SUSE-SU-2026:4315-1
SUSE-SU-2026:4315-1 · Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232). - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). - CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp5_update_41 SUSE:Linux Enterprise Live Patching 15 SP5
- Affected ranges
- ECOSYSTEM: < 5-150500.2.1
Update to 5-150500.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20264315-1/
- https://bugzilla.suse.com/1267388
- https://bugzilla.suse.com/1273232
- https://bugzilla.suse.com/1274074
- https://bugzilla.suse.com/1274942
- https://bugzilla.suse.com/1275458
- https://www.suse.com/security/cve/CVE-2026-46150
- https://www.suse.com/security/cve/CVE-2026-64423
- https://www.suse.com/security/cve/CVE-2026-64561
- https://www.suse.com/security/cve/CVE-2026-64564
- https://www.suse.com/security/cve/CVE-2026-68138
- https://osv.dev/vulnerability/SUSE-SU-2026:4315-1