SUSE-SU-2026:4665-1

SUSE-SU-2026:4665-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966). - CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682). - CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). - CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). - CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). - CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). - CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339). - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307). - CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470). - CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). - CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). - CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). - CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). - CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). - CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). - CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). - CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). - CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). - CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). - CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). - CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). - CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535). - CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540). - CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). - CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). - CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). - CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). - CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). - CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). - CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). - CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381). - CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). - CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). - CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). - CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). - CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). - CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). - CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). - CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). - CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). - CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). - CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). - CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). - CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). - CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). - CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). - CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). - CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). - CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). - CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). - CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). - CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). - CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). - CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). - CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). - CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). - CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). - CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). - CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). - CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). - CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). - CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). - CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). - CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). - CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). - CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). - CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). - CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). - CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). - CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). - CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). - CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). - CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). - CVE-2026-80852: tls: device: fix out-

Fix available

Published

2026-10-14T12:53:55Z

Updated

2026-10-15T10:30:35.424255939Z

Stack: system

Check your server →