SUSE-SU-2026:0489-1
SUSE-SU-2026:0489-1 · Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439). The following non security issue was fixed: - bsc#1249241: fix addr_bit_set() issue on big-endian machines BITOP_BE32_SWIZZLE ought to be defined depending on the target's endianess, but the livepatch includes only the little-endian variant. Fix that. (bsc#1249241 bsc#1256928).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-livepatch-sle15-sp7-rt_update_2 SUSE:Linux Enterprise Live Patching 15 SP7
- Intervalos de versiones afectados
- ECOSYSTEM: < 10-150700.2.1
Actualiza a 10-150700.2.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20260489-1/
- https://bugzilla.suse.com/1249205
- https://bugzilla.suse.com/1249241
- https://bugzilla.suse.com/1249480
- https://bugzilla.suse.com/1253439
- https://bugzilla.suse.com/1253473
- https://bugzilla.suse.com/1256928
- https://www.suse.com/security/cve/CVE-2025-38352
- https://www.suse.com/security/cve/CVE-2025-39742
- https://www.suse.com/security/cve/CVE-2025-40129
- https://www.suse.com/security/cve/CVE-2025-40186
- https://osv.dev/vulnerability/SUSE-SU-2026:0489-1