p PatchFirst

SUSE-SU-2026:23380-1

SUSE-SU-2026:23380-1 · Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024). - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281). - CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034). - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). - CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822). - CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867). - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

Sources originales

Vérifiez votre serveur →