SUSE-SU-2026:1102-1
SUSE-SU-2026:1102-1 · Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues The following security issues were fixed: - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255378). - CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255402). - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256624).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp6_update_19 SUSE:Linux Enterprise Live Patching 15 SP6
- Affected ranges
- ECOSYSTEM: < 2-150600.2.1
Update to 2-150600.2.1
kernel-livepatch-sle15-sp7_update_8 SUSE:Linux Enterprise Live Patching 15 SP7
- Affected ranges
- ECOSYSTEM: < 2-150700.2.1
Update to 2-150700.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20261102-1/
- https://bugzilla.suse.com/1255378
- https://bugzilla.suse.com/1255402
- https://bugzilla.suse.com/1256624
- https://bugzilla.suse.com/1256644
- https://www.suse.com/security/cve/CVE-2025-68284
- https://www.suse.com/security/cve/CVE-2025-68285
- https://www.suse.com/security/cve/CVE-2025-68813
- https://www.suse.com/security/cve/CVE-2025-71085
- https://osv.dev/vulnerability/SUSE-SU-2026:1102-1