Skip to main content
CVE-2025-38237VulnerabilityPublished Updated

SUSE · Security update for the Linux Kernel

Affects SUSESource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 11 Nov 2026, 23:24 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 9 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 11 Nov 2026.

Description

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (bsc#1269813). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-68140: net/iucv: fix use-after-free of a severed iucv_path (bsc#1275581). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68337: bpf: Reject redirect helpers without a bpf_net_context (bsc#1274635). - CVE-2026-68383: drm/xe/guc: Keep scheduler timeline name alive (bsc#1274816). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-68449: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning (bsc#1274839). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74466: s390/ap/zcrypt: Rework AP message buffer allocation (bsc#1277810). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74690: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() (bsc#1276929). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80584: s390/qeth: validate user buffer length in SNMP and ARP query (bsc#1277341). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80710: s390/dasd: Fix undersized format-check buffer (bsc#1278167). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-89456: s390/dasd: Propagate partial completion length across ERP (bsc#1280326). - CVE-2026-89487: openvswitch: only skb_tx_error() a packet we are about to drop (bsc#1280510). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (

References

Community reviews

Loading reviews…