SUSE-SU-2026:0548-1
SUSE-SU-2026:0548-1 · Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp6_update_10 SUSE:Linux Enterprise Live Patching 15 SP6
- Affected ranges
- ECOSYSTEM: < 12-150600.2.1
Update to 12-150600.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20260548-1/
- https://bugzilla.suse.com/1249205
- https://bugzilla.suse.com/1249455
- https://bugzilla.suse.com/1249480
- https://bugzilla.suse.com/1253439
- https://bugzilla.suse.com/1253473
- https://www.suse.com/security/cve/CVE-2025-38111
- https://www.suse.com/security/cve/CVE-2025-38352
- https://www.suse.com/security/cve/CVE-2025-39742
- https://www.suse.com/security/cve/CVE-2025-40129
- https://www.suse.com/security/cve/CVE-2025-40186
- https://osv.dev/vulnerability/SUSE-SU-2026:0548-1