SUSE-SU-2026:4639-1: important: Security update for the Linux Kernel
SLE-SECURITY-UPDATES
null at suse.de
Tue Oct 13 16:42:07 UTC 2026
# Security update for the Linux Kernel
Announcement ID: SUSE-SU-2026:4639-1
Release Date: 2026-10-13T11:51:50Z
Rating: important
References:
* bsc#1273290
* bsc#1274037
* bsc#1274836
* bsc#1275535
* bsc#1275696
* bsc#1275972
* bsc#1275985
* bsc#1276007
* bsc#1276381
* bsc#1277493
* bsc#1277766
* bsc#1277908
* bsc#1278191
* bsc#1278253
* bsc#1278310
* bsc#1278315
* bsc#1279619
* bsc#1280786
* bsc#1281397
* bsc#1281546
* jsc#PED-16892
* jsc#PED-17000
Cross-References:
* CVE-2026-64422
* CVE-2026-64580
* CVE-2026-68376
* CVE-2026-72083
* CVE-2026-72322
* CVE-2026-72323
* CVE-2026-72348
* CVE-2026-72398
* CVE-2026-74388
* CVE-2026-74556
* CVE-2026-74588
* CVE-2026-74597
* CVE-2026-74630
* CVE-2026-74641
* CVE-2026-74743
* CVE-2026-74752
* CVE-2026-80785
* CVE-2026-89479
* CVE-2026-90088
* CVE-2026-90104
CVSS scores:
* CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-64580 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-68376 ( SUSE ): 9.2
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72083 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-72083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72083 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72322 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72323 ( SUSE ): 8.4
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
* CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-72398 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74388 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74556 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
* CVE-2026-74556 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74588 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74597 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74641 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-74641 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74641 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74743 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74752 ( SUSE ): 9.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-80785 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-89479 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-90104 ( SUSE ): 8.8
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
* CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* SUSE Linux Enterprise Server 11 SP4
* SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
An update that solves 20 vulnerabilities and contains two features can now be
installed.
## Description:
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security
issues:
The following security issues were fixed:
* CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe
sizes (bsc#1273290).
* CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in
xfrm6_fill_dst() (bsc#1274037).
* CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836).
* CVE-2026-72083: target: fix double unmap data sg in
core_scsi3_emulate_pro_register_and_move() (bsc#1275535).
* CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work
(bsc#1275972).
* CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
(bsc#1275985).
* CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers
for hotdrop (bsc#1276007).
* CVE-2026-72398: sctp: add INIT verification after cookie unpacking
(bsc#1276381).
* CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded
SysEx data (bsc#1278253).
* CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the
connection buffer (bsc#1275696).
* CVE-2026-74588: sctp: keep chunk->transport in step with the list it is
queued on (bsc#1277766).
* CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493).
* CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev
(bsc#1278191).
* CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset
(bsc#1278310).
* CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from
lowerdev (bsc#1277908).
* CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).
* CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info()
(bsc#1279619).
* CVE-2026-89479: sctp: stop processing a packet once its association is
deleted (bsc#1280786).
* CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to
prevent infinite loop (bsc#1281397).
* CVE-2026-90104: NFSv4.1: zero referring call lists before decoding
(bsc#1281546).
The following non security issue was fixed:
* Disable BATMAN in supported.conf
* Disable CONFIG_BATMAN_ADV (jsc#PED-16892)
* Disable CONFIG_CAN (jsc#PED-17000)
## Special Instructions and Notes:
* Please reboot the system after installing this update.
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4639
* SUSE Linux Enterprise Server 11 SP4
zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4639
## Package List:
* SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (nosrc x86_64)
