SUSE-SU-2026:20255-1
SUSE-SU-2026:20255-1 · Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for the SUSE Linux Enterprise kernel 6.4.0-24.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815). - CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203). - CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400). - CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241). - CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670). - CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1250192). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-livepatch-micro-6-0_update_4 SUSE:Linux Micro 6.0
- Intervalos de versiones afectados
- ECOSYSTEM: < 15-1.2
Actualiza a 15-1.2
Fuentes originales
- https://www.suse.com/support/update/announcement/2026/suse-su-202620255-1/
- https://bugzilla.suse.com/1235815
- https://bugzilla.suse.com/1248400
- https://bugzilla.suse.com/1248670
- https://bugzilla.suse.com/1249241
- https://bugzilla.suse.com/1250192
- https://bugzilla.suse.com/1251203
- https://bugzilla.suse.com/1251787
- https://bugzilla.suse.com/1253437
- https://www.suse.com/security/cve/CVE-2023-53676
- https://www.suse.com/security/cve/CVE-2024-57849
- https://www.suse.com/security/cve/CVE-2025-38476
- https://www.suse.com/security/cve/CVE-2025-38572
- https://www.suse.com/security/cve/CVE-2025-38588
- https://www.suse.com/security/cve/CVE-2025-38608
- https://www.suse.com/security/cve/CVE-2025-39682
- https://www.suse.com/security/cve/CVE-2025-40204
- https://osv.dev/vulnerability/SUSE-SU-2026:20255-1