SUSE-SU-2026:4170-1
SUSE-SU-2026:4170-1 · Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7)
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232). - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). - CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel-livepatch-sle15-sp7-rt_update_17 SUSE:Linux Enterprise Live Patching 15 SP7
- Plages de versions concernées
- ECOSYSTEM: < 4-150700.2.1
Mettez à jour vers 4-150700.2.1
Sources originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20264170-1/
- https://bugzilla.suse.com/1270303
- https://bugzilla.suse.com/1273232
- https://bugzilla.suse.com/1274074
- https://bugzilla.suse.com/1274942
- https://bugzilla.suse.com/1275458
- https://www.suse.com/security/cve/CVE-2026-53360
- https://www.suse.com/security/cve/CVE-2026-64423
- https://www.suse.com/security/cve/CVE-2026-64561
- https://www.suse.com/security/cve/CVE-2026-64564
- https://www.suse.com/security/cve/CVE-2026-68138
- https://osv.dev/vulnerability/SUSE-SU-2026:4170-1