SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4282-1)

high Nessus Plugin ID 349185

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4282-1 advisory.

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

- CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).
- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
- CVE-2026-43134: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (bsc#1264308).
- CVE-2026-43257: media: cx88: Add missing unmap in snd_cx88_hw_params() (bsc#1264296).
- CVE-2026-43277: ACPI / APEI: Make GHES estatus header validation more user friendly (bsc#1264594).
- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
- CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
- CVE-2026-45941: tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure (bsc#1266920).
- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
- CVE-2026-46108: ipmi:si: Return state to normal if message allocation fails (bsc#1267615).
- CVE-2026-46128: ipmi: Check event message buffer response for bad data (bsc#1267643).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
- CVE-2026-53091: net: do not use skb_mac_header() in qdisc_pkt_len_init() (bsc#1269530).
- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).
- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).
- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).
- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).
- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).
- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).
- CVE-2026-53403: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in (bsc#1271731).
- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).
- CVE-2026-63823: security: don't use RCU accessors for cred->session_keyring (bsc#1272182).
- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).
- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).
- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
- CVE-2026-63962: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (bsc#1272482).
- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).
- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).
- CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).
- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
- CVE-2026-64088: batman-adv: tt: fix negative tt_buff_len (bsc#1273463).
- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).
- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).
- CVE-2026-64178: Bluetooth: bnep: Fix UAF read of dev->name (bsc#1273946).
- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).
- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
- CVE-2026-64306: crypto: drbg - Fix returning success on failure in CTR_DRBG (bsc#1273939).
- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).
- CVE-2026-64313: crypto: ecc - Fix carry overflow in vli multiplication (bsc#1273940).
- CVE-2026-64315: printk: add print_hex_dump_devel() (bsc#1274028).
- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).
- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).
- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).
- CVE-2026-64332: USB: ulpi: fix memory leak on registration failure (bsc#1273285).
- CVE-2026-64333: USB: serial: digi_acceleport: fix write buffer corruption (bsc#1273933).
- CVE-2026-64334: USB: serial: digi_acceleport: fix hard lockup on disconnect (bsc#1273942).
- CVE-2026-64340: USB: legousbtower: fix use-after-free on disconnect race (bsc#1274003).
- CVE-2026-64341: USB: iowarrior: fix use-after-free on disconnect race (bsc#1273895).
- CVE-2026-64343: USB: ldusb: fix use-after-free on disconnect race (bsc#1273974).
- CVE-2026-64344: USB: idmouse: simplify disconnect handling (bsc#1274019).
- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).
- CVE-2026-64408: Bluetooth: bnep: pin L2CAP connection during netdev registration (bsc#1273778).
- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).
- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).
- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).
- CVE-2026-64470: Bluetooth: btusb: fix use-after-free on marvell probe failure (bsc#1273892).
- CVE-2026-64471: Bluetooth: btusb: fix use-after-free on registration failure (bsc#1274278).
- CVE-2026-64512: ACPI: CPPC: Suppress UBSAN warning caused by field misuse (bsc#1273597).
- CVE-2026-64513: KVM: x86: Move update_cr8_intercept() to lapic.c (bsc#1273327).
- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
- CVE-2026-64544: crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents (bsc#1273316).
- CVE-2026-64547: net: usb: net1080: validate packet_len before pad-byte access in rx_fixup (bsc#1273319).
- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).
- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).
- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).
- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).
- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).
- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).
- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).
- CVE-2026-68093: KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (bsc#1274725).
- CVE-2026-68111: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (bsc#1274873).
- CVE-2026-68117: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (bsc#1274881).
- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).
- CVE-2026-68123: net: openvswitch: don't call pad_packet if not necessary (bsc#1275169).
- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).
- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).
- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).
- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).
- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).
- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).
- CVE-2026-68156: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (bsc#1275305).
- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).
- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).
- CVE-2026-68188: Bluetooth: RFCOMM: Fix session UAF in set_termios (bsc#1274953).
- CVE-2026-68197: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (bsc#1274804).
- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).
- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).
- CVE-2026-68234: drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved (bsc#1275650).
- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).
- CVE-2026-68277: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers (bsc#1275125).
- CVE-2026-68278: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (bsc#1275870).
- CVE-2026-68279: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers (bsc#1275871).
- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).
- CVE-2026-68289: tipc: keep the skb in rcv queue until the whole data is read (bsc#1275976).
- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).
- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).
- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).
- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).
- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).
- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).
- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).
- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).
- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).
- CVE-2026-68349: wifi: carl9170: fix buffer overflow in rx_stream failover path (bsc#1274681).
- CVE-2026-68351: wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (bsc#1274678).
- CVE-2026-68357: watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (bsc#1274737).
- CVE-2026-68363: wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (bsc#1275164).
- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).
- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).
- CVE-2026-68405: wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock (bsc#1274896).
- CVE-2026-68410: wifi: libertas: fix memory leak in helper_firmware_cb() (bsc#1274710).
- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).
- CVE-2026-68426: esp: remove the skb from the chain when it's enqueued in cryptd_wq (bsc#1274705).
- CVE-2026-68428: KVM: x86/mmu: Fix use-after-free on vendor module reload (bsc#1274699).
- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).
- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).
- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).
- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).
- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).
- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).
- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).
- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).
- CVE-2026-72084: scsi: target: Write NULL to *port_nexus_ptr if no ISID (bsc#1275540).
- CVE-2026-72086: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1277179).
- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).
- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).
- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).
- CVE-2026-72142: i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (bsc#1277522).
- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).
- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).
- CVE-2026-72284: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (bsc#1277730).
- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).
- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).
- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).
- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).
- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).
- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).
- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).
- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).
- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).
- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).
- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).
- CVE-2026-74265: net: mana: initialize gdma queue id to INVALID_QUEUE_ID (bsc#1276517).
- CVE-2026-74271: power: supply: core: Delete two error messages for a failed memory allocation in power_supply_check_supplies() (bsc#1276502).
- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).
- CVE-2026-74279: crypto: cavium/cpt - fix DMA cleanup using wrong loop index (bsc#1276479).
- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).
- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).
- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).
- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr->pd (bsc#1277095).
- CVE-2026-74341: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response (bsc#1277089).
- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).
- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).
- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).
- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).
- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).
- CVE-2026-74416: drm/radeon: fix memory leak in radeon_ring_restore() on lock failure (bsc#1276343).
- CVE-2026-74417: drm/radeon: fix integer overflow in radeon_align_pitch() (bsc#1276363).
- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).
- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).
- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).
- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).
- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).
- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).
- CVE-2026-74508: Bluetooth: HIDP: reject frames without a transaction header (bsc#1277893).
- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).
- CVE-2026-74519: pinctrl: devicetree: don't free uninitialized dev_name on error path (bsc#1275810).
- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).
- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).
- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).
- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).
- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).
- CVE-2026-74582: af_packet: fix raw sockets over 6in4 tunnel (bsc#1275784).
- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).
- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).
- CVE-2026-74673: Input: evdev - fix information leak in evdev_pass_values() (bsc#1277637).
- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).
- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).
- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).
- CVE-2026-80574: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (bsc#1277329).
- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).
- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).
- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).
- CVE-2026-80609: qede: fix out-of-bounds check for cqe->len_list (bsc#1278334).
- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).
- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).
- CVE-2026-80765: HID: hyperv: validate initial device info bounds (bsc#1279499).
- CVE-2026-80819: Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (bsc#1279607).
- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).

