{"kind": "product", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "name": "kernel-default", "product": "kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS", "items": [{"id": "SUSE-SU-2026:4892-1", "noindex": false, "published": "2026-10-23T10:48:07Z", "modified": "2026-10-24T17:23:10.297365390Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2026:4892-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076).\n- CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995).\n- CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).\n- CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).\n- CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670).\n- CVE-2026-63983: net: Introduce skb tc de", "references": ["https://www.suse.com/support/update/announcement/2026/suse-su-20264892-1/", "https://bugzilla.suse.com/1252519", "https://bugzilla.suse.com/1255531"], "fixes": ["4.12.14-122.336.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2026:4687-1", "noindex": false, "published": "2026-10-15T12:38:33Z", "modified": "2026-10-16T10:30:20.089916452Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2026:4687-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43428: USB: core: Limit the length of unkillable synchronous timeouts (bsc#1265138).\n- CVE-2026-45834: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (bsc#1266412).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread", "references": ["https://www.suse.com/support/update/announcement/2026/suse-su-20264687-1/", "https://bugzilla.suse.com/1031492", "https://bugzilla.suse.com/1045298"], "fixes": ["4.12.14-122.333.2"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2026:4282-1", "noindex": false, "published": "2026-09-22T08:34:06Z", "modified": "2026-09-23T09:15:05.361999881Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2026:4282-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43134: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (bsc#1264308).\n- CVE-2026-43257: media: cx88: Add missing unmap in snd_cx88_hw_params(", "references": ["https://www.suse.com/support/update/announcement/2026/suse-su-20264282-1/", "https://bugzilla.suse.com/1224586", "https://bugzilla.suse.com/1251966"], "fixes": ["4.12.14-122.328.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2026:3594-1", "noindex": false, "published": "2026-08-12T11:31:24Z", "modified": "2026-08-13T09:30:08.213513999Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2026:3594-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).\n- CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (bsc#1262603).\n- CVE-2026-31624: HID: core: clamp report_size in s32ton() to avoid undefined shift (bsc#1263657).\n- CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).\n- CVE-2026-43069: Bluetooth: hci_ll: Fix firmware leak on error path (bsc#1264190).\n- CVE-2026-43123: fbcon: check return value of con2fb_acquire_ne", "references": ["https://www.suse.com/support/update/announcement/2026/suse-su-20263594-1/", "https://bugzilla.suse.com/1185845", "https://bugzilla.suse.com/1240183"], "fixes": ["4.12.14-122.323.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2026:2914-1", "noindex": false, "published": "2026-07-13T14:56:37Z", "modified": "2026-07-14T09:15:06.867396001Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2026:2914-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues\n\nThe following security issues were fixed:\n\n- CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).\n- CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).\n- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).\n- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).\n- CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).\n- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).\n- CVE-", "references": ["https://www.suse.com/support/update/announcement/2026/suse-su-20262914-1/", "https://bugzilla.suse.com/1255616", "https://bugzilla.suse.com/1259891"], "fixes": ["4.12.14-122.320.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2026:2450-1", "noindex": false, "published": "2026-06-18T13:36:00Z", "modified": "2026-06-19T08:15:05.662454930Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2026:2450-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues\n\nThe following security issues were fixed:\n\n- CVE-2025-10263: arm64: Add workaround for Cortex-A76 erratum 1286807 (bsc#1266290).\n- CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).\n- CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).\n- CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).\n- CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).\n- CVE-2026-23279: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() ", "references": ["https://www.suse.com/support/update/announcement/2026/suse-su-20262450-1/", "https://bugzilla.suse.com/1255084", "https://bugzilla.suse.com/1255416"], "fixes": ["4.12.14-122.317.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2026:1078-1", "noindex": false, "published": "2026-03-26T12:43:07Z", "modified": "2026-03-27T08:48:31.810843Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2026:1078-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-50453: gpiolib: cdev: fix NULL-pointer dereferences (bsc#1250887).\n- CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255163).\n- CVE-2023-53802: wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (bsc#1254725).\n- CVE-2023-53808: wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (bsc#1254723).\n- CVE-2023-53816: drm/amdkfd: fix potential kgd_mem UAFs (bsc#1254958).\n- CVE-2023-53817: crypto: lib/mpi - avoid null po", "references": ["https://www.suse.com/support/update/announcement/2026/suse-su-20261078-1/", "https://bugzilla.suse.com/1215420", "https://bugzilla.suse.com/1218752"], "fixes": ["4.12.14-122.296.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2026:0473-1", "noindex": false, "published": "2026-02-12T11:26:33Z", "modified": "2026-03-23T04:50:25.397341Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2026:0473-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues\n\nThe following security issues were fixed:\n\n- CVE-2022-50347: mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (bsc#1249928).\n- CVE-2022-50580: blk-throttle: prevent overflow while calculating wait time (bsc#1252542).\n- CVE-2022-50676: net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() (bsc#1254689).\n- CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).\n- CVE-2022-50709: wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (bsc#1255565).\n- CVE-2022-50716: wifi: ar55", "references": ["https://www.suse.com/support/update/announcement/2026/suse-su-20260473-1/", "https://bugzilla.suse.com/1205462", "https://bugzilla.suse.com/1214285"], "fixes": ["4.12.14-122.293.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2026:0316-1", "noindex": false, "published": "2026-01-28T14:35:14Z", "modified": "2026-03-23T04:52:07.653674Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2026:0316-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues\n\nThe following security issues were fixed:\n\n- CVE-2022-49604,CVE-2025-40074: ip: Fix data-races around sysctl_ip_fwd_use_pmtu (bsc#1238414 bsc#1252794).\n- CVE-2022-50527: drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1251738).\n- CVE-2022-50625: serial: amba-pl011: avoid SBSA UART accessing DMACR register (bsc#1254559).\n- CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).\n- CVE-2022-50656: nfc: pn533: Clear nfc_target before being used (bsc#1254745).\n- CVE-2022-50678: wifi: brcmfmac: fix invalid address access ", "references": ["https://www.suse.com/support/update/announcement/2026/suse-su-20260316-1/", "https://bugzilla.suse.com/1065729", "https://bugzilla.suse.com/1082555"], "fixes": ["4.12.14-122.290.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:4515-1", "noindex": false, "published": "2025-12-23T16:19:45Z", "modified": "2026-03-23T04:51:35.969388Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:4515-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-50364: i2c: mux: reg: check return value after calling platform_get_resource() (bsc#1250083).\n- CVE-2022-50368: drm/msm/dsi: fix memory corruption with too many bridges (bsc#1250009).\n- CVE-2022-50494: thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (bsc#1251173).\n- CVE-2022-50545: r6040: Fix kmemleak in probe and remove (bsc#1251285).\n- CVE-2022-50551: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (bsc#1251322).\n- CVE-2022-50569: x", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/", "https://bugzilla.suse.com/1070872", "https://bugzilla.suse.com/1220419"], "fixes": ["4.12.14-122.283.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:4189-1", "noindex": false, "published": "2025-11-24T09:18:05Z", "modified": "2026-03-23T04:51:28.093314Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:4189-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues\n\nThe following security issues were fixed:\n\n- CVE-2021-4460: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning (bsc#1250764).\n- CVE-2022-48631: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1223475).\n- CVE-2022-50236: iommu/mediatek: Fix crash on isr after kexec() (bsc#1249702).\n- CVE-2022-50249: memory: of: Fix refcount leak bug in of_get_ddr_timings() (bsc#1249747).\n- CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806).\n- CVE-2022-50293: btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (bsc#1", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-20254189-1/", "https://bugzilla.suse.com/1065729", "https://bugzilla.suse.com/1154048"], "fixes": ["4.12.14-122.280.