p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-micro-6-0_update_6 vulnerabilities

Vulnerabilities published for kernel-livepatch-micro-6-0_update_6 in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 16

  1. SUSE-SU-2026:21049-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252689). - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). - CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238). - CVE-2026-23074: net/sched: Enforce that teql can

    • Update to 16-3.1
    Published Updated
  2. SUSE-SU-2026:20881-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel mesh send timer when hdev removed (bsc#1257669). - CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255895). - CVE-2025-68813: ipvs: fix ipv4 nul

    • Update to 15-3.1
    Published Updated
  3. SUSE-SU-2026:20673-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    • Update to 14-3.1
    Published Updated
  4. SUSE-SU-2026:20501-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).

    • Update to 13-3.1
    Published Updated
  5. SUSE-SU-2026:20386-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes one security issue The following security issue was fixed: - CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241). The following non security issue was fixed: - fix addr_bit_set() issue on big-endian machines (bsc#1256928).

    • Update to 12-3.1
    Published Updated
  6. SUSE-SU-2026:20385-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203). - CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400). - CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241). - CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670). - CVE-2025-39682: tls: fix handling of zero-length records on

    • Update to 11-3.1
    Published Updated
  7. SUSE-SU-2025:21109-1

    Not ratedFix available

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)

    • Update to 10-3.1
    Published Updated
  8. SUSE-SU-2025:20974-1

    Not ratedFix available

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1249208)

    • Update to 9-3.1
    Published Updated
  9. SUSE-SU-2025:20905-1

    Not ratedFix available

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452) - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376) - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673) - CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749) - CVE-2025-38

    • Update to 8-3.1
    Published Updated
  10. SUSE-SU-2025:20809-1

    Not ratedFix available

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315)

    • Update to 7-3.1
    Published Updated
  11. SUSE-SU-2025:20774-1

    Not ratedFix available

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-2025-38181: calipso: fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001) - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499) - CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1248298)

    • Update to 6-3.1
    Published Updated
  12. SUSE-SU-2025:20761-1

    Not ratedFix available

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235) - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775) - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1245791) - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030)

    • Update to 5-3.1
    Published Updated
  13. SUSE-SU-2025:20679-1

    Not ratedFix available

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350) - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247351)

    • Update to 4-3.1
    Published Updated
  14. SUSE-SU-2025:20613-1

    Not ratedFix available

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797)

    • Update to 3-3.1
    Published Updated
  15. SUSE-SU-2025:20270-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). - CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672). - CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757). - CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489). - CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937). - CVE-2024-41005: netpoll: Fix race condition

    • Update to 1-3.1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →