SUSE-SU-2026:0203-1
SUSE-SU-2026:0203-1 · Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.70 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1250192). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp6_update_15 SUSE:Linux Enterprise Live Patching 15 SP6
- Affected ranges
- ECOSYSTEM: < 5-150600.2.1
Update to 5-150600.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20260203-1/
- https://bugzilla.suse.com/1250192
- https://bugzilla.suse.com/1251787
- https://bugzilla.suse.com/1253437
- https://www.suse.com/security/cve/CVE-2023-53676
- https://www.suse.com/security/cve/CVE-2025-39682
- https://www.suse.com/security/cve/CVE-2025-40204
- https://osv.dev/vulnerability/SUSE-SU-2026:0203-1