SUSE-SU-2026:20615-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-202620615-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20615-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:20615-1
Upstream
Related
Published
2026-02-27T11:32:45Z
Modified
2026-03-23T04:53:05.307414Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcppmdeladdtimer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerrwork is cancelled in nvmefcdeletectrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dstdevrcu() in tcpfastopenactivedisableofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpfprogrundatapointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scangetnextrmapitem (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rtbindexception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add idatasem protection in ext4destroyinlinedatanolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in processv2sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: schcake: Fix incorrect qlen reduction in cakedrop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bugon in jbd2journalgetcreate_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in _blkdevissuezeropages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFSINOLAYOUTCOMMIT in pnfsmarklayoutstateidinvalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbdgenlconnect (bsc#1255622).
  • CVE-2025-68367: macintosh/machid: fix race condition in machidtoggleemumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in mdwakeupthread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inetfragqueue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxten: Fix XDPTX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2findvictim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prpgetuntagged_frame() (bsc#1256659).
  • CVE-2025-68784: xfs: fix a UAF problem in xattr repair (bsc#1256793).
  • CVE-2025-68788: fsnotify: do not generate ACCESS/MODIFY events on child for special files (bsc#1256638).
  • CVE-2025-68792: tpm2-sessions: Fix out of range indexing in name_size (bsc#1256656).
  • CVE-2025-68795: ethtool: Avoid overflowing userspace buffer on stats query (bsc#1256688).
  • CVE-2025-68798: perf/x86/amd: Check event before enable to avoid GPF (bsc#1256689).
  • CVE-2025-68799: caif: fix integer underflow in cffrml_receive() (bsc#1256643).
  • CVE-2025-68800: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (bsc#1256646).
  • CVE-2025-68801: mlxsw: spectrum_router: Fix neighbour use-after-free (bsc#1256653).
  • CVE-2025-68803: NFSD: NFSv4 file creation neglects setting ACL (bsc#1256770).
  • CVE-2025-68811: svcrdma: use rc_pageoff for memcpy byte offset (bsc#1256677).
  • CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
  • CVE-2025-68814: io_uring: fix filename leak in __ioopenatprep() (bsc#1256651).
  • CVE-2025-68815: net/sched: ets: Remove drr class from the active list if it changes to strict (bsc#1256680).
  • CVE-2025-68816: net/mlx5: fw_tracer, Validate format string parameters (bsc#1256674).
  • CVE-2025-68820: ext4: xattr: fix null pointer deref in ext4rawinode() (bsc#1256754).
  • CVE-2025-68821: fuse: fix readahead reclaim deadlock (bsc#1256667).
  • CVE-2025-71064: net: hns3: using the num_tqps in the vf driver to apply for resources (bsc#1256654).
  • CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange (bsc#1256645).
  • CVE-2025-71077: tpm: Cap the number of PCR banks (bsc#1256613).
  • CVE-2025-71080: ipv6: fix a BUG in rt6getpcpuroute() under PREEMPTRT (bsc#1256608).
  • CVE-2025-71084: RDMA/cm: Fix leaking the multicast GID table reference (bsc#1256622).
  • CVE-2025-71085: ipv6: BUG() in pskbexpandhead() as part of calipsoskbuffsetattr() (bsc#1256623).
  • CVE-2025-71087: iavf: fix off-by-one issues in iavfconfigrss_reg() (bsc#1256628).
  • CVE-2025-71088: mptcp: fallback earlier on simult connection (bsc#1256630).
  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
  • CVE-2025-71091: team: fix check for port enabled in teamqueueoverrideportprio_changed() (bsc#1256773).
  • CVE-2025-71093: e1000: fix OOB in e1000tbishould_accept() (bsc#1256777).
  • CVE-2025-71094: net: usb: asix: ax88772: Increase phy_name size (bsc#1256597).
  • CVE-2025-71095: net: stmmac: fix the crash issue for zero copy XDP_TX action (bsc#1256605).
  • CVE-2025-71097: ipv4: Fix reference count leak when using error routes with nexthop objects (bsc#1256607).
  • CVE-2025-71098: ip6gre: make ip6greheader() robust (bsc#1256591).
  • CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
  • CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
  • CVE-2025-71120: SUNRPC: svcauthgss: avoid NULL deref on zero length gsstoken in gssreadproxy_verf (bsc#1256779).
  • CVE-2025-71123: ext4: fix string copying in parseapplysbmountoptions() (bsc#1256757).
  • CVE-2025-71126: mptcp: avoid deadlock on fallback while reinjecting (bsc#1256755).
  • CVE-2025-71132: smc91x: fix broken irq-context in PREEMPT_RT (bsc#1256737).
  • CVE-2025-71133: RDMA/irdma: avoid invalid read in irdmanetevent (bsc#1256733).
  • CVE-2025-71135: md/raid5: fix possible null-pointer dereferences in raid5storegroupthreadcnt() (bsc#1256761).
  • CVE-2025-71137: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (bsc#1256760).
  • CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
  • CVE-2025-71149: iouring/poll: correctly handle iopoll_add() return value on update (bsc#1257164).
  • CVE-2025-71156: gve: defer interrupt enabling until NAPI registration (bsc#1257167).
  • CVE-2025-71157: RDMA/core: always drop device refcount in ibdelsubdeviceand_put() (bsc#1257168).
  • CVE-2026-22976: net/sched: schqfq: Fix NULL deref when deactivating inactive aggregate in qfqreset (bsc#1257035).
  • CVE-2026-22977: net: sock: fix hardened usercopy panic in sockrecverrqueue (bsc#1257053).
  • CVE-2026-22981: idpf: detach and close netdevs while handling a reset (bsc#1257225).
  • CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
  • CVE-2026-22984: libceph: prevent potential out-of-bounds reads in handleauthdone() (bsc#1257217).
  • CVE-2026-22986: gpiolib: fix race condition for gdev->srcu (bsc#1257276).
  • CVE-2026-22990: libceph: replace overzealous BUGON in osdmapapply_incremental() (bsc#1257221).
  • CVE-2026-22991: libceph: make freechoosearg_map() resilient to partial allocation (bsc#1257220).
  • CVE-2026-22992: libceph: return the handler error from monhandleauth_done() (bsc#1257218).
  • CVE-2026-22993: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations (bsc#1257180).
  • CVE-2026-22996: net/mlx5e: Don't store mlx5epriv in mlx5edev devlink priv.
  • CVE-2026-22999: net/sched: schqfq: do not free existing class in qfqchange_class() (bsc#1257236).
  • CVE-2026-23000: net/mlx5e: Fix crash on profile change rollback failure (bsc#1257234).
  • CVE-2026-23001: macvlan: fix possible UAF in macvlanforwardsource() (bsc#1257232).
  • CVE-2026-23005: x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1 (bsc#1257245).
  • CVE-2026-23011: ipv4: ipgre: make ipgreheader() robust (bsc#1257207).

The following non security issues were fixed:

  • ALSA: usb-audio: Update for native DSD support quirks (stable-fixes).
  • Add bugnumber to an existing hv_netvsc change (bsc#1257473).
  • Fix locking issue introduced by a CVE backport (bsc#1256975 bsc#1254977).
  • Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
  • arm64: Update config files. Disable DEVPORT (bsc#1256792)
  • bpf/selftests: testselectreuseport_kern: Remove unused header (bsc#1257603).
  • bpf: Do not let BPF test infra emit invalid GSO types to stack (bsc#1255569).
  • btrfs: pass fsinfo to btrfsdeleterefhead() (git-fixes).
  • btrfs: scrub: always update btrfsscrubprogress::last_physical (git-fixes).
  • bus: fsl-mc: Constify fslmcdevice_match() (jsc#PED-10906 git-fixes).
  • drm/imagination: Wait for FW trace update command completion (git-fixes).
  • drm/msm/a6xx: fix bogus hwcg register updates (git-fixes).
  • ice: use netifgetnumdefaultrss_queues() (bsc#1247712).
  • libbpf: Fix -Wdiscarded-qualifiers under C23 (bsc#1257309).
  • mm, page_alloc, thp: prevent reclaim for _GFPTHISNODE THP allocations (bsc#1254447 bsc#1253087).
  • net: mana: Fix incorrect speed reported by debugfs (bsc#1255232).
  • net: mana: Support HW link state events (bsc#1253049).
  • nfsd: adjust WARNONONCE in revoke_delegation (bsc#1257015).
  • nvme: nvme-fc: move tagset removal to nvmefcdelete_ctrl() (git-fixes).
  • powerpc/addnote: Fix overflow on 32-bit builds (bsc#1215199).
  • sched/fair: Disable scheduler feature NEXT_BUDDY (bsc#1255459).
  • scsi: lpfc: Rework lpfcsli4fcfrrnextindexget() (bsc#1256864).
  • scsi: lpfc: Update lpfc version to 14.4.0.13 (bsc#1256864).
  • scsi: qla2xxx: Add Speed in SFP print information (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Add bsg interface to support firmware img validation (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Add support for 64G SFP speed (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Allow recovery for tape devices (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Delay module unload while fabric scan in progress (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Fix bsg_done() causing double free (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Free sp in error path to fix system crash (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Query FW again before proceeding with login (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Update version to 10.02.10.100-k (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Validate MCU signature before executing MBC 03h (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: qla2xxx: Validate sp before freeing associated memory (bsc#1256865 bsc#1256867 jsc#PED-14156).
  • scsi: storvsc: Process unsupported MODESENSE10 (bsc#1257296).
  • selftests: net: fib-onlink-tests: Convert to use namespaces by default (bsc#1255346).
  • slimbus: core: Constify slimeaddrequal() (jsc#PED-10906 git-fixes).
  • smb: client: split cached_fid bitfields to avoid shared-byte RMW races (bsc#1250748,bsc#1257154).
  • smb: client: update cfid->lastaccesstime in opencacheddirbydentry() (git-fixes).
  • smb: improve directory cache reuse for readdir operations (bsc#1252712).
  • tsm-mr: Add TVM Measurement Register support (bsc#1257504).
  • tsm-mr: Add tsm-mr sample code (bsc#1257504).
  • virt: tdx-guest: Expose TDX MRs as sysfs attributes (bsc#1257504).
  • virt: tdx-guest: Refactor and streamline TDREPORT generation (bsc#1257504).
  • virt: tdx-guest: Transition to scopedcondguard for mutex operations (bsc#1257504).
  • wifi: mwifiex: Fix a loop in mwifiexupdateampdu_rxwinsize() (git-fixes).
  • x86/tdx: Add tdxmcallextend_rtmr() interface (bsc#1257504).
  • x86/tdx: tdxmcallgetreport0: Return -EBUSY on TDCALLOPERAND_BUSY error (bsc#1257504).
References

Affected packages

SUSE:Linux Enterprise High Availability Extension 16.0 / kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.12.0-160000.26.1

Ecosystem specific 

{
    "binaries": [
        {
            "dlm-kmp-default": "6.12.0-160000.26.1",
            "gfs2-kmp-default": "6.12.0-160000.26.1",
            "cluster-md-kmp-default": "6.12.0-160000.26.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20615-1.json"