Threats Tagged 'cve-2026-64103'

A security update for the SUSE Linux Enterprise 15 SP7 RT kernel addresses multiple security vulnerabilities across various kernel components, including hardware monitoring, Bluetooth, SCSI, networking, tracing, and more. These fixes resolve issues such as null pointer dereferences, memory leaks, use-after-free, out-of-bounds reads/writes, race conditions, and other kernel-level bugs. The update mitigates a broad range of potential security risks by correcting these defects.

A use-after-free vulnerability in the Linux kernel's ISCI SCSI driver device removal path has been resolved. The issue involves improper handling of a completion tasklet during device teardown, which could lead to a race condition and use-after-free scenario. This vulnerability has been assigned CVE-2026-64103 and affects certain Linux kernel versions prior to 5.15.0-1112.119~20.04.1 and related builds. A patch is available and included in recent Linux kernel updates distributed by Ubuntu. The vulnerability has a CVSS score of 7.8, indicating high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time.