Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.109 fixes various security issues:
The following security issues were fixed:
- CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404).
- CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060).
- CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (bsc#1271648).
- CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266970).
- CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060).
- CVE-2026-53366: ipv4: account for fraggap