SUSE-SU-2026:23010-1
SUSE-SU-2026:23010-1 · Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662). - CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023). - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (ipv6_frag_escape) (bsc#1269495). - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271370).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-micro-6-0_update_25 SUSE:Linux Micro 6.0
- Affected ranges
- ECOSYSTEM: < 2-1.1
Update to 2-1.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-202623010-1/
- https://bugzilla.suse.com/1267723
- https://bugzilla.suse.com/1268662
- https://bugzilla.suse.com/1269023
- https://bugzilla.suse.com/1269495
- https://bugzilla.suse.com/1270060
- https://bugzilla.suse.com/1271370
- https://www.suse.com/security/cve/CVE-2026-46173
- https://www.suse.com/security/cve/CVE-2026-52909
- https://www.suse.com/security/cve/CVE-2026-52943
- https://www.suse.com/security/cve/CVE-2026-53359
- https://www.suse.com/security/cve/CVE-2026-53362
- https://www.suse.com/security/cve/CVE-2026-53366
- https://osv.dev/vulnerability/SUSE-SU-2026:23010-1