SUSE-SU-2026:0411-1
SUSE-SU-2026:0411-1 · Security update for the Linux Kernel
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785). - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576). - CVE-2023-53215: sched/fair: Don't balance task to its current running CPU (bsc#1250397). - CVE-2023-53254: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (bsc#1249871). - CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751). - CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095). - CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908). - CVE-2024-28956: x86/its: Enumerate Indirect Target Selection (ITS) bug (bsc#1242006). - CVE-2024-36348: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896). - CVE-2024-36349: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896). - CVE-2024-36350: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896). - CVE-2024-36357: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896). - CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185). - CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210). - CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723). - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751). - CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177). - CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046). - CVE-2025-40019: crypto: essiv - Check ssize for decryption and in-place encryption (bsc#1252678). - CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409). - CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959). - CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520). - CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813). - CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842). - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843). - CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894). - CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847). - CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483). - CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615). - CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251). - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377). - CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401). - CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free (bsc#1255688). - CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582). - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641). - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612). - CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744). - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779). The following non security issues were fixed: - x86/CPU/AMD: Add ZenX generations flags (bsc#1238896). - x86: make page fault handling disable interrupts properly (git-fixes).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-rt SUSE:Linux Enterprise Micro 5.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.14.21-150400.15.142.1
Actualiza a 5.14.21-150400.15.142.1
kernel-source-rt SUSE:Linux Enterprise Micro 5.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.14.21-150400.15.142.1
Actualiza a 5.14.21-150400.15.142.1
kernel-rt SUSE:Linux Enterprise Micro 5.4
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.14.21-150400.15.142.1
Actualiza a 5.14.21-150400.15.142.1
kernel-source-rt SUSE:Linux Enterprise Micro 5.4
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.14.21-150400.15.142.1
Actualiza a 5.14.21-150400.15.142.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20260411-1/
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1193629
- https://bugzilla.suse.com/1194869
- https://bugzilla.suse.com/1196823
- https://bugzilla.suse.com/1204957
- https://bugzilla.suse.com/1205567
- https://bugzilla.suse.com/1206889
- https://bugzilla.suse.com/1207051
- https://bugzilla.suse.com/1207088
- https://bugzilla.suse.com/1207611
- https://bugzilla.suse.com/1207620
- https://bugzilla.suse.com/1207622
- https://bugzilla.suse.com/1207636
- https://bugzilla.suse.com/1207644
- https://bugzilla.suse.com/1207646
- https://bugzilla.suse.com/1207652
- https://bugzilla.suse.com/1207653
- https://bugzilla.suse.com/1208570
- https://bugzilla.suse.com/1208758
- https://bugzilla.suse.com/1209799
- https://bugzilla.suse.com/1210817
- https://bugzilla.suse.com/1210943
- https://osv.dev/vulnerability/SUSE-SU-2026:0411-1