VYPR

rpm package

suse/kernel-source-rt&distro=SUSE Real Time Module 15 SP7

pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP7

Vulnerabilities (2,100)

  • CVE-2026-23171HigFeb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update Fix a use-after-free which happens due to enslave failure after the new slave has been added to the array. Since the new slave can be use

  • CVE-2026-23169HigFeb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() syzbot and Eulgyu Kim reported crashes in mptcp_pm_nl_get_local_id() and/or mptcp_pm_nl_is_backup() Root cause is list_splice_init() in mptcp_pm_nl_flush_addrs

  • CVE-2026-23155MedFeb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Sinc commit 79a6d1bfe114 ("can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error") a failing resubmit URB will print

  • CVE-2026-23151MedFeb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix memory leak in set_ssp_complete Fix memory leak in set_ssp_complete() where mgmt_pending_cmd structures are not freed after being removed from the pending list. Commit 302a1f674c00 ("Bluet

  • CVE-2026-23139HigFeb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: update last_gc only when GC has been performed Currently last_gc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wasn't performed. Wit

  • CVE-2026-23136HigFeb 14, 2026
    affected < 6.4.0-150700.7.37.2fixed 6.4.0-150700.7.37.2

    In the Linux kernel, the following vulnerability has been resolved: libceph: reset sparse-read state in osd_fault() When a fault occurs, the connection is abandoned, reestablished, and any pending operations are retried. The OSD client tracks the progress of a sparse-read reply

  • CVE-2026-23173Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iterate only over actual devcom peers instead of assuming all possible ports exist. This avoids touching non-existent peers a

  • CVE-2026-23170Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: drm/imx/tve: fix probe device leak Make sure to drop the reference taken to the DDC device during probe on probe failure (e.g. probe deferral) and on driver unbind.

  • CVE-2026-23167Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat below [0] without a repro. It indicates that struct nci_dev.cmd_wq had been destroyed before nci_close_device() was call

  • CVE-2026-23166Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues Add NULL pointer checks in ice_vsi_set_napi_queues() to prevent crashes during resume from suspend when rings[q_idx]->q_vector is NULL. Tested adapt

  • CVE-2026-23163Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove On APUs such as Raven and Renoir (GC 9.1.0, 9.2.2, 9.3.0), the ih1 and ih2 interrupt ring buffers are not initialized. This is by desi

  • CVE-2026-23157Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages [BUG] There is an internal report that over 1000 processes are waiting at the io_schedule_timeout() of balance_dirty_pages(), caus

  • CVE-2026-23156Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_get() efivar_entry_get() always returns success even if the underlying __efivar_entry_get() fails, masking errors. This may result in uninitialized heap memory b

  • CVE-2026-23154Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO This patch enhances GSO segment handling by properly checking the SKB_GSO_DODGY flag for frag_list GSO packets, addressing low throughput issues observed when a

  • CVE-2026-23152Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: correctly decode TTLM with default link map TID-To-Link Mapping (TTLM) elements do not contain any link mapping presence indicator if a default mapping is used and parsing needs to be skipped.

  • CVE-2026-23150Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). syzbot reported various memory leaks related to NFC, struct nfc_llcp_sock, sk_buff, nfc_dev, etc. [0] The leading log hinted that nfc_llcp_send_ui_frame() fa

  • CVE-2026-23146Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling hci_uart_register_dev(), which calls proto->open() to initialize hu->priv. However, if

  • CVE-2026-23145Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branch for ext4_xattr_inode_update_ref forget to release the refcount for iloc.bh. Find this when review code.

  • CVE-2026-23141Feb 14, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in range_is_hole_in_parent() Before accessing the disk_bytenr field of a file extent item we need to check if we are dealing with an inline extent. This is because for inli

  • CVE-2026-23140Feb 14, 2026
    affected < 6.4.0-150700.7.37.2fixed 6.4.0-150700.7.37.2

    In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Subtract size of xdp_frame from allowed metadata size The xdp_frame structure takes up part of the XDP frame headroom, limiting the size of the metadata. However, in bpf_test_run, we don't take t

Page 4 of 105