SUSE-SU-2026:23380-1

SUSE-SU-2026:23380-1 · Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024). - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281). - CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034). - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). - CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822). - CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867). - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).

Fix available

Published

2026-08-31T15:30:50Z

Updated

2026-09-10T18:23:14.461595012Z

Stack: system

Check your server →