SUSE caas platform vulnerabilities

Latest SUSE caas platform CVEs

Newest publication first

1. CVE-2026-31431 crypto: algif_aead - Revert to operating out-of-place

   Published 2026-04-22

   High·CVSS 7.8 EPSS 98.1% CISA KEV added 2026-05-01 Exploited in the wild Framework module

   In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the sourc...

2. CVE-2022-27239 In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

   Published 2022-04-27

   High·CVSS 7.8 EPSS 0.58%

   In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

3. CVE-2020-8030 skuba: Insecure /tmp usage when joining node to cluster

   Published 2021-02-11

   Medium·CVSS 4.4 EPSS 0.25%

   A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster.

4. CVE-2020-8029 skuba: Insecure handling of private key

   Published 2021-02-11

   Medium·CVSS 4.0 EPSS 0.29%

   A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS Platform 4.5 skuba versions prior to https://github.com/SUSE/skuba/pull/1416.

5. CVE-2019-3682 Insecure API port exposed to all Master Node guest containers

   Published 2020-01-17

   High·CVSS 7.8 EPSS 0.31%

   The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.

6. CVE-2018-6556 The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files

   Published 2018-08-10

   Low·CVSS 3.3 EPSS 0.35%

   lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effect...

7. CVE-2017-18017 The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory...

   Published 2018-01-03

   Critical·CVSS 9.8 EPSS 52.8%

   The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presenc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.