SUSE-SU-2026:1077-1
SUSE-SU-2026:1077-1 · Security update for the Linux Kernel
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917). - CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075). - CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645). - CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231). - CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735). - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749). - CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790). - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395). - CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340). - CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518). - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850). - CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857). The following non security issues were fixed: - apparmor: fix differential encoding verification (bsc#1258849). - apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849). - apparmor: fix memory leak in verify_header (bsc#1258849). - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849). - apparmor: fix race between freeing data and fs accessing it (bsc#1258849). - apparmor: fix race on rawdata dereference (bsc#1258849). - apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849). - apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849). - apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849). - apparmor: replace recursive profile removal with iterative approach (bsc#1258849). - apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).
Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
kernel-rt SUSE:Linux Enterprise Micro 5.5
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150500.13.124.1
Auf 5.14.21-150500.13.124.1 aktualisieren
kernel-source-rt SUSE:Linux Enterprise Micro 5.5
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150500.13.124.1
Auf 5.14.21-150500.13.124.1 aktualisieren
Originalquellen
- https://www.suse.com/support/update/announcement/2026/suse-su-20261077-1/
- https://bugzilla.suse.com/1238917
- https://bugzilla.suse.com/1255075
- https://bugzilla.suse.com/1256645
- https://bugzilla.suse.com/1257231
- https://bugzilla.suse.com/1257473
- https://bugzilla.suse.com/1257732
- https://bugzilla.suse.com/1257735
- https://bugzilla.suse.com/1257749
- https://bugzilla.suse.com/1257790
- https://bugzilla.suse.com/1258340
- https://bugzilla.suse.com/1258395
- https://bugzilla.suse.com/1258518
- https://bugzilla.suse.com/1258849
- https://bugzilla.suse.com/1258850
- https://bugzilla.suse.com/1259857
- https://www.suse.com/security/cve/CVE-2025-21738
- https://www.suse.com/security/cve/CVE-2025-40242
- https://www.suse.com/security/cve/CVE-2025-71066
- https://www.suse.com/security/cve/CVE-2026-23004
- https://www.suse.com/security/cve/CVE-2026-23054
- https://www.suse.com/security/cve/CVE-2026-23060
- https://www.suse.com/security/cve/CVE-2026-23074
- https://osv.dev/vulnerability/SUSE-SU-2026:1077-1