SUSE-SU-2026:4749-1
SUSE-SU-2026:4749-1 · Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp5_update_73 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 17-2.1
Update to 17-2.1
kernel-livepatch-sle15-sp5_update_37 SUSE:Linux Enterprise Live Patching 15 SP5
- Affected ranges
- ECOSYSTEM: < 11-150500.2.1
Update to 11-150500.2.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20264749-1/
- https://bugzilla.suse.com/1269775
- https://bugzilla.suse.com/1271965
- https://bugzilla.suse.com/1272386
- https://bugzilla.suse.com/1276303
- https://www.suse.com/security/cve/CVE-2026-53131
- https://www.suse.com/security/cve/CVE-2026-63794
- https://www.suse.com/security/cve/CVE-2026-63887
- https://www.suse.com/security/cve/CVE-2026-68158
- https://osv.dev/vulnerability/SUSE-SU-2026:4749-1