SUSE-SU-2026:23440-1
SUSE-SU-2026:23440-1 · Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023) - CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024). - CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867). - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-micro-6-0-rt_update_27 SUSE:Linux Micro 6.1
- Affected ranges
- ECOSYSTEM: < 2-1.1
Update to 2-1.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-202623440-1/
- https://bugzilla.suse.com/1270023
- https://bugzilla.suse.com/1270024
- https://bugzilla.suse.com/1271543
- https://bugzilla.suse.com/1271867
- https://www.suse.com/security/cve/CVE-2026-53224
- https://www.suse.com/security/cve/CVE-2026-53246
- https://www.suse.com/security/cve/CVE-2026-64530
- https://www.suse.com/security/cve/CVE-2026-64600
- https://osv.dev/vulnerability/SUSE-SU-2026:23440-1