SUSE-SU-2026:4969-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20264969-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4969-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:4969-1
- Upstream
- Related
- Published
- 2026-10-31T17:04:46Z
- Modified
- 2026-11-02T12:15:05Z
- Summary
- Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
- Details
-
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues:
The following security issues were fixed:
- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766).
- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272521).
- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272874).
- CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712).
- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277679).
- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693).
- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277399).
- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280760).
- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280728).
- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280285).
- CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20264969-1/
- https://bugzilla.suse.com/1269766
- https://bugzilla.suse.com/1272521
- https://bugzilla.suse.com/1272874
- https://bugzilla.suse.com/1274712
- https://bugzilla.suse.com/1277399
- https://bugzilla.suse.com/1277679
- https://bugzilla.suse.com/1280285
- https://bugzilla.suse.com/1280693
- https://bugzilla.suse.com/1280728
- https://bugzilla.suse.com/1280760
- https://bugzilla.suse.com/1285686
- https://www.suse.com/security/cve/CVE-2026-53016
- https://www.suse.com/security/cve/CVE-2026-63968
- https://www.suse.com/security/cve/CVE-2026-64217
- https://www.suse.com/security/cve/CVE-2026-68426
- https://www.suse.com/security/cve/CVE-2026-72262
- https://www.suse.com/security/cve/CVE-2026-74469
- https://www.suse.com/security/cve/CVE-2026-74669
- https://www.suse.com/security/cve/CVE-2026-89544
- https://www.suse.com/security/cve/CVE-2026-89551
- https://www.suse.com/security/cve/CVE-2026-89674
- https://www.suse.com/security/cve/CVE-2026-98432
Affected packages
SUSE:Linux Enterprise Live Patching 15 SP7 / kernel-livepatch-SLE15-SP7-RT_Update_6
Package
- Name
- kernel-livepatch-SLE15-SP7-RT_Update_6
- Purl
- pkg:rpm/suse/kernel-livepatch-SLE15-SP7-RT_Update_6&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP7