SUSE-SU-2026:20854-1

SUSE-SU-2026:20854-1 · Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel mesh send timer when hdev removed (bsc#1257669). - CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255895). - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255378). - CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255402). - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256624).

Correctif disponible

Publication

2026-03-24T16:48:44Z

Mise à jour

2026-03-28T17:25:46.004107Z

Pile logicielle: system

Vérifiez votre serveur →