SUSE-SU-2026:1136-1
SUSE-SU-2026:1136-1 · Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255895). - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255378). - CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255402). - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256624).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-livepatch-sle15-sp7_update_7 SUSE:Linux Enterprise Live Patching 15 SP7
- Intervalos de versiones afectados
- ECOSYSTEM: < 2-150700.2.1
Actualiza a 2-150700.2.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20261136-1/
- https://bugzilla.suse.com/1255053
- https://bugzilla.suse.com/1255378
- https://bugzilla.suse.com/1255402
- https://bugzilla.suse.com/1255895
- https://bugzilla.suse.com/1256624
- https://bugzilla.suse.com/1256644
- https://www.suse.com/security/cve/CVE-2025-40258
- https://www.suse.com/security/cve/CVE-2025-40297
- https://www.suse.com/security/cve/CVE-2025-68284
- https://www.suse.com/security/cve/CVE-2025-68285
- https://www.suse.com/security/cve/CVE-2025-68813
- https://www.suse.com/security/cve/CVE-2025-71085
- https://osv.dev/vulnerability/SUSE-SU-2026:1136-1