SUSE-SU-2026:20456-1

This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes various security issues

The following security issues were fixed:

• CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455).
• CVE-2025-38352: posix-cpu-timers: fix race between handleposixcputimers() and posixcputimerdel() (bsc#1249205).
• CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in findhwthread_mask() (bsc#1249480).
• CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473).
• CVE-2025-40186: tcp: Don't call reqskfastopenremove() in tcpconnrequest() (bsc#1253439).

The following non security issue was fixed:

• bsc#1249241: fix addrbitset() issue on big-endian machines BITOPBE32SWIZZLE ought to be defined depending on the target's endianess, but the livepatch includes only the little-endian variant. Fix that. (bsc#1249241 bsc#1256928).