p PatchFirst

SUSE-SU-2026:0475-1

SUSE-SU-2026:0475-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723). - CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409). - CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623). - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612). - CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726). - CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236). - CVE-2026-23001: macvlan: Use 'hash' iterators to simplify code (bsc#1257232).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • kernel-default SUSE:Linux Enterprise Micro 5.2

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.235.1

    Update to 5.3.18-150300.59.235.1

  • kernel-default-base SUSE:Linux Enterprise Micro 5.2

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.235.1.150300.18.140.1

    Update to 5.3.18-150300.59.235.1.150300.18.140.1

Original sources

Check your server →