SUSE-SU-2026:1668-1

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

• CVE-2024-26584: net/tls: return ENOTSUPP on tls_init() (bsc#1220186).
• CVE-2025-38234: sched/rt: Fix race in pushrttask (bsc#1246057).
• CVE-2025-39759: btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1249522).
• CVE-2025-71268: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).
• CVE-2025-71269: btrfs: do not free data reservation in fallback from inline due to -ENOSPC (bsc#1259889).
• CVE-2026-22990: libceph: replace overzealous BUGON in osdmapapply_incremental() (bsc#1257221).
• CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
• CVE-2026-23120: l2tp: avoid one data-race in l2tptunneldel_work() (bsc#1258280).
• CVE-2026-23243: RDMA/umad: Reject negative datalen in ibumad_write (bsc#1259797).
• CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
• CVE-2026-23272: netfilter: nf_tables: unconditionally bump set-nelems before insertion (bsc#1260009).
• CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
• CVE-2026-23318: ALSA: usb-audio: Use correct version for UAC3 header validation (bsc#1260536).
• CVE-2026-23362: can: bcm: fix locking for bcm_op runtime updates (bsc#1260489).
• CVE-2026-23382: HID: Add HIDCLAIMEDINPUT guards in raw_event callbacks missing them (bsc#1260551).
• CVE-2026-23386: gve: fix incorrect buffer cleanup in gvetxcleanpendingpackets for QPL (bsc#1260799).
• CVE-2026-23398: icmp: fix NULL pointer dereference in icmptagvalidation() (bsc#1260730).

The following non security issues were fixed:

• btrfs: fix processing of delayed data refs during backref walking (bsc#1228031).
• fs: skip superblock shrink on frozen xfs filesystems (bsc#1259770).