SUSE-SU-2026:2332-1

CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
CVE-2026-43037: ip6tunnel: clear skb2->cb in ip4ip6err() (bsc#1263995).
CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfdeventpage_set() (bsc#1264551).
CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266009).
CVE-2026-45852: RDMA/rxe: Fix double free in rxesrqfrom_init (bsc#1266711).
CVE-2026-46043: RDMA/rxe: Validate pad and ICRC before payloadsize() in rxercv (bsc#1266901).
CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (bsc#1266238).

References

Affected packages

SUSE:Linux Enterprise Micro 5.5 / kernel-rt

Package

Name: kernel-rt
Purl: pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.21-150500.13.143.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-source-rt": "5.14.21-150500.13.143.1",
            "kernel-devel-rt": "5.14.21-150500.13.143.1",
            "kernel-rt": "5.14.21-150500.13.143.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2332-1.json"

SUSE:Linux Enterprise Micro 5.5 / kernel-source-rt

Package

Name: kernel-source-rt
Purl: pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.21-150500.13.143.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-rt": "5.14.21-150500.13.143.1",
            "kernel-devel-rt": "5.14.21-150500.13.143.1",
            "kernel-source-rt": "5.14.21-150500.13.143.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2332-1.json"