SUSE-SU-2026:4639-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2026/suse-su-20264639-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2026:4639-1

Upstream

CVE (20)

Related

CVE (20)

Published

2026-10-13T11:51:49Z

Modified

2026-10-14T11:15:08Z

Summary

Security update for the Linux Kernel

Details

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836).
CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535).
CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).
CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).
CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).
CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766).
CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493).
CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).
CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310).
CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).
CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).
CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).
CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).

The following non security issue was fixed:

Disable BATMAN in supported.conf
Disable CONFIG_BATMAN_ADV (jsc#PED-16892)
Disable CONFIG_CAN (jsc#PED-17000)

References

Affected packages

SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.0.101-108.223.1

Ecosystem specific

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.223.1",
            "kernel-default-base":  "3.0.101-108.223.1",
            "kernel-default-devel":  "3.0.101-108.223.1",
            "kernel-docs":  "3.0.101-108.223.1",
            "kernel-ec2":  "3.0.101-108.223.1",
            "kernel-ec2-base":  "3.0.101-108.223.1",
            "kernel-ec2-devel":  "3.0.101-108.223.1",
            "kernel-source":  "3.0.101-108.223.1",
            "kernel-syms":  "3.0.101-108.223.1",
            "kernel-trace":  "3.0.101-108.223.1",
            "kernel-trace-base":  "3.0.101-108.223.1",
            "kernel-trace-devel":  "3.0.101-108.223.1",
            "kernel-xen":  "3.0.101-108.223.1",
            "kernel-xen-base":  "3.0.101-108.223.1",
            "kernel-xen-devel":  "3.0.101-108.223.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"

kernel-docs

Package

Name: kernel-docs
Purl: pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.0.101-108.223.1

Ecosystem specific

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.223.1",
            "kernel-default-base":  "3.0.101-108.223.1",
            "kernel-default-devel":  "3.0.101-108.223.1",
            "kernel-docs":  "3.0.101-108.223.1",
            "kernel-ec2":  "3.0.101-108.223.1",
            "kernel-ec2-base":  "3.0.101-108.223.1",
            "kernel-ec2-devel":  "3.0.101-108.223.1",
            "kernel-source":  "3.0.101-108.223.1",
            "kernel-syms":  "3.0.101-108.223.1",
            "kernel-trace":  "3.0.101-108.223.1",
            "kernel-trace-base":  "3.0.101-108.223.1",
            "kernel-trace-devel":  "3.0.101-108.223.1",
            "kernel-xen":  "3.0.101-108.223.1",
            "kernel-xen-base":  "3.0.101-108.223.1",
            "kernel-xen-devel":  "3.0.101-108.223.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"

kernel-ec2

Package

Name: kernel-ec2
Purl: pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.0.101-108.223.1

Ecosystem specific

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.223.1",
            "kernel-default-base":  "3.0.101-108.223.1",
            "kernel-default-devel":  "3.0.101-108.223.1",
            "kernel-docs":  "3.0.101-108.223.1",
            "kernel-ec2":  "3.0.101-108.223.1",
            "kernel-ec2-base":  "3.0.101-108.223.1",
            "kernel-ec2-devel":  "3.0.101-108.223.1",
            "kernel-source":  "3.0.101-108.223.1",
            "kernel-syms":  "3.0.101-108.223.1",
            "kernel-trace":  "3.0.101-108.223.1",
            "kernel-trace-base":  "3.0.101-108.223.1",
            "kernel-trace-devel":  "3.0.101-108.223.1",
            "kernel-xen":  "3.0.101-108.223.1",
            "kernel-xen-base":  "3.0.101-108.223.1",
            "kernel-xen-devel":  "3.0.101-108.223.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"

kernel-source

Package

Name: kernel-source
Purl: pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.0.101-108.223.1

