SUSE-SU-2026:4936-1

SUSE-SU-2026:4936-1 · Security update for the Linux Kernel

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). - CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599). - CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). - CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). - CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). - CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). - CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). - CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). - CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). - CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). - CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). - CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). - CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). - CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518). - CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). - CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). - CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). - CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). - CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). - CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: - kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. - netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

Korrektur verfügbar

Veröffentlicht

2026-10-29T11:33:21Z

Aktualisiert

2026-10-31T18:00:04.938998310Z

Technologie-Stack: system

Prüfen Sie Ihren Server →