SUSE-IU-2026:8416-1: Security update of suse/sle-micro/base-5.5

Fri Oct 30 08:09:12 UTC 2026

SUSE Image Update Advisory: suse/sle-micro/base-5.5
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:8416-1
Image Tags        : suse/sle-micro/base-5.5:2.0.4 , suse/sle-micro/base-5.5:2.0.4-5.8.331 , suse/sle-micro/base-5.5:latest
Image Release     : 5.8.331
Severity          : important
Type              : security
References        : 1275510 1275564 1276951 1277357 1277599 1277742 1277821 1280251
                        1280259 1280387 1280743 1281280 1281397 1283835 1283851 1283894
                        1283946 1283963 1284064 1284408 1284518 1284713 1284746 1284790
                        1284791 1285684 1285685 CVE-2026-72041 CVE-2026-72110 CVE-2026-72301
                        CVE-2026-72493 CVE-2026-74578 CVE-2026-74587 CVE-2026-74624 CVE-2026-80977
                        CVE-2026-89528 CVE-2026-89542 CVE-2026-89669 CVE-2026-90011 CVE-2026-90088
                        CVE-2026-97555 CVE-2026-97564 CVE-2026-98015 CVE-2026-98016 CVE-2026-98041
                        CVE-2026-98130 CVE-2026-98248 CVE-2026-98253 CVE-2026-98260 CVE-2026-98323
                        CVE-2026-98357 CVE-2026-98359 CVE-2026-98432 CVE-2026-99999 
-----------------------------------------------------------------

The container suse/sle-micro/base-5.5 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4936-1
Released:    Thu Oct 29 12:32:41 2026
Summary:     Security update for the Linux Kernel
Type:        security
Severity:    important
References:  1275510,1275564,1276951,1277357,1277599,1277742,1277821,1280251,1280259,1280387,1280743,1281280,1281397,1283835,1283851,1283894,1283946,1283963,1284064,1284408,1284518,1284713,1284746,1284790,1284791,1285684,1285685,CVE-2026-72041,CVE-2026-72110,CVE-2026-72301,CVE-2026-72493,CVE-2026-74578,CVE-2026-74587,CVE-2026-74624,CVE-2026-80977,CVE-2026-89528,CVE-2026-89542,CVE-2026-89669,CVE-2026-90011,CVE-2026-90088,CVE-2026-97555,CVE-2026-97564,CVE-2026-98015,CVE-2026-98016,CVE-2026-98041,CVE-2026-98130,CVE-2026-98248,CVE-2026-98253,CVE-2026-98260,CVE-2026-98323,CVE-2026-98357,CVE-2026-98359,CVE-2026-98432,CVE-2026-99999

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

- CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
- CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
- CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
- CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
- CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
- CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
- CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
- CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
- CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
- CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
- CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
- CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
- CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
- CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
- CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
- CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
- CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
- CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
- CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
- CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
- CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
- CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
- CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
- CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
- CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.
- netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

The following package changes have been done:

- kernel-default-5.14.21-150500.55.195.1 updated