The following non security issues were fixed:

- fcntl: Fix potential deadlock in send_sig{io, urg}() (bsc#1269113).
- mkspec-dtb: Move DTS prefix into package list.
- mkspec-dtb: Move provides-obsoletes to package list.
- mkspec-dtb: Put per-architecture package lists into a hash.
- mkspec-dtb: re-indent.
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).
- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).
- s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1270264).
- s390/syscalls: Add spectre boundary for syscall dispatch table (bsc#1270264).
- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).
- smb: client: harden POSIX SID length parsing (bsc#1273557).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

Plugin Details

Severity: High

ID: 349185

File Name: suse_SU-2026-4282-1.nasl

Version: 1.1

Type: Local

Agent: unix

Family: SuSE Local Security Checks

Published: 9/23/2026

Updated: 9/23/2026

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.9

Percentile: 99.35

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-64381

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:novell:suse_linux:12, p-cpe:/a:novell:suse_linux:cluster-md-kmp-default, p-cpe:/a:novell:suse_linux:dlm-kmp-default, p-cpe:/a:novell:suse_linux:gfs2-kmp-default, p-cpe:/a:novell:suse_linux:kernel-default-base, p-cpe:/a:novell:suse_linux:kernel-default-kgraft, p-cpe:/a:novell:suse_linux:kernel-default-man, p-cpe:/a:novell:suse_linux:kernel-default, p-cpe:/a:novell:suse_linux:kernel-source, p-cpe:/a:novell:suse_linux:kgraft-patch-4_12_14-122_328-default, p-cpe:/a:novell:suse_linux:ocfs2-kmp-default

