SUSE-SU-2026:4687-1

SUSE-SU-2026:4687-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133). - CVE-2026-43428: USB: core: Limit the length of unkillable synchronous timeouts (bsc#1265138). - CVE-2026-45834: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (bsc#1266412). - CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). - CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). - CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). - CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). - CVE-2026-46312: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (bsc#1267990). - CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234). - CVE-2026-53037: HID: usbhid: fix deadlock in hid_post_reset() (bsc#1269081). - CVE-2026-53237: gpio: mvebu: fix NULL pointer dereference in suspend/resume (bsc#1269131). - CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). - CVE-2026-53385: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (bsc#1271834). - CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1273953). - CVE-2026-63897: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (bsc#1272642). - CVE-2026-63900: USB: serial: keyspan: fix missing indat transfer sanity check (bsc#1272499). - CVE-2026-63902: USB: serial: cypress_m8: validate interrupt packet headers (bsc#1272517). - CVE-2026-63903: USB: serial: belkin_sa: validate interrupt status length (bsc#1272522). - CVE-2026-63904: usb: usbtmc: check URB actual_length for interrupt-IN notifications (bsc#1272523). - CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). - CVE-2026-63942: parport: Fix race between port and client registration (bsc#1273023). - CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). - CVE-2026-63957: USB: serial: safe_serial: fix memory corruption with small endpoint (bsc#1272472). - CVE-2026-63961: usb: typec: altmodes/displayport: validate count before reading Status Update VDO (bsc#1272480). - CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). - CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). - CVE-2026-64014: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (bsc#1273769). - CVE-2026-64097: drm/amd/display: Validate GPIO pin LUT table size before iterating (bsc#1273480). - CVE-2026-64191: i2c: stub: Reject I2C block transfers with invalid length (bsc#1272211). - CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). - CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). - CVE-2026-64320: nvmet: fix discover log page when offsets are used (bsc#1273420). - CVE-2026-64342: USB: iowarrior: fix use-after-free on disconnect (bsc#1274011). - CVE-2026-64348: usb: free iso schedules on failed submit (bsc#1274026). - CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). - CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). - CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868). - CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603). - CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). - CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). - CVE-2026-64496: iio: event: Fix event FIFO reset race (bsc#1273600). - CVE-2026-64540: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (bsc#1273302). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-68108: drm/amdgpu/vce: fix integer overflow in image size (bsc#1274869). - CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). - CVE-2026-68184: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (bsc#1274981). - CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). - CVE-2026-68350: wifi: carl9170: fix OOB read from off-by-two in TX status handler (bsc#1274682). - CVE-2026-68365: USB: serial: io_edgeport: cap received transmit credits (bsc#1276257). - CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). - CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831). - CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). - CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). - CVE-2026-68479: Bluetooth: btrtl: validate firmware patch bounds (bsc#1276585). - CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). - CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). - CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). - CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). - CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). - CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). - CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). - CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). - CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). - CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). - CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). - CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). - CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). - CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). - CVE-2026-72166: net/9p: avoid -ERESTARTSYS leak to userspace (bsc#1277556). - CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). - CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). - CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). - CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). - CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). - CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). - CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). - CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128). - CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). - CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). - CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). - CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc

Fix available

Published

2026-10-15T12:38:33Z

Updated

2026-10-16T10:30:20.089916452Z

Stack: system

Check your server →