SUSE-SU-2026:3781-1
SUSE-SU-2026:3781-1 · Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1253437 bsc#1270023 bsc#1270024). - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). - CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867). - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-livepatch-sle15-sp7_update_18 SUSE:Linux Enterprise Live Patching 15 SP7
- Intervalos de versiones afectados
- ECOSYSTEM: < 3-150700.2.1
Actualiza a 3-150700.2.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20263781-1/
- https://bugzilla.suse.com/1270023
- https://bugzilla.suse.com/1270024
- https://bugzilla.suse.com/1270300
- https://bugzilla.suse.com/1271543
- https://bugzilla.suse.com/1271867
- https://bugzilla.suse.com/1272139
- https://www.suse.com/security/cve/CVE-2026-46242
- https://www.suse.com/security/cve/CVE-2026-52956
- https://www.suse.com/security/cve/CVE-2026-53224
- https://www.suse.com/security/cve/CVE-2026-53246
- https://www.suse.com/security/cve/CVE-2026-64530
- https://www.suse.com/security/cve/CVE-2026-64600
- https://osv.dev/vulnerability/SUSE-SU-2026:3781-1