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/22/2026

Vulnerability Publication Date: 4/9/2024

CISA Known Exploited Vulnerability Due Dates: 9/21/2026

Reference Information

CVE: CVE-2024-35973, CVE-2025-39964, CVE-2025-40022, CVE-2025-40277, CVE-2025-68214, CVE-2026-23003, CVE-2026-23443, CVE-2026-31483, CVE-2026-43116, CVE-2026-43125, CVE-2026-43134, CVE-2026-43257, CVE-2026-43277, CVE-2026-43363, CVE-2026-43416, CVE-2026-45941, CVE-2026-46070, CVE-2026-46107, CVE-2026-46108, CVE-2026-46128, CVE-2026-52912, CVE-2026-52920, CVE-2026-52925, CVE-2026-52939, CVE-2026-52946, CVE-2026-53001, CVE-2026-53059, CVE-2026-53061, CVE-2026-53077, CVE-2026-53089, CVE-2026-53091, CVE-2026-53149, CVE-2026-53163, CVE-2026-53219, CVE-2026-53220, CVE-2026-53223, CVE-2026-53228, CVE-2026-53238, CVE-2026-53264, CVE-2026-53265, CVE-2026-53309, CVE-2026-53374, CVE-2026-53388, CVE-2026-53403, CVE-2026-63810, CVE-2026-63823, CVE-2026-63860, CVE-2026-63868, CVE-2026-63887, CVE-2026-63888, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892, CVE-2026-63898, CVE-2026-63920, CVE-2026-63928, CVE-2026-63962, CVE-2026-63990, CVE-2026-64001, CVE-2026-64002, CVE-2026-64005, CVE-2026-64007, CVE-2026-64010, CVE-2026-64011, CVE-2026-64015, CVE-2026-64088, CVE-2026-64103, CVE-2026-64109, CVE-2026-64113, CVE-2026-64114, CVE-2026-64115, CVE-2026-64118, CVE-2026-64164, CVE-2026-64178, CVE-2026-64190, CVE-2026-64266, CVE-2026-64304, CVE-2026-64306, CVE-2026-64312, CVE-2026-64313, CVE-2026-64315, CVE-2026-64317, CVE-2026-64322, CVE-2026-64323, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334, CVE-2026-64340, CVE-2026-64341, CVE-2026-64343, CVE-2026-64344, CVE-2026-64380, CVE-2026-64381, CVE-2026-64408, CVE-2026-64411, CVE-2026-64412, CVE-2026-64423, CVE-2026-64436, CVE-2026-64470, CVE-2026-64471, CVE-2026-64512, CVE-2026-64513, CVE-2026-64541, CVE-2026-64544, CVE-2026-64547, CVE-2026-64551, CVE-2026-64553, CVE-2026-64562, CVE-2026-64567, CVE-2026-64581, CVE-2026-64582, CVE-2026-68082, CVE-2026-68093, CVE-2026-68111, CVE-2026-68117, CVE-2026-68121, CVE-2026-68123, CVE-2026-68129, CVE-2026-68141, CVE-2026-68143, CVE-2026-68153, CVE-2026-68154, CVE-2026-68155, CVE-2026-68156, CVE-2026-68158, CVE-2026-68159, CVE-2026-68188, CVE-2026-68197, CVE-2026-68198, CVE-2026-68202, CVE-2026-68234, CVE-2026-68238, CVE-2026-68277, CVE-2026-68278, CVE-2026-68279, CVE-2026-68284, CVE-2026-68289, CVE-2026-68299, CVE-2026-68300, CVE-2026-68313, CVE-2026-68315, CVE-2026-68320, CVE-2026-68325, CVE-2026-68328, CVE-2026-68329, CVE-2026-68338, CVE-2026-68349, CVE-2026-68351, CVE-2026-68357, CVE-2026-68363, CVE-2026-68397, CVE-2026-68398, CVE-2026-68405, CVE-2026-68410, CVE-2026-68425, CVE-2026-68426, CVE-2026-68428, CVE-2026-68432, CVE-2026-68433, CVE-2026-68450, CVE-2026-68480, CVE-2026-72017, CVE-2026-72020, CVE-2026-72036, CVE-2026-72083, CVE-2026-72084, CVE-2026-72086, CVE-2026-72108, CVE-2026-72135, CVE-2026-72138, CVE-2026-72142, CVE-2026-72164, CVE-2026-72251, CVE-2026-72282, CVE-2026-72284, CVE-2026-72296, CVE-2026-72297, CVE-2026-72323, CVE-2026-72339, CVE-2026-72389, CVE-2026-72421, CVE-2026-72450, CVE-2026-72466, CVE-2026-72487, CVE-2026-72502, CVE-2026-74255, CVE-2026-74261, CVE-2026-74265, CVE-2026-74271, CVE-2026-74278, CVE-2026-74279, CVE-2026-74296, CVE-2026-74297, CVE-2026-74302, CVE-2026-74334, CVE-2026-74341, CVE-2026-74377, CVE-2026-74378, CVE-2026-74382, CVE-2026-74388, CVE-2026-74406, CVE-2026-74416, CVE-2026-74417, CVE-2026-74454, CVE-2026-74479, CVE-2026-74482, CVE-2026-74488, CVE-2026-74495, CVE-2026-74496, CVE-2026-74508, CVE-2026-74510, CVE-2026-74519, CVE-2026-74537, CVE-2026-74548, CVE-2026-74550, CVE-2026-74556, CVE-2026-74557, CVE-2026-74582, CVE-2026-74584, CVE-2026-74669, CVE-2026-74673, CVE-2026-74705, CVE-2026-74743, CVE-2026-80534, CVE-2026-80574, CVE-2026-80580, CVE-2026-80590, CVE-2026-80603, CVE-2026-80609, CVE-2026-80714, CVE-2026-80737, CVE-2026-80765, CVE-2026-80819, CVE-2026-80909

SuSE: SUSE-SU-2026:4282-1

Detections

Analytics