SUSE-SU-2026:23964-1
SUSE-SU-2026:23964-1 · Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232). - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). - CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle16_update_10 SUSE:Linux Micro 6.2
- Affected ranges
- ECOSYSTEM: < 7-160000.1.1
Update to 7-160000.1.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-202623964-1/
- https://bugzilla.suse.com/1267388
- https://bugzilla.suse.com/1270303
- https://bugzilla.suse.com/1273232
- https://bugzilla.suse.com/1274074
- https://bugzilla.suse.com/1274942
- https://bugzilla.suse.com/1275458
- https://www.suse.com/security/cve/CVE-2026-46150
- https://www.suse.com/security/cve/CVE-2026-53360
- https://www.suse.com/security/cve/CVE-2026-64423
- https://www.suse.com/security/cve/CVE-2026-64561
- https://www.suse.com/security/cve/CVE-2026-64564
- https://www.suse.com/security/cve/CVE-2026-68138
- https://osv.dev/vulnerability/SUSE-SU-2026:23964-1