SUSE-SU-2026:23381-1
SUSE-SU-2026:23381-1 · Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024). - CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271370). - CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867). - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-micro-6-0-rt_update_26 SUSE:Linux Micro 6.0
- Affected ranges
- ECOSYSTEM: < 2-1.1
Update to 2-1.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-202623381-1/
- https://bugzilla.suse.com/1270023
- https://bugzilla.suse.com/1270024
- https://bugzilla.suse.com/1270300
- https://bugzilla.suse.com/1271370
- https://bugzilla.suse.com/1271543
- https://bugzilla.suse.com/1271867
- https://bugzilla.suse.com/1272139
- https://www.suse.com/security/cve/CVE-2026-46242
- https://www.suse.com/security/cve/CVE-2026-52956
- https://www.suse.com/security/cve/CVE-2026-53224
- https://www.suse.com/security/cve/CVE-2026-53246
- https://www.suse.com/security/cve/CVE-2026-53366
- https://www.suse.com/security/cve/CVE-2026-64530
- https://www.suse.com/security/cve/CVE-2026-64600
- https://osv.dev/vulnerability/SUSE-SU-2026:23381-1