SUSE-SU-2026:3689-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20263689-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3689-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:3689-1
Upstream
CVE (22)
Related
CVE (22)
Published
2026-08-22T04:33:45Z
Modified
2026-08-26T18:23:33Z
Summary
Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7)
Details

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.13 fixes various security issues:

The following security issues were fixed:

  • CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1253437 bsc#1270023 bsc#1270024).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
  • CVE-2026-23240: Amend fix for CVE-2026-23240 ('tls: Fix race condition in tls_sw_cancel_work_tx()') (bsc#1262404).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
References

Affected packages

SUSE:Linux Enterprise Live Patching 15 SP7 / kernel-livepatch-SLE15-SP7-RT_Update_3

Package

Name
kernel-livepatch-SLE15-SP7-RT_Update_3
Purl
pkg:rpm/suse/kernel-livepatch-SLE15-SP7-RT_Update_3&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
16-150700.2.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-livepatch-6_4_0-150700_7_13-rt":  "16-150700.2.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3689-1.json"