Suse Caas Platform vulnerabilities

7 CVEs affecting Suse Caas Platform, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-31431, published 2026-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability, published 2026-04-22. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-05-01. EPSS: 3.4% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the…
CVE-2017-18017, published 2018-01-03. Critical severity, CVSS 9.8. EPSS: 52.8% chance of exploitation in the next 30 days. The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and…
CVE-2022-27239, published 2022-04-27. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
CVE-2018-6556, published 2018-08-10. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which…
CVE-2019-3682, published 2020-01-17. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.
CVE-2020-8029, published 2021-02-11. Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days. A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS…
CVE-2020-8030, published 2021-02-11. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to…