SUSE-SU-2026:4714-1
SUSE-SU-2026:4714-1 · Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP7)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.34 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp7-rt_update_10 SUSE:Linux Enterprise Live Patching 15 SP7
- Affected ranges
- ECOSYSTEM: < 11-150700.2.1
Update to 11-150700.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20264714-1/
- https://bugzilla.suse.com/1269775
- https://bugzilla.suse.com/1271965
- https://bugzilla.suse.com/1272136
- https://bugzilla.suse.com/1272386
- https://bugzilla.suse.com/1272692
- https://bugzilla.suse.com/1276303
- https://www.suse.com/security/cve/CVE-2026-53131
- https://www.suse.com/security/cve/CVE-2026-63794
- https://www.suse.com/security/cve/CVE-2026-63795
- https://www.suse.com/security/cve/CVE-2026-63887
- https://www.suse.com/security/cve/CVE-2026-63939
- https://www.suse.com/security/cve/CVE-2026-68158
- https://osv.dev/vulnerability/SUSE-SU-2026:4714-1