SUSE-SU-2026:3319-1
SUSE-SU-2026:3319-1 · Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP5)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.149 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (bsc#1271648). - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266970). - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp5_update_38 SUSE:Linux Enterprise Live Patching 15 SP5
- Affected ranges
- ECOSYSTEM: < 6-150500.2.1
Update to 6-150500.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20263319-1/
- https://bugzilla.suse.com/1262404
- https://bugzilla.suse.com/1264060
- https://bugzilla.suse.com/1266970
- https://bugzilla.suse.com/1270060
- https://bugzilla.suse.com/1271648
- https://www.suse.com/security/cve/CVE-2026-23240
- https://www.suse.com/security/cve/CVE-2026-31738
- https://www.suse.com/security/cve/CVE-2026-43038
- https://www.suse.com/security/cve/CVE-2026-46113
- https://www.suse.com/security/cve/CVE-2026-53359
- https://osv.dev/vulnerability/SUSE-SU-2026:3319-1