SUSE-SU-2026:4706-1

SUSE-SU-2026:4706-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). - CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). - CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). - CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). - CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). - CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). - CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). - CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). - CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). - CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). - CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). - CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). - CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). - CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). - CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). - CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). - CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). - CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). - CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). - CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). - CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971). - CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). - CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). - CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). - CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). - CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). - CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). - CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). - CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). - CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). - CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). - CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). - CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). - CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). - CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). - CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). - CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). - CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). - CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). - CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). - CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512). - CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). - CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). - CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). - CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). - CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). - CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). - CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). - CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). - CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). - CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). - CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). - CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238). - CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). - CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). - CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). - CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). - CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). - CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). - CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). - CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). - CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). - CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). - CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). - CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). - CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). - CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900). - CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). - CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). - CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). - CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). - CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). - CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). - CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). - CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). - CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). - CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). - CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). - CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). - CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc

Fix available

Published

2026-10-16T13:33:59Z

Updated

2026-10-17T10:00:05.985817162Z

Stack: system

Check your server →