opensuse/kernel-source&distro=openSUSE Tumbleweed

Vulnerabilities (2,129)

• CVE-2026-53386HigJul 19, 2026
  affected < 7.1.4-1.1fixed 7.1.4-1.1

  In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index ads1298_pga_settings has 7 elements but ADS1298_MASK_CH_PGA can yield values 0-7. If it yields a value >= 7, this causes an out-of-bounds array acces

• CVE-2026-53385MedJul 19, 2026
  affected < 7.1.4-1.1fixed 7.1.4-1.1

  In the Linux kernel, the following vulnerability has been resolved: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write A KASAN null-ptr-deref was observed in vcs_notifier(): BUG: KASAN: null-ptr-deref in vcs_notifier+0x98/0x130 Read of size 2 at addr q

• CVE-2026-53384CriJul 19, 2026
  affected < 7.1.4-1.1fixed 7.1.4-1.1

  In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() registers the 8250 port via serial8250_register_8250_port() and then, if the device has a clock, registers a clock notifier.

• CVE-2026-53383HigJul 19, 2026
  affected < 7.1.4-1.1fixed 7.1.4-1.1

  In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2_check_user_session() takes a shortcut for any operation that is not the first in a COMPOUND request: it reuses work->sess (the session bound by th

• CVE-2026-53382MedJul 19, 2026
  affected < 7.1.4-1.1fixed 7.1.4-1.1

  In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si syzbot reported a general protection fault in vidtv_psi_ts_psi_write_into [1]. vidtv_mux_get_pid_ctx() can return NULL, but vidtv_mux_push_si() d

• CVE-2026-53381HigJul 19, 2026
  affected < 7.1.4-1.1fixed 7.1.4-1.1

  In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from fuse_release_end() can Oops if the super block has already been destroyed. Normally this is prevented by waiting for num_waiting to go down to zero befor

• CVE-2026-53366HigJul 16, 2026
  affected < 7.1.4-1.1fixed 7.1.4-1.1

  In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In __ip_append_data(), when the paged-allocation branch is taken, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen; pagedlen

• CVE-2026-53362HigKEVJul 4, 2026
  affected < 7.1.3-1.1fixed 7.1.3-1.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are computed as alloclen

• CVE-2026-53359HigJul 4, 2026
  affected < 7.1.3-1.1fixed 7.1.3-1.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GFN") fixed a shadow paging mismatch between stored and comp

• CVE-2026-53354HigJul 1, 2026
  affected < 7.1.2-1.1fixed 7.1.2-1.1

  In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Mitigate TLBI errata on various Arm CPUs A number of CPUs developed by Arm suffer from errata whereby a broadcast TLBI;DSB sequence may complete before the global observation of writes which are

• CVE-2026-53325MedJun 29, 2026
  affected < 7.1.2-1.1fixed 7.1.2-1.1

  In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agp_amd64_probe() A NULL pointer dereference was observed in the AMD64 AGP driver when running in a virtualized environment (e.g. qemu/kvm) without a physical AMD nort

• CVE-2026-52972MedJun 24, 2026
  affected < 7.1.7-1.1fixed 7.1.7-1.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data length to 0x80000000.

• CVE-2026-52946HigJun 24, 2026
  affected < 7.1.2-1.1fixed 7.1.2-1.1

  In the Linux kernel, the following vulnerability has been resolved: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling A SOFTIRQ-safe to SOFTIRQ-unsafe lock order deadlock can occur in send_sigio() and send_sigurg() when a process group receives a signal. When FASYNC

• CVE-2026-52907HigJun 9, 2026
  affected < 7.0.12-1.1fixed 7.0.12-1.1

  In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Change these comparisons from > vs >= to avoid accessing one element beyond the end of the arrays. While at it, use ARRAY_SIZE instead of the _MAX enum values. [fix

• CVE-2026-52906HigJun 9, 2026
  affected < 7.0.12-1.1fixed 7.0.12-1.1

  In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being ORed instead of replaced Since commit 1f3e4142c0eb ("9p: convert to the new mount API"), v9fs_apply_options() applies parsed mount flags with |= onto flags already set by v9fs_se

• CVE-2026-52905Jun 9, 2026
  affected < 7.0.12-1.1fixed 7.0.12-1.1

  In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow non-power of two min_region_sz on damon_start() Commit d8f867fa0825 ("mm/damon: add damon_ctx->min_sz_region") introduced a bug that allows unaligned DAMON region address ranges. Commit

• CVE-2026-52904Jun 9, 2026
  affected < 7.0.12-1.1fixed 7.0.12-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture removal failure When aperture_remove_conflicting_pci_devices() fails during probe, the error path returns directly without unwinding the nvkm_device that was just a

• CVE-2026-46332HigJun 9, 2026
  affected < 7.0.12-1.1fixed 7.0.12-1.1

  In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: bound bootloader receive buffering cc1352_bootloader_rx() appends each serdev chunk into the fixed rx_buffer before parsing bootloader packets. The helper can keep leftover bytes between

• CVE-2026-46324HigJun 9, 2026
  affected < 7.0.12-1.1fixed 7.0.12-1.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need to use list_del_rcu(), this list can be walked by concurrent dumpers. Add a ne

• CVE-2026-46323HigJun 9, 2026
  affected < 7.0.12-1.1fixed 7.0.12-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and GRO skb, without checking the zerocopy status, and in particular the SKBFL_MANAGED_FRAG_REFS flag. When SKBFL_