SUSE-SU-2026:3289-1
SUSE-SU-2026:3289-1 · Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.113 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (bsc#1271648). - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266970). - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp5_update_28 SUSE:Linux Enterprise Live Patching 15 SP5
- Affected ranges
- ECOSYSTEM: < 21-150500.2.1
Update to 21-150500.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20263289-1/
- https://bugzilla.suse.com/1262404
- https://bugzilla.suse.com/1264060
- https://bugzilla.suse.com/1266970
- https://bugzilla.suse.com/1270060
- https://bugzilla.suse.com/1271648
- https://www.suse.com/security/cve/CVE-2026-23240
- https://www.suse.com/security/cve/CVE-2026-31738
- https://www.suse.com/security/cve/CVE-2026-43038
- https://www.suse.com/security/cve/CVE-2026-46113
- https://www.suse.com/security/cve/CVE-2026-53359
- https://osv.dev/vulnerability/SUSE-SU-2026:3289-1