Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues:
The following security issues were fixed:
- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775).
- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965).
- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136).
- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386).
- CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895).
- CVE-2026-68158: libceph: Fix m
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues:
The following security issues were fixed:
- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_s
This update for kronosnet fixes the following issues:
- CVE-2026-15811: improper sanitization of sensitive memory locations following cryptographic configuration adjustments
can lead to potential exposure of encryption keys (bsc#1271923).
- CVE-2026-15812: improper verification of packet origins allows for access control list (ACL) bypass via ID spoofing
(bsc#1271924).
- CVE-2026-15813: improper validation during fragment reassembly can trigger memory corruption or out-of-bounds memory
access (bsc#1271925).