suse/kernel-source-rt&distro=SUSE Real Time Module 15 SP7

Vulnerabilities (2,202)

• CVE-2026-23071MedFeb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: regmap: Fix race condition in hwspinlock irqsave routine Previously, the address of the shared member '&map->spinlock_flags' was passed directly to 'hwspin_lock_timeout_irqsave'. This creates a race condition w

• CVE-2026-23070MedFeb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: Octeontx2-af: Add proper checks for fwdata firmware populates MAC address, link modes (supported, advertised) and EEPROM data in shared firmware structure which kernel access via MAC block(CGX/RPM). Accessing

• CVE-2026-23069MedFeb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential underflow in virtio_transport_get_credit() The credit calculation in virtio_transport_get_credit() uses unsigned arithmetic: ret = vvs->peer_buf_alloc - (vvs->tx_cnt - vvs->peer_f

• CVE-2026-23068HigFeb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: spi: spi-sprd-adi: Fix double free in probe error path The driver currently uses spi_alloc_host() to allocate the controller but registers it using devm_spi_register_controller(). If devm_register_restart_hand

• CVE-2026-23065MedFeb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix memory leak in wbrf_record() The tmp buffer is allocated using kcalloc() but is not freed if acpi_evaluate_dsm() fails. This causes a memory leak in the error path. Fix this by explicitly

• CVE-2026-23064MedFeb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: avoid possible NULL deref tcf_ife_encode() must make sure ife_encode() does not return NULL. syzbot reported: Oops: general protection fault, probably for non-canonical address 0xdffffc000

• CVE-2026-23063MedFeb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: uacce: ensure safe queue release with state management Directly calling `put_queue` carries risks since it cannot guarantee that resources of `uacce_queue` have been fully released beforehand. So adding a `stop

• CVE-2026-23062MedFeb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro The GET_INSTANCE_ID macro that caused a kernel panic when accessing sysfs attributes: 1. Off-by-one error: The loop condition used '<=' inste

• CVE-2026-23061MedFeb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"). In kvaser_usb_set_{

• CVE-2026-23060MedFeb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec authencesn assumes an ESP/ESN-formatted AAD. When assoclen is shorter than the minimum expected length, crypto_authenc_esn_decrypt()

• CVE-2026-23058Feb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"). In ems_usb_open(), the UR

• CVE-2026-23057Feb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Coalesce only linear skb vsock/virtio common tries to coalesce buffers in rx queue: if a linear skb (with a spare tail room) is followed by a small skb (length limited by GOOD_COPY_LEN = 128), an

• CVE-2026-23056Feb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: uacce: implement mremap in uacce_vm_ops to return -EPERM The current uacce_vm_ops does not support the mremap operation of vm_operations_struct. Implement .mremap to return -EPERM to remind users. The reason w

• CVE-2026-23054Feb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: net: hv_netvsc: reject RSS hash key programming without RX indirection table RSS configuration requires a valid RX indirection table. When the device reports a single receive queue, rndis_filter_device_add() do

• CVE-2026-23053Feb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a deadlock involving nfs_release_folio() Wang Zhaolong reports a deadlock involving NFSv4.1 state recovery waiting on kthreadd, which is attempting to reclaim memory by calling nfs_release_folio(). The

• CVE-2026-23049Feb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel The connector type for the DataImage SCF0700C48GGU18 panel is missing and devm_drm_panel_bridge_add() requires connector type to be set.

• CVE-2025-71199Feb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver at91_adc_interrupt can call at91_adc_touch_data_handler function to start the work by schedule_work(&st->touch_st.workq). If we re

• CVE-2025-71198Feb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection The st_lsm6dsx_acc_channels array of struct iio_chan_spec has a non-NULL event_spec field, indicating support for IIO events. However,

• CVE-2025-71197Feb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarms_store The sysfs buffer passed to alarms_store() is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not acc

• CVE-2025-71196Feb 4, 2026
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: phy: stm32-usphyc: Fix off by one in probe() The "index" variable is used as an index into the usbphyc->phys[] array which has usbphyc->nphys elements. So if it is equal to usbphyc->nphys then it is one elemen