SUSE-SU-2026:4938-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20264938-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4938-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:4938-1
Upstream
CVE (27)
Related
CVE (27)
Published
2026-10-29T13:39:40Z
Modified
2026-10-31T18:00:04Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
  • CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
  • CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
  • CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
  • CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
  • CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
  • CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
  • CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
  • CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
  • CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
  • CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
  • CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
  • CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
  • CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
  • CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
  • CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
  • CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
  • CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
  • CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issue was fixed:

  • netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
References

Affected packages

SUSE:Linux Enterprise Micro 5.5 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150500.13.167.2

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-devel-rt":  "5.14.21-150500.13.167.2",
            "kernel-rt":  "5.14.21-150500.13.167.2",
            "kernel-source-rt":  "5.14.21-150500.13.167.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4938-1.json"

SUSE:Linux Enterprise Micro 5.5 / kernel-source-rt

Package

Name
kernel-source-rt
Purl
pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150500.13.167.2

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-devel-rt":  "5.14.21-150500.13.167.2",
            "kernel-rt":  "5.14.21-150500.13.167.2",
            "kernel-source-rt":  "5.14.21-150500.13.167.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4938-1.json"