SUSE-SU-2026:20857-1
SUSE-SU-2026:20857-1 · Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for the SUSE Linux Enterprise Kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118). - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel mesh send timer when hdev removed (bsc#1257669). - CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255895). - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256624).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-livepatch-micro-6-0_update_5 SUSE:Linux Micro 6.0
- Intervalos de versiones afectados
- ECOSYSTEM: < 17-1.2
Actualiza a 17-1.2
Fuentes originales
- https://www.suse.com/support/update/announcement/2026/suse-su-202620857-1/
- https://bugzilla.suse.com/1247240
- https://bugzilla.suse.com/1255053
- https://bugzilla.suse.com/1255895
- https://bugzilla.suse.com/1256624
- https://bugzilla.suse.com/1256644
- https://bugzilla.suse.com/1257118
- https://bugzilla.suse.com/1257629
- https://bugzilla.suse.com/1257669
- https://www.suse.com/security/cve/CVE-2025-21738
- https://www.suse.com/security/cve/CVE-2025-38159
- https://www.suse.com/security/cve/CVE-2025-38488
- https://www.suse.com/security/cve/CVE-2025-40258
- https://www.suse.com/security/cve/CVE-2025-40284
- https://www.suse.com/security/cve/CVE-2025-40297
- https://www.suse.com/security/cve/CVE-2025-68813
- https://www.suse.com/security/cve/CVE-2025-71085
- https://osv.dev/vulnerability/SUSE-SU-2026:20857-1