SUSE-SU-2026:2909-1
SUSE-SU-2026:2909-1 · Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253). - CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197). - CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849). - CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127). - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kgraft-patch-sle12-sp5_update_72 SUSE:Linux Enterprise Live Patching 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 14-2.1
Mettez à jour vers 14-2.1
Sources originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20262909-1/
- https://bugzilla.suse.com/1263670
- https://bugzilla.suse.com/1264253
- https://bugzilla.suse.com/1264849
- https://bugzilla.suse.com/1265127
- https://bugzilla.suse.com/1265197
- https://bugzilla.suse.com/1266265
- https://bugzilla.suse.com/1267206
- https://www.suse.com/security/cve/CVE-2026-31685
- https://www.suse.com/security/cve/CVE-2026-43025
- https://www.suse.com/security/cve/CVE-2026-43037
- https://www.suse.com/security/cve/CVE-2026-43190
- https://www.suse.com/security/cve/CVE-2026-43437
- https://www.suse.com/security/cve/CVE-2026-45970
- https://www.suse.com/security/cve/CVE-2026-46243
- https://osv.dev/vulnerability/SUSE-SU-2026:2909-1