opensuse/kernel-azure&distro=openSUSE Leap 16.0

Vulnerabilities (643)

• CVE-2026-22980HigJan 23, 2026
  affected < 6.12.0-160000.27.1fixed 6.12.0-160000.27.1

  In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memory being accessed after it was freed - reclaim_str_hashtbl in particularly. We cannot hold nfsd_mu

• CVE-2026-22989Jan 23, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlock_filesystem If we are trying to unlock the filesystem via an administrative interface and nfsd isn't running, it crashes the server. This happens currently because nf

• CVE-2026-22982Jan 23, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix crash when adding interface under a lag Commit 15faa1f67ab4 ("lan966x: Fix crash when adding interface under a lag") fixed a similar issue in the lan966x driver caused by a NULL pointer d

• CVE-2026-22979Jan 23, 2026
  affected < 6.12.0-160000.27.1fixed 6.12.0-160000.27.1

  In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in skb_segment_list for GRO packets When skb_segment_list() is called during packet forwarding, it handles packets that were aggregated by the GRO engine. Historically, the segmentation lo

• CVE-2026-22978Jan 23, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bit arches. struct iw_point { void __user *pointer; /* Pointer to the data (in user space) */ __u16 l

• CVE-2025-71161Jan 23, 2026
  affected < 6.12.0-160000.27.1fixed 6.12.0-160000.27.1

  In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive correction: 1. It may cause denial-of-service. In fec_read_bufs, there is a loop that has 253 iterations. For eac

• CVE-2025-71149Jan 23, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

• CVE-2025-71157Jan 23, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nldev_deldev() (introduced by commit 060c642b2ab8 ("RDMA/nldev: Add support to add/delete a sub IB device through netlink") grabs a re

• CVE-2025-71156Jan 23, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are automatically enabled immediately upon request. This allows interrupt to fire before the associated NAPI context is fully initiali

• CVE-2025-71154Jan 23, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure In async_set_registers(), when usb_submit_urb() fails, the allocated async_req structure and URB are not freed, causing a memory leak. The com

• CVE-2025-71148Jan 23, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns

• CVE-2025-71147Jan 23, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd 'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode' but it is not freed in the failure paths. Address this by wrapping the blob into with

• CVE-2025-71145Jan 23, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case as the isp1301_get_client() helpe

• CVE-2026-22977Jan 21, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: net: sock: fix hardened usercopy panic in sock_recv_errqueue skbuff_fclone_cache was created without defining a usercopy region, [1] unlike skbuff_head_cache which properly whitelists the cb[] field. [2] This c

• CVE-2026-22976Jan 21, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset `qfq_class->leaf_qdisc->q.qlen > 0` does not imply that the class itself is active. Two qfq_class objects may point to the s

• CVE-2025-71143Jan 14, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 ("clk: Annotate struct clk_hw_onecell_data with __counted_by") annotated the hws member of 'struct clk_hw_onecell_data' with __

• CVE-2025-71142Jan 14, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: WARNING: kernel/cgroup/cpuset.c:1651 at remote_partition_disable+0xf7/0x110 RIP: 0010:remote_partition_disable+0xf7/0x110

• CVE-2025-71141Jan 14, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed probe The drm_kms_helper_poll_fini() and drm_atomic_helper_shutdown() helpers should only be called when the device has been successfully registered. Currently,

• CVE-2025-71138Jan 14, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pingpong interface It is checked almost always in dpu_encoder_phys_wb_setup_ctl(), but in a single place the check is missing. Also use convenient locals instead

• CVE-2025-71137Jan 14, 2026
  affected < 6.12.0-160000.26.1fixed 6.12.0-160000.26.1

  In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that the RX ring size (rx_pending) is not set below the permitted length. This avoids UBSAN shift-out-of-bounds errors when users passes s