SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4706-1)

high Nessus Plugin ID 366742

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4706-1 advisory.

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
- CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
- CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).
- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
- CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512).
- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).
- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).
- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).
- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).
- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).
- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).
- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).
- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).
- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).
- CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238).
- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).
- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).
- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).
- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).
- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).
- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).
- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).
- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).
- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).
- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).
- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).
- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).
- CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900).
- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).
- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).
- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).
- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).
- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).
- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).
- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).
- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).
- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).
- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).
- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).
- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).
- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).
- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).
- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).
- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).
- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).
- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).
- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).
- CVE-2026-72125: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER (bsc#1277535).
- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).
- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).
- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).
- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).
- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).
- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).
- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).
- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).
- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).
- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).
- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).
- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).
- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).
- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).
- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).
- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).
- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).
- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).
- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).
- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).
- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).
- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).
- CVE-2026-72337: Bluetooth: 6lowpan: avoid untracked enable work (bsc#1277773).
- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).
- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).
- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).
- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).
- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).
- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).
- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).
- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).
- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).
- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).
- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).
- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).
- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).
- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).
- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).
- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).
- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).
- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).
- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).
- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).
- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).
- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).
- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).
- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).
- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).
- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).
- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).
- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).
- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).
- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).
- CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947).
- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).
- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).
- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).
- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).
- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).
- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519).
- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).
- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).
- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).
- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).
- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).
- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).
- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).
- CVE-2026-74286: net: pfcp: allocate per-cpu tstats for PFCP netdevs (bsc#1276471).
- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).
- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).
- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).
- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).
- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).
- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).
- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).
- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).
- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).
- CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129).
- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).
- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).
- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).
- CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067).
- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).
- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).
- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).
- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).
- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).
- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).
- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).
- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).
- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).
- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).
- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).
- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).
- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).
- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).
- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).
- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).
- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).
- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).
- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).
- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).
- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).
- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).
- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).
- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).
- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).
- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).
- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).
- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).
- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).
- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).
- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).
- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).
- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).
- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).
- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).
- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).
- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).
- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).
- CVE-2026-74513: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister (bsc#1275956).
- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).
- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).
- CVE-2026-74533: replace additional lock in hci_conn with a common spinlock (bsc#1275804).
- CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801).
- CVE-2026-74535: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (bsc#1275812).
- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).
- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).
- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).
- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).
- CVE-2026-74551: hwmon: (nzxt-smart2) DMA-align output buffer (bsc#1275680).
- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).
- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).
- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).
- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).
- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).
- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).
- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).
- CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766).
- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).
- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).
- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).
- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).
- CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493).
- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).
- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).
- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).
- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).
- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).
- CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906).
- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).
- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).
- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).
- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).
- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).
- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).
- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).
- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).
- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).
- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).
- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).
- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).
- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).
- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).
- CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407).
- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).
- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).
- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).
- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).
- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).
- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).
- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).
- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).
- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).
- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).
- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).
- CVE-2026-74713: ...

Please note that the description has been truncated due to length. Please refer to vendor advisory for the full description.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

Plugin Details

Severity: High

ID: 366742

File Name: suse_SU-2026-4706-1.nasl

Version: 1.1

Type: Local

Agent: unix

Family: SuSE Local Security Checks

Published: 10/17/2026

Updated: 10/17/2026

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.9

Percentile: 99.35

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-64103

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:novell:suse_linux:15, p-cpe:/a:novell:suse_linux:cluster-md-kmp-default, p-cpe:/a:novell:suse_linux:dlm-kmp-default, p-cpe:/a:novell:suse_linux:gfs2-kmp-default, p-cpe:/a:novell:suse_linux:kernel-64kb, p-cpe:/a:novell:suse_linux:kernel-azure, p-cpe:/a:novell:suse_linux:kernel-default-base, p-cpe:/a:novell:suse_linux:kernel-default-extra, p-cpe:/a:novell:suse_linux:kernel-default, p-cpe:/a:novell:suse_linux:kernel-obs-build, p-cpe:/a:novell:suse_linux:kernel-source, p-cpe:/a:novell:suse_linux:kernel-zfcpdump, p-cpe:/a:novell:suse_linux:ocfs2-kmp-default, p-cpe:/a:novell:suse_linux:reiserfs-kmp-default

