SUSE-SU-2026:4231-1
SUSE-SU-2026:4231-1 · Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232). - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). - CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp6_update_16 SUSE:Linux Enterprise Live Patching 15 SP6
- Affected ranges
- ECOSYSTEM: < 14-150600.2.1
Update to 14-150600.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20264231-1/
- https://bugzilla.suse.com/1267388
- https://bugzilla.suse.com/1273232
- https://bugzilla.suse.com/1274074
- https://bugzilla.suse.com/1274942
- https://bugzilla.suse.com/1275458
- https://www.suse.com/security/cve/CVE-2026-46150
- https://www.suse.com/security/cve/CVE-2026-64423
- https://www.suse.com/security/cve/CVE-2026-64561
- https://www.suse.com/security/cve/CVE-2026-64564
- https://www.suse.com/security/cve/CVE-2026-68138
- https://osv.dev/vulnerability/SUSE-SU-2026:4231-1