - CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142).
    - CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823).
    - CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979).
    - CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
    - CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581).
    - CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking     (bsc#1284606).
    - CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295).
    - CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291).
    - CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection     (bsc#1284791).
    - CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289).
    - CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
    - CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288).
    - CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

    The following non security issues were fixed:

    - kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.
    - net: add inline function skb_csum_is_sctp (bsc#1285684).
    - netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
    - vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net/rds: Don't sleep inside rds_ib_conn_path_shutdown New rds rdma self tests exposed a hang when tearing     down the ib network configs. This is caused by the shutdown worker thread sleeping on the wait_event call,     which blocks other work items in the queue. Fix this by changing wait_event to wait_event timeout, and     looping until the wait check succeeds. (CVE-2026-97491)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	Local	high
375805	Ubuntu 22.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-8962-1)	Nessus	Ubuntu Local Security Checks	Local	high
375804	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-8961-1)	Nessus	Ubuntu Local Security Checks	Local	high
375113	Photon OS 5.0: Linux PHSA-2026-5.0-91-1014	Nessus	PhotonOS Local Security Checks	Local	high
375014	Photon OS 5.0: Linux PHSA-2026-5.0-92-1014	Nessus	PhotonOS Local Security Checks	Local	high
374174	SUSE SLES16 Security Update : kernel (SUSE-SU-2026:24437-1)	Nessus	SuSE Local Security Checks	Local	high
374169	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4935-1)	Nessus	SuSE Local Security Checks	Local	high
374162	SUSE SLES16: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:24446-1)	Nessus	SuSE Local Security Checks	Local	high
372022	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:22167-1)	Nessus	SuSE Local Security Checks	Local	high
371818	SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4892-1)	Nessus	SuSE Local Security Checks	Local	medium
366919	Debian dla-4841 : ata-modules-6.1.0-53-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
349976	Linux Distros Unpatched Vulnerability : CVE-2026-97491	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-97491

medium

Tenable Plugins

high

high

high

high

high

high

high

high

high

medium

high

high

high

medium