SUSE-SU-2026:0274-1

SUSE-SU-2026:0274-1 · Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203). - CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400). - CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241). - CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670). - CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1250192). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). The following non security issue was fixed: - fix addr_bit_set() issue on big-endian machines (bsc#1256928).

Fix available

Published

2026-01-23T12:04:25Z

Updated

2026-03-23T04:52:05.420183Z

Stack: system

Check your server →