SUSE-SU-2026:2335-1: libyang&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:2335-1 is a vulnerability in libyang&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 10-06-2026PublishedVulnerability first disclosed.
- 11-06-2026Last modifiedVulnerability information updated.
Description
Security update for libyang This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob (bsc#1265330).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse6 products
- libyang&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 2.1.55-150500.3.5.1
- libyang&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 2.1.55-150500.3.5.1
- libyang&distro=SUSE Linux Enterprise Server 15 SP5-LTSS< 2.1.55-150500.3.5.1
- libyang&distro=SUSE Linux Enterprise Server 15 SP6-LTSS< 2.1.55-150500.3.5.1
- libyang&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5< 2.1.55-150500.3.5.1
1 vendor · 6 products