Ecosystem specific

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.223.1",
            "kernel-default-base":  "3.0.101-108.223.1",
            "kernel-default-devel":  "3.0.101-108.223.1",
            "kernel-docs":  "3.0.101-108.223.1",
            "kernel-ec2":  "3.0.101-108.223.1",
            "kernel-ec2-base":  "3.0.101-108.223.1",
            "kernel-ec2-devel":  "3.0.101-108.223.1",
            "kernel-source":  "3.0.101-108.223.1",
            "kernel-syms":  "3.0.101-108.223.1",
            "kernel-trace":  "3.0.101-108.223.1",
            "kernel-trace-base":  "3.0.101-108.223.1",
            "kernel-trace-devel":  "3.0.101-108.223.1",
            "kernel-xen":  "3.0.101-108.223.1",
            "kernel-xen-base":  "3.0.101-108.223.1",
            "kernel-xen-devel":  "3.0.101-108.223.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"

kernel-syms

Package

Name: kernel-syms
Purl: pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.0.101-108.223.1

Ecosystem specific

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.223.1",
            "kernel-default-base":  "3.0.101-108.223.1",
            "kernel-default-devel":  "3.0.101-108.223.1",
            "kernel-docs":  "3.0.101-108.223.1",
            "kernel-ec2":  "3.0.101-108.223.1",
            "kernel-ec2-base":  "3.0.101-108.223.1",
            "kernel-ec2-devel":  "3.0.101-108.223.1",
            "kernel-source":  "3.0.101-108.223.1",
            "kernel-syms":  "3.0.101-108.223.1",
            "kernel-trace":  "3.0.101-108.223.1",
            "kernel-trace-base":  "3.0.101-108.223.1",
            "kernel-trace-devel":  "3.0.101-108.223.1",
            "kernel-xen":  "3.0.101-108.223.1",
            "kernel-xen-base":  "3.0.101-108.223.1",
            "kernel-xen-devel":  "3.0.101-108.223.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"

kernel-trace

Package

Name: kernel-trace
Purl: pkg:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.0.101-108.223.1

Ecosystem specific

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.223.1",
            "kernel-default-base":  "3.0.101-108.223.1",
            "kernel-default-devel":  "3.0.101-108.223.1",
            "kernel-docs":  "3.0.101-108.223.1",
            "kernel-ec2":  "3.0.101-108.223.1",
            "kernel-ec2-base":  "3.0.101-108.223.1",
            "kernel-ec2-devel":  "3.0.101-108.223.1",
            "kernel-source":  "3.0.101-108.223.1",
            "kernel-syms":  "3.0.101-108.223.1",
            "kernel-trace":  "3.0.101-108.223.1",
            "kernel-trace-base":  "3.0.101-108.223.1",
            "kernel-trace-devel":  "3.0.101-108.223.1",
            "kernel-xen":  "3.0.101-108.223.1",
            "kernel-xen-base":  "3.0.101-108.223.1",
            "kernel-xen-devel":  "3.0.101-108.223.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"

kernel-xen

Package

Name: kernel-xen
Purl: pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.0.101-108.223.1

Ecosystem specific

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.223.1",
            "kernel-default-base":  "3.0.101-108.223.1",
            "kernel-default-devel":  "3.0.101-108.223.1",
            "kernel-docs":  "3.0.101-108.223.1",
            "kernel-ec2":  "3.0.101-108.223.1",
            "kernel-ec2-base":  "3.0.101-108.223.1",
            "kernel-ec2-devel":  "3.0.101-108.223.1",
            "kernel-source":  "3.0.101-108.223.1",
            "kernel-syms":  "3.0.101-108.223.1",
            "kernel-trace":  "3.0.101-108.223.1",
            "kernel-trace-base":  "3.0.101-108.223.1",
            "kernel-trace-devel":  "3.0.101-108.223.1",
            "kernel-xen":  "3.0.101-108.223.1",
            "kernel-xen-base":  "3.0.101-108.223.1",
            "kernel-xen-devel":  "3.0.101-108.223.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"