SUSE-SU-2026:20864-1
SUSE-SU-2026:20864-1 · Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel mesh send timer when hdev removed (bsc#1257669). - CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255895). - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255378). - CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255402). - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256624).
Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
kernel-livepatch-micro-6-0_update_12 SUSE:Linux Micro 6.0
- Betroffene Versionsbereiche
- ECOSYSTEM: < 6-1.1
Auf 6-1.1 aktualisieren
Originalquellen
- https://www.suse.com/support/update/announcement/2026/suse-su-202620864-1/
- https://bugzilla.suse.com/1255053
- https://bugzilla.suse.com/1255378
- https://bugzilla.suse.com/1255402
- https://bugzilla.suse.com/1255895
- https://bugzilla.suse.com/1256624
- https://bugzilla.suse.com/1256644
- https://bugzilla.suse.com/1257669
- https://www.suse.com/security/cve/CVE-2025-40258
- https://www.suse.com/security/cve/CVE-2025-40284
- https://www.suse.com/security/cve/CVE-2025-40297
- https://www.suse.com/security/cve/CVE-2025-68284
- https://www.suse.com/security/cve/CVE-2025-68285
- https://www.suse.com/security/cve/CVE-2025-68813
- https://www.suse.com/security/cve/CVE-2025-71085
- https://osv.dev/vulnerability/SUSE-SU-2026:20864-1