SUSE-SU-2026:1236-1
SUSE-SU-2026:1236-1 · Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.53 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252689). - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). - CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238). - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183). - CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp6_update_12 SUSE:Linux Enterprise Live Patching 15 SP6
- Affected ranges
- ECOSYSTEM: < 14-150600.2.1
Update to 14-150600.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20261236-1/
- https://bugzilla.suse.com/1252036
- https://bugzilla.suse.com/1252689
- https://bugzilla.suse.com/1253404
- https://bugzilla.suse.com/1256780
- https://bugzilla.suse.com/1257238
- https://bugzilla.suse.com/1258051
- https://bugzilla.suse.com/1258183
- https://bugzilla.suse.com/1258784
- https://www.suse.com/security/cve/CVE-2025-39973
- https://www.suse.com/security/cve/CVE-2025-40018
- https://www.suse.com/security/cve/CVE-2025-40159
- https://www.suse.com/security/cve/CVE-2025-71120
- https://www.suse.com/security/cve/CVE-2026-22999
- https://www.suse.com/security/cve/CVE-2026-23074
- https://www.suse.com/security/cve/CVE-2026-23111
- https://www.suse.com/security/cve/CVE-2026-23209
- https://osv.dev/vulnerability/SUSE-SU-2026:1236-1