SUSE-SU-2026:3826-1

CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284).
CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1253437 bsc#1270023 bsc#1270024).
CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).

References

Affected packages

Name: kgraft-patch-SLE12-SP5_Update_79
Purl: pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_79&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

8-2.1

{
    "binaries": [
        {
            "kgraft-patch-4_12_14-122_299-default": "8-2.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3826-1.json"