* kernel-xen-3.0.101-108.223.1
* kernel-ec2-3.0.101-108.223.1
* kernel-default-3.0.101-108.223.1
* kernel-trace-3.0.101-108.223.1
* SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (x86_64)
* kernel-xen-base-3.0.101-108.223.1
* kernel-default-debugsource-3.0.101-108.223.1
* kernel-xen-devel-debuginfo-3.0.101-108.223.1
* kernel-xen-debuginfo-3.0.101-108.223.1
* kernel-default-devel-3.0.101-108.223.1
* kernel-trace-devel-debuginfo-3.0.101-108.223.1
* kernel-default-debuginfo-3.0.101-108.223.1
* kernel-syms-3.0.101-108.223.1
* kernel-trace-debugsource-3.0.101-108.223.1
* kernel-ec2-devel-3.0.101-108.223.1
* kernel-trace-base-3.0.101-108.223.1
* kernel-default-base-3.0.101-108.223.1
* kernel-default-devel-debuginfo-3.0.101-108.223.1
* kernel-ec2-debugsource-3.0.101-108.223.1
* kernel-ec2-debuginfo-3.0.101-108.223.1
* kernel-trace-debuginfo-3.0.101-108.223.1
* kernel-source-3.0.101-108.223.1
* kernel-xen-debugsource-3.0.101-108.223.1
* kernel-trace-devel-3.0.101-108.223.1
* kernel-ec2-devel-debuginfo-3.0.101-108.223.1
* kernel-ec2-base-3.0.101-108.223.1
* kernel-xen-devel-3.0.101-108.223.1
* SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (noarch nosrc)
* kernel-docs-3.0.101-108.223.1
* SUSE Linux Enterprise Server 11 SP4 (nosrc x86_64)
* kernel-xen-3.0.101-108.223.1
* kernel-ec2-3.0.101-108.223.1
* kernel-default-3.0.101-108.223.1
* kernel-trace-3.0.101-108.223.1
* SUSE Linux Enterprise Server 11 SP4 (x86_64)
* kernel-xen-base-3.0.101-108.223.1
* kernel-default-debugsource-3.0.101-108.223.1
* kernel-xen-devel-debuginfo-3.0.101-108.223.1
* kernel-xen-debuginfo-3.0.101-108.223.1
* kernel-default-devel-3.0.101-108.223.1
* kernel-trace-devel-debuginfo-3.0.101-108.223.1
* kernel-default-debuginfo-3.0.101-108.223.1
* kernel-syms-3.0.101-108.223.1
* kernel-trace-debugsource-3.0.101-108.223.1
* kernel-ec2-devel-3.0.101-108.223.1
* kernel-trace-base-3.0.101-108.223.1
* kernel-default-base-3.0.101-108.223.1
* kernel-default-devel-debuginfo-3.0.101-108.223.1
* kernel-ec2-debugsource-3.0.101-108.223.1
* kernel-ec2-debuginfo-3.0.101-108.223.1
* kernel-trace-debuginfo-3.0.101-108.223.1
* kernel-source-3.0.101-108.223.1
* kernel-xen-debugsource-3.0.101-108.223.1
* kernel-trace-devel-3.0.101-108.223.1
* kernel-ec2-devel-debuginfo-3.0.101-108.223.1
* kernel-ec2-base-3.0.101-108.223.1
* kernel-xen-devel-3.0.101-108.223.1
* SUSE Linux Enterprise Server 11 SP4 (noarch nosrc)
* kernel-docs-3.0.101-108.223.1
## References:
* https://www.suse.com/security/cve/CVE-2026-64422.html
* https://www.suse.com/security/cve/CVE-2026-64580.html
* https://www.suse.com/security/cve/CVE-2026-68376.html
* https://www.suse.com/security/cve/CVE-2026-72083.html
* https://www.suse.com/security/cve/CVE-2026-72322.html
* https://www.suse.com/security/cve/CVE-2026-72323.html
* https://www.suse.com/security/cve/CVE-2026-72348.html
* https://www.suse.com/security/cve/CVE-2026-72398.html
* https://www.suse.com/security/cve/CVE-2026-74388.html
* https://www.suse.com/security/cve/CVE-2026-74556.html
* https://www.suse.com/security/cve/CVE-2026-74588.html
* https://www.suse.com/security/cve/CVE-2026-74597.html
* https://www.suse.com/security/cve/CVE-2026-74630.html
* https://www.suse.com/security/cve/CVE-2026-74641.html
* https://www.suse.com/security/cve/CVE-2026-74743.html
* https://www.suse.com/security/cve/CVE-2026-74752.html
* https://www.suse.com/security/cve/CVE-2026-80785.html
* https://www.suse.com/security/cve/CVE-2026-89479.html
* https://www.suse.com/security/cve/CVE-2026-90088.html
* https://www.suse.com/security/cve/CVE-2026-90104.html
* https://bugzilla.suse.com/show_bug.cgi?id=1273290
* https://bugzilla.suse.com/show_bug.cgi?id=1274037
* https://bugzilla.suse.com/show_bug.cgi?id=1274836
* https://bugzilla.suse.com/show_bug.cgi?id=1275535
* https://bugzilla.suse.com/show_bug.cgi?id=1275696
* https://bugzilla.suse.com/show_bug.cgi?id=1275972
* https://bugzilla.suse.com/show_bug.cgi?id=1275985
* https://bugzilla.suse.com/show_bug.cgi?id=1276007
* https://bugzilla.suse.com/show_bug.cgi?id=1276381
* https://bugzilla.suse.com/show_bug.cgi?id=1277493
* https://bugzilla.suse.com/show_bug.cgi?id=1277766
* https://bugzilla.suse.com/show_bug.cgi?id=1277908
* https://bugzilla.suse.com/show_bug.cgi?id=1278191
* https://bugzilla.suse.com/show_bug.cgi?id=1278253
* https://bugzilla.suse.com/show_bug.cgi?id=1278310
* https://bugzilla.suse.com/show_bug.cgi?id=1278315
* https://bugzilla.suse.com/show_bug.cgi?id=1279619
* https://bugzilla.suse.com/show_bug.cgi?id=1280786
* https://bugzilla.suse.com/show_bug.cgi?id=1281397
* https://bugzilla.suse.com/show_bug.cgi?id=1281546
* https://jira.suse.com/browse/PED-16892
* https://jira.suse.com/browse/PED-17000
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20261013/1f4e9e92/attachment.htm>
More information about the sle-security-updates
mailing list