SUSE-CU-2026:5824-1: Security update of suse/sle-micro-rancher/5.4

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sle-micro-rancher/5.4
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:5824-1
Container Tags        : suse/sle-micro-rancher/5.4:5.4.4.5.127 , suse/sle-micro-rancher/5.4:latest
Container Release     : 4.5.127
Severity              : important
Type                  : security
References            : 1261700 1263790 1263995 1264093 1264551 1266001 1266009 1266238
                        1266711 1266901 1266969 1267205 1267220 CVE-2026-31405 CVE-2026-31629
                        CVE-2026-31758 CVE-2026-43037 CVE-2026-43206 CVE-2026-43499 CVE-2026-43501
                        CVE-2026-45852 CVE-2026-45970 CVE-2026-46021 CVE-2026-46043 CVE-2026-46113
                        CVE-2026-46243 
-----------------------------------------------------------------

The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:2382-1
Released:    Fri Jun 12 10:07:34 2026
Summary:     Recommended update for hwdata
Type:        recommended
Severity:    moderate
References:  
This update for hwdata fixes the following issues:

- update to version 0.406:
    * Update pci and vendor ids
- update to version 0.405:
    * Update pci and vendor ids
- Update to version 0.397:
    * Update pci and vendor ids
- Update to version 0.395:
    * Update pci and vendor ids

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:2383-1
Released:    Fri Jun 12 11:14:06 2026
Summary:     Security update for the Linux Kernel
Type:        security
Severity:    important
References:  1261700,1263790,1263995,1264093,1264551,1266001,1266009,1266238,1266711,1266901,1266969,1267205,1267220,CVE-2026-31405,CVE-2026-31629,CVE-2026-31758,CVE-2026-43037,CVE-2026-43206,CVE-2026-43499,CVE-2026-43501,CVE-2026-45852,CVE-2026-45970,CVE-2026-46021,CVE-2026-46043,CVE-2026-46113,CVE-2026-46243

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

- CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700).
- CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
- CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
- CVE-2026-43037: ip6_tunnel: clear skb2->cb in ip4ip6_err() (bsc#1263995).
- CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1264551).
- CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
- CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266009).
- CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711).
- CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267205).
- CVE-2026-46021: thermal: core: Fix thermal zone governor cleanup issues (bsc#1267220).
- CVE-2026-46043: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (bsc#1266901).
- CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266969).
- CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (bsc#1266238).

The following non security issues were fixed:

- arm64: tlb: Allow XZR argument to TLBI ops (git-fixes).
- arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (git-fixes).


The following package changes have been done:

- hwdata-0.406-150000.3.80.1 updated
- kernel-default-5.14.21-150400.24.222.1 updated