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:03614-1", "noindex": false, "published": "2025-10-16T05:48:12Z", "modified": "2026-02-04T03:03:12.918222Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:03614-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).\n- CVE-2022-50242: drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (bsc#1249696).\n- CVE-2022-50244: cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (bsc#1249647).\n- CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).\n- CVE-2022-50258: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (bsc#1249947).\n- CVE-2022-50265: k", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-202503614-1/", "https://bugzilla.suse.com/1065729", "https://bugzilla.suse.com/1082555"], "fixes": ["4.12.14-122.275.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:03204-1", "noindex": false, "published": "2025-09-12T13:40:30Z", "modified": "2026-03-23T04:50:28.847413Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:03204-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-49967: bpf: Fix a data-race around bpf_jit_limit (bsc#1244964).\n- CVE-2022-49975: bpf: Don't redirect packets with invalid pkt_len (bsc#1245196).\n- CVE-2022-49980: usb: gadget: Fix use-after-free bug by not setting udc->dev.driver (bsc#1245110).\n- CVE-2022-49981: HID: hidraw: fix memory leak in hidraw_release() (bsc#1245072).\n- CVE-2022-50007: xfrm: fix refcount leak in __xfrm_policy_check() (bsc#1245016).\n- CVE-2022-50066: net: atlantic: fix aq_vec index out of range error (bsc#1244985).\n- CVE-2022-5", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-202503204-1/", "https://bugzilla.suse.com/1225527", "https://bugzilla.suse.com/1240224"], "fixes": ["4.12.14-122.272.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:02846-1", "noindex": false, "published": "2025-08-18T15:47:45Z", "modified": "2026-02-04T03:59:07.214191Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:02846-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).\n- CVE-2021-46987: btrfs: fix deadlock when cloning inline extents and using qgroups (bsc#1220704).\n- CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference (bsc#1205711).\n- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).\n- CVE-2022-49319: iommu/", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-202502846-1/", "https://bugzilla.suse.com/1171844", "https://bugzilla.suse.com/1205711"], "fixes": ["4.12.14-122.269.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:02334-1", "noindex": false, "published": "2025-07-16T13:46:06Z", "modified": "2026-03-23T04:46:32.295136Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:02334-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2021-47212: net/mlx5: Update error handler for UCTX and UMEM (bsc#1222709).\n- CVE-2021-47455: ptp: Fix possible memory leak in ptp_clock_register() (bsc#1225254).\n- CVE-2021-47527: serial: core: fix transmit-buffer reset and memleak (bsc#1227768).\n- CVE-2022-21546: scsi: target: Fix WRITE_SAME No Data Buffer crash (bsc#1242243).\n- CVE-2022-49154: KVM: SVM: fix panic on out-of-bounds guest IRQ (bsc#1238167).\n- CVE-2022-49622: netfilter: nf_tables: fix crash when nf_trace is enabled (bsc#1239042).\n- CVE-2022", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-202502334-1/", "https://bugzilla.suse.com/1154048", "https://bugzilla.suse.com/1190317"], "fixes": ["4.12.14-122.266.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:01983-1", "noindex": false, "published": "2025-06-17T15:32:57Z", "modified": "2026-02-04T02:45:15.700931Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:01983-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-47670: can: peak_usb: fix use after free bugs (bsc#1241407).\n- CVE-2022-49139: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (bsc#1238032).\n- CVE-2022-49145: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (bsc#1238162).\n- CVE-2022-49168: btrfs: do not clean up repair bio if submit fails (bsc#1238109).\n- CVE-2022-49190: kernel/resource: fix kfree() of bootmem memory again (bsc#1238130).\n- CVE-2022-49212: mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-202501983-1/", "https://bugzilla.suse.com/1184350", "https://bugzilla.suse.com/1190317"], "fixes": ["4.12.14-122.261.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:01600-1", "noindex": false, "published": "2025-05-20T11:49:32Z", "modified": "2026-02-04T02:14:27.609674Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:01600-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-47659: drm/plane: Move range check for format_count earlier (bsc#1237839).\n- CVE-2022-49044: dm integrity: fix memory corruption when tag_size is less than digest size (bsc#1237840).\n- CVE-2022-49055: drm/amdkfd: Check for potential null return of kmalloc_array() (bsc#1237868).