SUSE-SU-2026:4892-1

SUSE-SU-2026:4892-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076). - CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995). - CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). - CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). - CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670). - CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). - CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). - CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288). - CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497). - CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853). - CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). - CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659). - CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080). - CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). - CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273). - CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). - CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). - CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964). - CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844). - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). - CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387). - CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894). - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). - CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313). - CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). - CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). - CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058). - CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). - CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). - CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). - CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784). - CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744). - CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). - CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755). - CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762). - CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). - CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). - CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). - CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). - CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). - CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). - CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). - CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). - CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). - CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). - CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). - CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). - CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). - CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: - kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. - net: add inline function skb_csum_is_sctp (bsc#1285684). - netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). - vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).

Fix available

Published

2026-10-23T10:48:07Z

Updated

2026-10-24T17:23:10.297365390Z

Stack: system

Check your server →