SUSE-SU-2026:2503-1
SUSE-SU-2026:2503-1 · Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 15 SP7)
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.37 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088). - CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902). - CVE-2026-43503: final dirty.frag related fixes (bsc#1266229). - CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282). - net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel-livepatch-sle15-sp7-rt_update_11 SUSE:Linux Enterprise Live Patching 15 SP7
- Plages de versions concernées
- ECOSYSTEM: < 5-150700.2.1
Mettez à jour vers 5-150700.2.1
Sources originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20262503-1/
- https://bugzilla.suse.com/1261640
- https://bugzilla.suse.com/1263088
- https://bugzilla.suse.com/1263902
- https://bugzilla.suse.com/1266229
- https://bugzilla.suse.com/1267625
- https://bugzilla.suse.com/1268282
- https://www.suse.com/security/cve/CVE-2026-31402
- https://www.suse.com/security/cve/CVE-2026-31504
- https://www.suse.com/security/cve/CVE-2026-31694
- https://www.suse.com/security/cve/CVE-2026-43503
- https://www.suse.com/security/cve/CVE-2026-46323
- https://osv.dev/vulnerability/SUSE-SU-2026:2503-1