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/16/2026

Vulnerability Publication Date: 4/3/2024

Reference Information

CVE: CVE-2024-26730, CVE-2025-38704, CVE-2026-100075, CVE-2026-23352, CVE-2026-31689, CVE-2026-43409, CVE-2026-45836, CVE-2026-45872, CVE-2026-46044, CVE-2026-46135, CVE-2026-46149, CVE-2026-46196, CVE-2026-46304, CVE-2026-52912, CVE-2026-53061, CVE-2026-53284, CVE-2026-53384, CVE-2026-53400, CVE-2026-63883, CVE-2026-63890, CVE-2026-63913, CVE-2026-63956, CVE-2026-63963, CVE-2026-63987, CVE-2026-63993, CVE-2026-64003, CVE-2026-64009, CVE-2026-64038, CVE-2026-64046, CVE-2026-64103, CVE-2026-64173, CVE-2026-64205, CVE-2026-64210, CVE-2026-64213, CVE-2026-64279, CVE-2026-64283, CVE-2026-64297, CVE-2026-64299, CVE-2026-64319, CVE-2026-64320, CVE-2026-64372, CVE-2026-64373, CVE-2026-64402, CVE-2026-64405, CVE-2026-64425, CVE-2026-64473, CVE-2026-64474, CVE-2026-64475, CVE-2026-64476, CVE-2026-64507, CVE-2026-64528, CVE-2026-64542, CVE-2026-64556, CVE-2026-64579, CVE-2026-64580, CVE-2026-64589, CVE-2026-68096, CVE-2026-68128, CVE-2026-68141, CVE-2026-68146, CVE-2026-68148, CVE-2026-68198, CVE-2026-68258, CVE-2026-68264, CVE-2026-68266, CVE-2026-68273, CVE-2026-68290, CVE-2026-68294, CVE-2026-68338, CVE-2026-68376, CVE-2026-68382, CVE-2026-68395, CVE-2026-68441, CVE-2026-68448, CVE-2026-68451, CVE-2026-68452, CVE-2026-68454, CVE-2026-68471, CVE-2026-68477, CVE-2026-72012, CVE-2026-72017, CVE-2026-72018, CVE-2026-72019, CVE-2026-72023, CVE-2026-72025, CVE-2026-72045, CVE-2026-72051, CVE-2026-72052, CVE-2026-72053, CVE-2026-72054, CVE-2026-72055, CVE-2026-72061, CVE-2026-72063, CVE-2026-72066, CVE-2026-72070, CVE-2026-72085, CVE-2026-72086, CVE-2026-72098, CVE-2026-72102, CVE-2026-72106, CVE-2026-72107, CVE-2026-72108, CVE-2026-72125, CVE-2026-72129, CVE-2026-72130, CVE-2026-72135, CVE-2026-72136, CVE-2026-72138, CVE-2026-72147, CVE-2026-72157, CVE-2026-72161, CVE-2026-72163, CVE-2026-72164, CVE-2026-72166, CVE-2026-72218, CVE-2026-72219, CVE-2026-72224, CVE-2026-72237, CVE-2026-72242, CVE-2026-72243, CVE-2026-72247, CVE-2026-72256, CVE-2026-72282, CVE-2026-72297, CVE-2026-72299, CVE-2026-72306, CVE-2026-72321, CVE-2026-72322, CVE-2026-72323, CVE-2026-72325, CVE-2026-72330, CVE-2026-72337, CVE-2026-72339, CVE-2026-72347, CVE-2026-72348, CVE-2026-72349, CVE-2026-72350, CVE-2026-72351, CVE-2026-72352, CVE-2026-72379, CVE-2026-72383, CVE-2026-72392, CVE-2026-72398, CVE-2026-72399, CVE-2026-72404, CVE-2026-72406, CVE-2026-72413, CVE-2026-72421, CVE-2026-72425, CVE-2026-72433, CVE-2026-72434, CVE-2026-72435, CVE-2026-72436, CVE-2026-72437, CVE-2026-72438, CVE-2026-72439, CVE-2026-72440, CVE-2026-72444, CVE-2026-72447, CVE-2026-72448, CVE-2026-72449, CVE-2026-72450, CVE-2026-72459, CVE-2026-72460, CVE-2026