SUSE Linux Enterprise Live Patching vulnerabilities
3 vulnerabilities
Known vulnerabilities in SUSE Linux Enterprise Live Patching, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
Act nowCVE-2026-31431Linux · Kernel +367 moreLinux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityIn the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.CVSS7.8HighKEVEPSS98.11%PrioritiseCVE-2017-18017arista · eos +46 morearista eosThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.CVSS10.0CriticalEPSS52.84%RoutineCVE-2015-8816linux · linux_kernel +15 morelinux linux_kernelThe hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.CVSS7.2HighEPSS0.55%