SUSE-SU-2026:23279-1
SUSE-SU-2026:23279-1 · Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues. The following security issues were fixed: - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023). - CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803). - CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024). - CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867). - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle16_update_15 SUSE:Linux Micro 6.2
- Affected ranges
- ECOSYSTEM: < 2-160000.1.1
Update to 2-160000.1.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-202623279-1/
- https://bugzilla.suse.com/1269803
- https://bugzilla.suse.com/1270023
- https://bugzilla.suse.com/1270024
- https://bugzilla.suse.com/1271543
- https://bugzilla.suse.com/1271867
- https://bugzilla.suse.com/1272139
- https://www.suse.com/security/cve/CVE-2026-52956
- https://www.suse.com/security/cve/CVE-2026-53224
- https://www.suse.com/security/cve/CVE-2026-53233
- https://www.suse.com/security/cve/CVE-2026-53246
- https://www.suse.com/security/cve/CVE-2026-64530
- https://www.suse.com/security/cve/CVE-2026-64600
- https://osv.dev/vulnerability/SUSE-SU-2026:23279-1