SUSE-SU-2026:0148-1
SUSE-SU-2026:0148-1 · Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.5 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203). - CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400). - CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241). - CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670). - CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1250192). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-livepatch-sle15-sp7-rt_update_0 SUSE:Linux Enterprise Live Patching 15 SP7
- Intervalos de versiones afectados
- ECOSYSTEM: < 9-150700.3.1
Actualiza a 9-150700.3.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20260148-1/
- https://bugzilla.suse.com/1248400
- https://bugzilla.suse.com/1248670
- https://bugzilla.suse.com/1249241
- https://bugzilla.suse.com/1250192
- https://bugzilla.suse.com/1251203
- https://bugzilla.suse.com/1251787
- https://bugzilla.suse.com/1253437
- https://www.suse.com/security/cve/CVE-2023-53676
- https://www.suse.com/security/cve/CVE-2025-38476
- https://www.suse.com/security/cve/CVE-2025-38572
- https://www.suse.com/security/cve/CVE-2025-38588
- https://www.suse.com/security/cve/CVE-2025-38608
- https://www.suse.com/security/cve/CVE-2025-39682
- https://www.suse.com/security/cve/CVE-2025-40204
- https://osv.dev/vulnerability/SUSE-SU-2026:0148-1