SUSE-SU-2026:1274-1
SUSE-SU-2026:1274-1 · Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP6)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.84 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). - CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238). - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183). - CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784). The following non security issue was fixed: - Fix NULL pointer dereference in smb2_query_server_interfaces Livepatch for to restore a null check of server->ops->query_server_interfaces that was dropped by mistake. (bsc#1259896 bsc#1259962).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp6_update_19 SUSE:Linux Enterprise Live Patching 15 SP6
- Affected ranges
- ECOSYSTEM: < 3-150600.2.1
Update to 3-150600.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20261274-1/
- https://bugzilla.suse.com/1256780
- https://bugzilla.suse.com/1257238
- https://bugzilla.suse.com/1258051
- https://bugzilla.suse.com/1258183
- https://bugzilla.suse.com/1258784
- https://bugzilla.suse.com/1259896
- https://bugzilla.suse.com/1259962
- https://www.suse.com/security/cve/CVE-2025-71120
- https://www.suse.com/security/cve/CVE-2026-22999
- https://www.suse.com/security/cve/CVE-2026-23074
- https://www.suse.com/security/cve/CVE-2026-23111
- https://www.suse.com/security/cve/CVE-2026-23209
- https://osv.dev/vulnerability/SUSE-SU-2026:1274-1