SUSE-SU-2026:4519-1
SUSE-SU-2026:4519-1 · Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). - CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). - CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). - CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). - CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (bsc#1273051). - CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). - CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). - CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). - CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). - CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). - CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-livepatch-sle15-sp4_update_50 SUSE:Linux Enterprise Live Patching 15 SP4
- Intervalos de versiones afectados
- ECOSYSTEM: < 10-150400.2.1
Actualiza a 10-150400.2.1
kernel-livepatch-sle15-sp5_update_33 SUSE:Linux Enterprise Live Patching 15 SP5
- Intervalos de versiones afectados
- ECOSYSTEM: < 14-150500.2.1
Actualiza a 14-150500.2.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20264519-1/
- https://bugzilla.suse.com/1267370
- https://bugzilla.suse.com/1272208
- https://bugzilla.suse.com/1272391
- https://bugzilla.suse.com/1272679
- https://bugzilla.suse.com/1273011
- https://bugzilla.suse.com/1273012
- https://bugzilla.suse.com/1273015
- https://bugzilla.suse.com/1273051
- https://bugzilla.suse.com/1273833
- https://bugzilla.suse.com/1275162
- https://bugzilla.suse.com/1275228
- https://bugzilla.suse.com/1276493
- https://bugzilla.suse.com/1277409
- https://www.suse.com/security/cve/CVE-2026-46116
- https://www.suse.com/security/cve/CVE-2026-63888
- https://www.suse.com/security/cve/CVE-2026-63917
- https://www.suse.com/security/cve/CVE-2026-63920
- https://www.suse.com/security/cve/CVE-2026-63921
- https://www.suse.com/security/cve/CVE-2026-63971
- https://www.suse.com/security/cve/CVE-2026-63994
- https://www.suse.com/security/cve/CVE-2026-64011
- https://www.suse.com/security/cve/CVE-2026-64114
- https://osv.dev/vulnerability/SUSE-SU-2026:4519-1