Read the docs
TI-2026-29693 Aliases CVE-2026-41054GHSA-c5g3-m8p9-m3gh

Missing exit out of permission check in haveged could lead to root exploit

Priority LOW 35CWE-305Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00185 8th percentileScored 2026-11-07
Fix Fixed Container suse/sle-micro-rancher/5.3:latest (SUSE): 1.9.14-150400.3.11.1Container suse/sle-micro-rancher/5.4:latest (SUSE): 1.9.14-150400.3.11.1+32 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSEContainer suse/sle-micro-rancher/5.3:latest? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEContainer suse/sle-micro-rancher/5.3:latest? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEContainer suse/sle-micro-rancher/5.4:latest? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEContainer suse/sle-micro-rancher/5.4:latest? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEContainer suse/sle-micro/5.5:latest? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEContainer suse/sle-micro/5.5:latest? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-BYOS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-BYOS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-BYOS-Azure? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-BYOS-Azure? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-BYOS-EC2? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-BYOS-EC2? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-BYOS-GCE? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-BYOS-GCE? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened-BYOS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened-BYOS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened-BYOS-Azure? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened-BYOS-Azure? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened-BYOS-EC2? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened-BYOS-EC2? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened-BYOS-GCE? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened-BYOS-GCE? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened-GCE? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSEImage SLES15-SP4-SAP-Hardened-GCE? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Desktop 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Desktop 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Desktop 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Basesystem 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Basesystem 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Basesystem 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP7? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Micro 5.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Micro 5.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Micro 5.4? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Micro 5.4? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Micro 5.5? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Micro 5.5? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP4-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP4-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP4-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP5-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP5-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP5-LTSS? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP6-LTSS? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP6-LTSS? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP6-LTSS? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP4? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP4? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP4? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP5? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP5? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP5? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP6? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP6? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP6? to before 1.9.14-150600.11.6.11.9.14-150600.11.6.1Patch availableCNA
SUSESUSE Manager Proxy LTS 4.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Manager Proxy LTS 4.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Manager Proxy LTS 4.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Manager Retail Branch Server LTS 4.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Manager Retail Branch Server LTS 4.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Manager Retail Branch Server LTS 4.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Manager Server LTS 4.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Manager Server LTS 4.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
SUSESUSE Manager Server LTS 4.3? to before 1.9.14-150400.3.11.11.9.14-150400.3.11.1Patch availableCNA
  • Container suse/sle-micro-rancher/5.3:latest VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Container suse/sle-micro-rancher/5.3:latest VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Container suse/sle-micro-rancher/5.4:latest VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Container suse/sle-micro-rancher/5.4:latest VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Container suse/sle-micro/5.5:latest VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Container suse/sle-micro/5.5:latest VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-BYOS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-BYOS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-BYOS-Azure VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-BYOS-Azure VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-BYOS-EC2 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-BYOS-EC2 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-BYOS-GCE VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-BYOS-GCE VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened-BYOS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened-BYOS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened-BYOS-Azure VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened-BYOS-Azure VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened-BYOS-EC2 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened-BYOS-EC2 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened-BYOS-GCE VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened-BYOS-GCE VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened-GCE VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • Image SLES15-SP4-SAP-Hardened-GCE VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Desktop 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Desktop 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Desktop 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Module for Basesystem 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Module for Basesystem 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Module for Basesystem 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP7 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Micro 5.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Micro 5.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Micro 5.4 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Micro 5.4 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Micro 5.5 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Micro 5.5 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP4-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP4-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP4-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP5-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP5-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP5-LTSS VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP6-LTSS VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP6-LTSS VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP6-LTSS VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP6 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP6 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP6 VendorSUSE Affected ? to before 1.9.14-150600.11.6.1 Fixed in 1.9.14-150600.11.6.1 Patch available CNA
  • SUSE Manager Proxy LTS 4.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Manager Proxy LTS 4.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Manager Proxy LTS 4.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Manager Retail Branch Server LTS 4.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Manager Retail Branch Server LTS 4.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Manager Retail Branch Server LTS 4.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Manager Server LTS 4.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Manager Server LTS 4.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA
  • SUSE Manager Server LTS 4.3 VendorSUSE Affected ? to before 1.9.14-150400.3.11.1 Fixed in 1.9.14-150400.3.11.1 Patch available CNA

Remediation

  • Fix · CNA Container suse/sle-micro-rancher/5.3:latest (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Container suse/sle-micro-rancher/5.3:latest (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Container suse/sle-micro-rancher/5.4:latest (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Container suse/sle-micro-rancher/5.4:latest (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Container suse/sle-micro/5.5:latest (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Container suse/sle-micro/5.5:latest (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-BYOS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-BYOS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-BYOS-Azure (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-BYOS-Azure (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-BYOS-EC2 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-BYOS-EC2 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-BYOS-GCE (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-BYOS-GCE (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened-BYOS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened-BYOS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened-BYOS-Azure (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened-BYOS-Azure (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened-BYOS-EC2 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened-BYOS-EC2 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened-BYOS-GCE (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened-BYOS-GCE (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened-GCE (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA Image SLES15-SP4-SAP-Hardened-GCE (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Desktop 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Desktop 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Desktop 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Module for Basesystem 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Module for Basesystem 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Module for Basesystem 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP7 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Micro 5.3 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Micro 5.3 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Micro 5.4 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Micro 5.4 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Micro 5.5 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Micro 5.5 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP4-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP4-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP4-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP5-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP5-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP5-LTSS (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP6-LTSS (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP6-LTSS (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP6-LTSS (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP4 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP4 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP4 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP5 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP5 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP5 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP6 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP6 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP6 (SUSE) Fixed in 1.9.14-150600.11.6.1
  • Fix · CNA SUSE Manager Proxy LTS 4.3 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Manager Proxy LTS 4.3 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Manager Proxy LTS 4.3 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Manager Retail Branch Server LTS 4.3 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Manager Retail Branch Server LTS 4.3 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Manager Retail Branch Server LTS 4.3 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Manager Server LTS 4.3 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Manager Server LTS 4.3 (SUSE) Fixed in 1.9.14-150400.3.11.1
  • Fix · CNA SUSE Manager Server LTS 4.3 (SUSE) Fixed in 1.9.14-150400.3.11.1

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-41054
  2. 2026-10-03 Alias added: GHSA-c5g3-m8p9-m3gh

References

Other 1

  • TI-2016-03560 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-03506 Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04302 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04301 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04298 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
See all 1331 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences