p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-sle15-sp6_update_15 vulnerabilities

Vulnerabilities published for kernel-livepatch-sle15-sp6_update_15 in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 8

  1. SUSE-SU-2026:3754-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1253437 bsc#1270023 bsc#1270024). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). - CVE-2026-23240: Amend fix for CVE-2026-23240 ('tls: Fix race condition in tls_sw_cancel_work_tx()') (bsc#1262404). - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED

    • Update to 16-150600.2.1
    Published Updated
  2. SUSE-SU-2026:1096-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel mesh send timer when hdev removed (bsc#1257669). - CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255895). - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255378). - CVE-2025-68285: libc

    • Update to 7-150600.2.1
    Published Updated
  3. SUSE-SU-2026:0551-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.70 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).

    • Update to 6-150600.2.1
    Published Updated
  4. SUSE-SU-2026:0203-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.70 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1250192). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).

    • Update to 5-150600.2.1
    Published Updated
  5. SUSE-SU-2025:4275-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.70 fixes one security issue The following security issue was fixed: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).

    • Update to 4-150600.2.1
    Published Updated
  6. SUSE-SU-2025:03301-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708). - CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089). - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156). - CVE-2025-37885: KVM: x86: Reset IRTE to host control if *new* route isn't postable (bsc#1242960). - CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930). - CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#12

    • Update to 1-150600.13.3.2
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →