SUSE-SU-2026:22875-1

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues

The following security issues were fixed:

• CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtool_stats() (bsc#1263094).
• CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tlsdoencryption (bsc#1262759).
• CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfn() (bsc#1263177).
• CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
• CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
• CVE-2026-43027: netfilter: nfconntrackhelper: pass helper to expect cleanup (bsc#1264252).
• CVE-2026-43037: ip6tunnel: clear skb2->cb[] in ip4ip6err() (bsc#1265197).
• CVE-2026-43120: RDMA/irdma: Fix double free related to reregusermr (bsc#1264567).
• CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
• CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
• CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
• CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
• CVE-2026-45970: bonding: alb: fix UAF in rlbarprecv during bond up/down (bsc#1267206).
• CVE-2026-46120: ip6gre: Use cached t->net in ip6erspanchangelink() (bsc#1267893).
• CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
• CVE-2026-46227: sctp: revalidate list cursor after sctpsendmsgtoasoc() in SCTPSENDALL (bsc#1267698).
• CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
• CVE-2026-52909: ip6vti: set netnsimmutable on the fallback device (bsc#1268662).
• CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
• CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).