rpm package
opensuse/kernel-source&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
Vulnerabilities (2,129)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-46302 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/selinux/policy Currently there can only be a single open of /sys/fs/selinux/policy at any time. This allows any process to block any other process from reading the kerne | ||
| CVE-2026-46301 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue before releasing the DMA buffers on driver unbind | ||
| CVE-2026-46299 | Hig | 7.0 | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus_fill_super() calls hfs_find_init() to initialize a search structure, which acquires tree->tree_lock. If the subsequent call to hfsplus_cat_build_key( | |
| CVE-2026-46298 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix race with interrupt handler While executing ->ioctl handler or ->release handler, if an interrupt fires on the same cpu, then we can enter into a deadlock. This patch fixes both these | ||
| CVE-2026-46297 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request_irq for VF misc interrupt Currently, request_threaded_irq() is used with a primary handler but a NULL threaded handler, while also setting the IRQF_ONESHOT flag. This specific combinatio | ||
| CVE-2026-46296 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A change moving DMA channel allocation from probe() back to s3c64xx_spi_prepare_transfer() failed to remove the corresponding deallocation from remove(). Drop the | ||
| CVE-2026-46295 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty Fall back to apic_find_highest_vector() when PID.ON is set but PIR turns out to be empty, to correctly report the highest pending interrupt fr | ||
| CVE-2026-46294 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow in dm-ioctl in the function retrieve_status: 1. The code in retrieve_status checks that the output string fits | ||
| CVE-2026-46293 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix out of bounds access during output registration UBSAN reported an out of bounds access during registration of the last two outputs. This out of bounds access occurs because space i | ||
| CVE-2026-46292 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM domain through genpd_dev_pm_attach_by_id(), genpd calls pm_runtime_enable() for the corresponding virtual device | ||
| CVE-2026-46291 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash_digest_key Use print_hex_dump_devel() for dumping sensitive HMAC key bytes in hash_digest_key() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is e | ||
| CVE-2026-46290 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: x86/efi: Fix graceful fault handling after FPU softirq changes Since commit d02198550423 ("x86/fpu: Improve crypto performance by making kernel-mode FPU reliably usable in softirqs"), kernel_fpu_begin() calls f | ||
| CVE-2026-46289 | Cri | 9.8 | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract_kvec_to_sg Patch series "Fix bugs in extract_iter_to_sg()", v3. Fix bugs in the kvec and user variants of extract_iter_to_sg. This series is growing due to | |
| CVE-2026-46288 | Hig | 8.4 | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in of_unittest_changeset() The variable 'parent' is assigned the value of 'nchangeset' earlier in the function, meaning both point to the same struct device_node. The call to of | |
| CVE-2026-46287 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix RTNL assertion warning when remove module For the copper NIC with external PHY, the driver called phylink_connect_phy() during probe and phylink_disconnect_phy() during remove. It caused an RTNL | ||
| CVE-2026-46286 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: leds: qcom-lpg: Check for array overflow when selecting the high resolution When selecting the high resolution values from the array, FIELD_GET() is used to pull from a 3 bit register, yet the array being index | ||
| CVE-2026-46285 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3_release() In docg3_release(), the docg3 pointer is obtained from cascade->floors[0]->priv before the loop that calls doc_release_device() on each floor. doc_release_devic | ||
| CVE-2026-46284 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters without '=' separator If hugepages, hugepagesz, or default_hugepagesz are specified on the kernel command line without the '=' separator, early parameter parsing p | ||
| CVE-2026-46283 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() tpm_dev_release() uses plain kfree() to free chip->auth, which contains sensitive cryptographic material including HMAC session keys, nonces, | ||
| CVE-2026-46282 | — | < 7.0.12-1.1 | 7.0.12-1.1 | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer dereference on str When device_property_read_string() fails, str is left uninitialized but the code falls through to strcmp(str, ...), dereferencing a garbage pointer. |
- CVE-2026-46302Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/selinux/policy Currently there can only be a single open of /sys/fs/selinux/policy at any time. This allows any process to block any other process from reading the kerne
- CVE-2026-46301Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue before releasing the DMA buffers on driver unbind
- affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus_fill_super() calls hfs_find_init() to initialize a search structure, which acquires tree->tree_lock. If the subsequent call to hfsplus_cat_build_key(
- CVE-2026-46298Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix race with interrupt handler While executing ->ioctl handler or ->release handler, if an interrupt fires on the same cpu, then we can enter into a deadlock. This patch fixes both these
- CVE-2026-46297Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request_irq for VF misc interrupt Currently, request_threaded_irq() is used with a primary handler but a NULL threaded handler, while also setting the IRQF_ONESHOT flag. This specific combinatio
- CVE-2026-46296Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A change moving DMA channel allocation from probe() back to s3c64xx_spi_prepare_transfer() failed to remove the corresponding deallocation from remove(). Drop the
- CVE-2026-46295Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty Fall back to apic_find_highest_vector() when PID.ON is set but PIR turns out to be empty, to correctly report the highest pending interrupt fr
- CVE-2026-46294Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow in dm-ioctl in the function retrieve_status: 1. The code in retrieve_status checks that the output string fits
- CVE-2026-46293Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix out of bounds access during output registration UBSAN reported an out of bounds access during registration of the last two outputs. This out of bounds access occurs because space i
- CVE-2026-46292Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM domain through genpd_dev_pm_attach_by_id(), genpd calls pm_runtime_enable() for the corresponding virtual device
- CVE-2026-46291Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash_digest_key Use print_hex_dump_devel() for dumping sensitive HMAC key bytes in hash_digest_key() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is e
- CVE-2026-46290Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: x86/efi: Fix graceful fault handling after FPU softirq changes Since commit d02198550423 ("x86/fpu: Improve crypto performance by making kernel-mode FPU reliably usable in softirqs"), kernel_fpu_begin() calls f
- affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract_kvec_to_sg Patch series "Fix bugs in extract_iter_to_sg()", v3. Fix bugs in the kvec and user variants of extract_iter_to_sg. This series is growing due to
- affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in of_unittest_changeset() The variable 'parent' is assigned the value of 'nchangeset' earlier in the function, meaning both point to the same struct device_node. The call to of
- CVE-2026-46287Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix RTNL assertion warning when remove module For the copper NIC with external PHY, the driver called phylink_connect_phy() during probe and phylink_disconnect_phy() during remove. It caused an RTNL
- CVE-2026-46286Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: leds: qcom-lpg: Check for array overflow when selecting the high resolution When selecting the high resolution values from the array, FIELD_GET() is used to pull from a 3 bit register, yet the array being index
- CVE-2026-46285Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3_release() In docg3_release(), the docg3 pointer is obtained from cascade->floors[0]->priv before the loop that calls doc_release_device() on each floor. doc_release_devic
- CVE-2026-46284Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters without '=' separator If hugepages, hugepagesz, or default_hugepagesz are specified on the kernel command line without the '=' separator, early parameter parsing p
- CVE-2026-46283Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() tpm_dev_release() uses plain kfree() to free chip->auth, which contains sensitive cryptographic material including HMAC session keys, nonces,
- CVE-2026-46282Jun 8, 2026affected < 7.0.12-1.1fixed 7.0.12-1.1
In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer dereference on str When device_property_read_string() fails, str is left uninitialized but the code falls through to strcmp(str, ...), dereferencing a garbage pointer.
Page 37 of 107