SUSE-SU-2026:23104-1
SUSE-SU-2026:23104-1 · Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (bsc#1271648). - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266970). - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271370).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel-livepatch-micro-6-0-rt_update_18 SUSE:Linux Micro 6.1
- Plages de versions concernées
- ECOSYSTEM: < 8-1.1
Mettez à jour vers 8-1.1
Sources originales
- https://www.suse.com/support/update/announcement/2026/suse-su-202623104-1/
- https://bugzilla.suse.com/1262404
- https://bugzilla.suse.com/1264060
- https://bugzilla.suse.com/1266970
- https://bugzilla.suse.com/1270060
- https://bugzilla.suse.com/1271370
- https://bugzilla.suse.com/1271648
- https://www.suse.com/security/cve/CVE-2026-23240
- https://www.suse.com/security/cve/CVE-2026-31738
- https://www.suse.com/security/cve/CVE-2026-43038
- https://www.suse.com/security/cve/CVE-2026-46113
- https://www.suse.com/security/cve/CVE-2026-53359
- https://www.suse.com/security/cve/CVE-2026-53366
- https://osv.dev/vulnerability/SUSE-SU-2026:23104-1