\n- CVE-2022-49060: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (bsc#1237845).\n- CVE-2022-49086: net: openvswitch: fix leak of nested actions (bsc#1238037).\n- CVE-2022-49111: Bluetooth: Fix use after free in hci_", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-202501600-1/", "https://bugzilla.suse.com/1205495", "https://bugzilla.suse.com/1230764"], "fixes": ["4.12.14-122.258.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:1293-1", "noindex": false, "published": "2025-04-16T07:51:20Z", "modified": "2026-02-04T02:33:53.838541Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:1293-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).\n- CVE-2021-47645: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com (bsc#1237767).\n- CVE-2021-47648: gpu: host1x: Fix a memory leak in 'host1x_remove()' (bsc#1237725).\n- CVE-2022-49046: i2c: dev: check return value when calling dev_set_name() (bsc#1237842).\n- CVE-2022-49051: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (bsc#1237903).\n- CVE-2022-49053: scsi: target: tcmu: Fix possible p", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-20251293-1/", "https://bugzilla.suse.com/1051510", "https://bugzilla.suse.com/1054914"], "fixes": ["4.12.14-122.255.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:0834-1", "noindex": false, "published": "2025-03-11T10:55:11Z", "modified": "2026-02-04T03:04:36.757305Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:0834-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2021-22543: Fixed improper handling of VM_IO|VM_PFNMAP vmas in KVM (bsc#1186482).\n- CVE-2021-47634: ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (bsc#1237758).\n- CVE-2021-47644: media: staging: media: zoran: move videodev alloc (bsc#1237766).\n- CVE-2022-48953: rtc: cmos: fix build on non-ACPI platforms (bsc#1231941).\n- CVE-2022-48975: gpiolib: fix memory leak in gpiochip_setup_dev() (bsc#1231885).\n- CVE-2022-49006: tracing: Free buffers when a used dynamic event is removed (bsc#123216", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-20250834-1/", "https://bugzilla.suse.com/1050081", "https://bugzilla.suse.com/1051510"], "fixes": ["4.12.14-122.250.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}, {"id": "SUSE-SU-2025:0565-1", "noindex": false, "published": "2025-02-17T13:28:23Z", "modified": "2026-02-04T02:39:16.180329Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2025:0565-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-47222: net: bridge: fix vlan tunnel dst refcnt when egressing (bsc#1224857).\n- CVE-2021-47223: net: bridge: fix vlan tunnel dst null pointer dereference (bsc#1224856).\n- CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1222072).\n- CVE-2024-47809: dlm: fix possible lkb_resource null dereference (bsc#1235714).\n- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).\n- CVE-2024-49948: net: add more sanity checks to qdisc_", "references": ["https://www.suse.com/support/update/announcement/2025/suse-su-20250565-1/", "https://bugzilla.suse.com/1221282", "https://bugzilla.suse.com/1222072"], "fixes": ["4.12.14-122.247.1"], "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}]}], "total": 23, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "kernel-default", "path": "vulns/suse-linux-enterprise-server-12-sp5-ltss/kernel-default", "ecosystem": "SUSE:Linux Enterprise Server 12 SP5-LTSS"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 2, "kev": 0}, "lastmod": "2026-10-24T17:23:10.297365390Z", "early_advisories": [], "license": "Puedes utilizar libremente la selección de PatchFirst y nuestras aportaciones (prioridades, alertas tempranas, textos, resúmenes y agregados) para tus propios fines, incluido el uso interno de tu empresa. La reventa, la distribución comercial y la creación masiva de réplicas de esta selección o de estas aportaciones requieren un acuerdo escrito con el operador. Siempre que uses o publiques la selección o nuestras aportaciones, cita a PatchFirst (https://patchfirst.dev/vulns/) con este enlace a la página del flujo de tu región. Los registros originales de fuentes abiertas siguen sujetos a sus respectivas licencias y condiciones. Estas condiciones no limitan tus derechos sobre los datos originales, que puedes obtener directamente de esas fuentes.", "terms_url": "https://patchfirst.dev/es/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst selecciona, normaliza y combina los registros; se pueden añadir resúmenes y traducciones. Las noticias incluyen un enlace a la fuente original en cada entrada.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Las licencias de las bases originales varían; consulta el catálogo de fuentes."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Puntuaciones públicas gratuitas; se solicita atribución (FIRST EPSS, puntuaciones generadas por Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}