Threats Tagged 'cve-2026-63963'

A security update for the SUSE Linux Enterprise 15 SP7 RT kernel addresses multiple security vulnerabilities across various kernel components, including hardware monitoring, Bluetooth, SCSI, networking, tracing, and more. These fixes resolve issues such as null pointer dereferences, memory leaks, use-after-free, out-of-bounds reads/writes, race conditions, and other kernel-level bugs. The update mitigates a broad range of potential security risks by correcting these defects.

A vulnerability in the Linux kernel's USB Type-C Port Controller Manager (tcpm) was resolved by properly validating the VDO count in Discover Identity ACK handlers. The issue involved improper validation of a device-controlled count value, which could lead to indexing outside static arrays and potential data leakage. This flaw affects multiple Linux kernel versions prior to 7.0.0-28.28~24.04.1 and related builds. The vulnerability has been addressed in updated kernel packages, and users are advised to apply these updates and reboot. The fix requires recompilation of third-party kernel modules due to an ABI change.