p PatchFirst

SUSE-SU-2026:0173-1

SUSE-SU-2026:0173-1 · Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.88 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50409: net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (bsc#1250665). - CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251165). - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815). - CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248615). - CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203). - CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400). - CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).

Fix available

Published
Updated

Stack: system

Affected products and versions

Original sources

Check your server →