-72487, CVE-2026-72488, CVE-2026-72491, CVE-2026-74255, CVE-2026-74256, CVE-2026-74257, CVE-2026-74258, CVE-2026-74261, CVE-2026-74267, CVE-2026-74268, CVE-2026-74270, CVE-2026-74278, CVE-2026-74281, CVE-2026-74282, CVE-2026-74283, CVE-2026-74284, CVE-2026-74286, CVE-2026-74288, CVE-2026-74289, CVE-2026-74290, CVE-2026-74302, CVE-2026-74307, CVE-2026-74308, CVE-2026-74310, CVE-2026-74313, CVE-2026-74317, CVE-2026-74330, CVE-2026-74346, CVE-2026-74349, CVE-2026-74356, CVE-2026-74359, CVE-2026-74363, CVE-2026-74365, CVE-2026-74375, CVE-2026-74376, CVE-2026-74377, CVE-2026-74378, CVE-2026-74382, CVE-2026-74384, CVE-2026-74385, CVE-2026-74386, CVE-2026-74388, CVE-2026-74389, CVE-2026-74390, CVE-2026-74391, CVE-2026-74397, CVE-2026-74398, CVE-2026-74406, CVE-2026-74440, CVE-2026-74443, CVE-2026-74444, CVE-2026-74449, CVE-2026-74450, CVE-2026-74453, CVE-2026-74464, CVE-2026-74465, CVE-2026-74467, CVE-2026-74469, CVE-2026-74471, CVE-2026-74473, CVE-2026-74475, CVE-2026-74476, CVE-2026-74479, CVE-2026-74480, CVE-2026-74485, CVE-2026-74487, CVE-2026-74490, CVE-2026-74492, CVE-2026-74493, CVE-2026-74513, CVE-2026-74515, CVE-2026-74523, CVE-2026-74533, CVE-2026-74534, CVE-2026-74535, CVE-2026-74536, CVE-2026-74538, CVE-2026-74540, CVE-2026-74541, CVE-2026-74551, CVE-2026-74553, CVE-2026-74555, CVE-2026-74557, CVE-2026-74564, CVE-2026-74579, CVE-2026-74580, CVE-2026-74586, CVE-2026-74588, CVE-2026-74589, CVE-2026-74592, CVE-2026-74594, CVE-2026-74595, CVE-2026-74597, CVE-2026-74598, CVE-2026-74600, CVE-2026-74601, CVE-2026-74603, CVE-2026-74608, CVE-2026-74609, CVE-2026-74612, CVE-2026-74615, CVE-2026-74616, CVE-2026-74622, CVE-2026-74625, CVE-2026-74630, CVE-2026-74631, CVE-2026-74632, CVE-2026-74636, CVE-2026-74637, CVE-2026-74638, CVE-2026-74659, CVE-2026-74660, CVE-2026-74663, CVE-2026-74665, CVE-2026-74666, CVE-2026-74667, CVE-2026-74671, CVE-2026-74688, CVE-2026-74689, CVE-2026-74696, CVE-2026-74697, CVE-2026-74700, CVE-2026-74701, CVE-2026-74705, CVE-2026-74710, CVE-2026-74713, CVE-2026-74718, CVE-2026-74719, CVE-2026-74725, CVE-2026-74726, CVE-2026-74735, CVE-2026-74737, CVE-2026-74739, CVE-2026-74743, CVE-2026-74744, CVE-2026-74752, CVE-2026-80540, CVE-2026-80557, CVE-2026-80580, CVE-2026-80585, CVE-2026-80586, CVE-2026-80589, CVE-2026-80603, CVE-2026-80613, CVE-2026-80629, CVE-2026-80631, CVE-2026-80646, CVE-2026-80647, CVE-2026-80663, CVE-2026-80664, CVE-2026-80667, CVE-2026-80679, CVE-2026-80681, CVE-2026-80686, CVE-2026-80693, CVE-2026-80714, CVE-2026-80715, CVE-2026-80716, CVE-2026-80721, CVE-2026-80722, CVE-2026-80725, CVE-2026-80731, CVE-2026-80737, CVE-2026-80739, CVE-2026-80747, CVE-2026-80756, CVE-2026-80779, CVE-2026-80785, CVE-2026-80789, CVE-2026-80793, CVE-2026-80799, CVE-2026-80805, CVE-2026-80836, CVE-2026-80840, CVE-2026-80841, CVE-2026-80842, CVE-2026-80844, CVE-2026-80846, CVE-2026-80847, CVE-2026-80848, CVE-2026-80852, CVE-2026-80863, CVE-2026-80864, CVE-2026-80865, CVE-2026-80880, CVE-2026-80909, CVE-2026-80932, CVE-2026-80947, CVE-2026-80976, CVE-2026-80979, CVE-2026-80983, CVE-2026-80984, CVE-2026-81000, CVE-2026-81001, CVE-2026-89448, CVE-2026-89451, CVE-2026-89453, CVE-2026-89477, CVE-2026-89479, CVE-2026-89480, CVE-2026-89481, CVE-2026-89482, CVE-2026-89485, CVE-2026-89508, CVE-2026-89510, CVE-2026-89511, CVE-2026-89525, CVE-2026-89531, CVE-2026-89532, CVE-2026-89533, CVE-2026-89536, CVE-2026-89538, CVE-2026-89539, CVE-2026-89540, CVE-2026-89541, CVE-2026-89542, CVE-2026-89544, CVE-2026-89547, CVE-2026-89548, CVE-2026-89550, CVE-2026-89551, CVE-2026-89564, CVE-2026-89569, CVE-2026-89580, CVE-2026-89609, CVE-2026-89631, CVE-2026-89636, CVE-2026-89638, CVE-2026-89644, CVE-2026-89662, CVE-2026-89663, CVE-2026-89665, CVE-2026-89671, CVE-2026-89672, CVE-2026-89673, CVE-2026-89674, CVE-2026-89680, CVE-2026-89684, CVE-2026-89686, CVE-2026-89694, CVE-2026-89696, CVE-2026-89697, CVE-2026-89699, CVE-2026-89702, CVE-2026-89704, CVE-2026-89707, CVE-2026-89710, CVE-2026-89712, CVE-2026-89713, CVE-2026-89780, CVE-2026-89784, CVE-2026-89789, CVE-2026-89899, CVE-2026-89912, CVE-2026-89913, CVE-2026-89929, CVE-2026-89930, CVE-2026-89931, CVE-2026-89968, CVE-2026-89970, CVE-2026-89984, CVE-2026-90003, CVE-2026-90047, CVE-2026-90065, CVE-2026-90074, CVE-2026-90088, CVE-2026-90097, CVE-2026-90104, CVE-2026-90149, CVE-2026-90151, CVE-2026-90182, CVE-2026-90183, CVE-2026-90198, CVE-2026-90203, CVE-2026-90218, CVE-2026-90228, CVE-2026-90240, CVE-2026-90241, CVE-2026-90243, CVE-2026-90255, CVE-2026-90259, CVE-2026-90263, CVE-2026-90265, CVE-2026-90292, CVE-2026-90293, CVE-2026-90294, CVE-2026-90307, CVE-2026-90308, CVE-2026-90309, CVE-2026-90358, CVE-2026-90388, CVE-2026-90413, CVE-2026-90414, CVE-2026-90415, CVE-2026-90417, CVE-2026-90426, CVE-2026-90428, CVE-2026-90434, CVE-2026-92495, CVE-2026-92500, CVE-2026-92503, CVE-2026-92507, CVE-2026-92508, CVE-2026-92509, CVE-2026-92510, CVE-2026-92511, CVE-2026-92512, CVE-2026-92514, CVE-2026-92523, CVE-2026-92525, CVE-2026-93037, CVE-2026-93102, CVE-2026-93103, CVE-2026-93104, CVE-2026-93107, CVE-2026-93108, CVE-2026-93109, CVE-2026-93110, CVE-2026-93154, CVE-2026-93207, CVE-2026-93212, CVE-2026-93264, CVE-2026-93269, CVE-2026-93782, CVE-2026-93794, CVE-2026-93810, CVE-2026-93813, CVE-2026-93826, CVE-2026-93829, CVE-2026-97413, CVE-2026-97421, CVE-2026-97477, CVE-2026-97505, CVE-2026-97557, CVE-2026-97934, CVE-2026-97940, CVE-2026-97947, CVE-2026-97950, CVE-2026-98003, CVE-2026-98030, CVE-2026-98080, CVE-2026-98091, CVE-2026-98164

SuSE: SUSE-SU-2026:4706-1

Detections

Analytics