SUSE-SU-2026:4892-1: important: Security update for the Linux Kernel
SLE-SECURITY-UPDATES
null at suse.de
Fri Oct 23 16:31:25 UTC 2026
# Security update for the Linux Kernel
Announcement ID: SUSE-SU-2026:4892-1
Release Date: 2026-10-23T10:48:19Z
Rating: important
References:
* bsc#1252519
* bsc#1255531
* bsc#1255995
* bsc#1256076
* bsc#1264851
* bsc#1272670
* bsc#1273040
* bsc#1273288
* bsc#1273290
* bsc#1273599
* bsc#1273764
* bsc#1274497
* bsc#1274653
* bsc#1274853
* bsc#1275080
* bsc#1275564
* bsc#1275644
* bsc#1275659
* bsc#1275964
* bsc#1276273
* bsc#1276387
* bsc#1276791
* bsc#1276844
* bsc#1276951
* bsc#1277310
* bsc#1277614
* bsc#1277821
* bsc#1277889
* bsc#1277894
* bsc#1278313
* bsc#1280259
* bsc#1280387
* bsc#1280966
* bsc#1281058
* bsc#1281280
* bsc#1281771
* bsc#1281819
* bsc#1282744
* bsc#1282755
* bsc#1282762
* bsc#1282770
* bsc#1282784
* bsc#1282808
* bsc#1283142
* bsc#1283823
* bsc#1283835
* bsc#1283979
* bsc#1284288
* bsc#1284289
* bsc#1284291
* bsc#1284295
* bsc#1284581
* bsc#1284606
* bsc#1284746
* bsc#1284791
* bsc#1285684
Cross-References:
* CVE-2022-50578
* CVE-2023-54158
* CVE-2023-54180
* CVE-2025-68358
* CVE-2026-43299
* CVE-2026-63948
* CVE-2026-63983
* CVE-2026-64012
* CVE-2026-64280
* CVE-2026-64422
* CVE-2026-64456
* CVE-2026-64593
* CVE-2026-68106
* CVE-2026-68233
* CVE-2026-68236
* CVE-2026-68303
* CVE-2026-68323
* CVE-2026-68430
* CVE-2026-72015
* CVE-2026-72236
* CVE-2026-72319
* CVE-2026-72476
* CVE-2026-72493
* CVE-2026-74408
* CVE-2026-74544
* CVE-2026-74578
* CVE-2026-74583
* CVE-2026-74587
* CVE-2026-74653
* CVE-2026-74675
* CVE-2026-80977
* CVE-2026-89542
* CVE-2026-89726
* CVE-2026-89778
* CVE-2026-89987
* CVE-2026-90011
* CVE-2026-90283
* CVE-2026-93252
* CVE-2026-93287
* CVE-2026-93800
* CVE-2026-93820
* CVE-2026-93822
* CVE-2026-97416
* CVE-2026-97491
* CVE-2026-98010
* CVE-2026-98077
* CVE-2026-98130
* CVE-2026-98252
* CVE-2026-98269
* CVE-2026-98347
* CVE-2026-98354
* CVE-2026-98357
* CVE-2026-98358
* CVE-2026-98359
* CVE-2026-98365
* CVE-2026-99999
CVSS scores:
* CVE-2022-50578 ( SUSE ): 5.7
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2022-50578 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2023-54158 ( SUSE ): 5.7
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2023-54158 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2023-54180 ( SUSE ): 4.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2023-54180 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2025-68358 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43299 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-63948 ( SUSE ): 2.3
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-63948 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-63983 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-64012 ( SUSE ): 6.7
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-64456 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-64456 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-64593 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-64593 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-68106 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-68106 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-68106 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-68233 ( SUSE ): 5.8
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
* CVE-2026-68236 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-68236 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-68236 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-68303 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-68430 ( SUSE ): 5.6
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-68430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-72015 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-72319 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-72476 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-74408 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-74408 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74544 ( SUSE ): 6.9
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
* CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
* CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-74675 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-74675 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-74675 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
* CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-89726 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-89987 ( SUSE ): 2.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-93252 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-93287 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-93287 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-93820 ( SUSE ): 7.1
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-93822 ( SUSE ): 7.1
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-97416 ( SUSE ): 5.7
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-98077 ( SUSE ): 8.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
* CVE-2026-98347 ( SUSE ): 5.7
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-98354 ( SUSE ): 5.7
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98358 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-98359 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98365 ( SUSE ): 5.8
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-99999 ( SUSE ): 9.3
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products:
* SUSE Linux Enterprise High Performance Computing 12 SP5
* SUSE Linux Enterprise Live Patching 12-SP5
* SUSE Linux Enterprise Server 12 SP5
* SUSE Linux Enterprise Server 12 SP5 LTSS
* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
* SUSE Linux Enterprise Server for SAP Applications 12 SP5
An update that solves 56 vulnerabilities can now be installed.
## Description:
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security
issues:
The following security issues were fixed:
* CVE-2023-54158: btrfs: don't free qgroup space unless specified
(bsc#1256076).
* CVE-2023-54180: btrfs: handle case when repair happens with dev-replace
(bsc#1255995).
* CVE-2025-68358: btrfs: fix racy bitfield write in
btrfs_clear_space_info_full() (bsc#1255531).
* CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside
btrfs_repair_io_failure() (bsc#1264851).
* CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout()
on !conn (bsc#1272670).
* CVE-2026-63983: net: Introduce skb tc depth field to track packet loops
(bsc#1273040).
* CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek
and qdisc_dequeue_peeked (bsc#1273764).
* CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in
afu_dma_map_region() (bsc#1273599).
* CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe
sizes (bsc#1273290).
* CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data()
(bsc#1273288).
* CVE-2026-64593: btrfs: do not trim a device which is not writeable
(bsc#1274497).
* CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions
(bsc#1274853).
* CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown
(bsc#1275644).
* CVE-2026-68236: drm/amd/display: set new_stream to NULL after release
(bsc#1275659).
* CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind
(bsc#1275080).
* CVE-2026-68323: tipc: serialize udp bearer replicast list updates
(bsc#1274653).
* CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273).
* CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to
free list (bsc#1276791).
* CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to
__hw_perf_event_init() (bsc#1277614).
* CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom
(bsc#1275964).
* CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844).
* CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog()
(bsc#1276951).
* CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID
(bsc#1276387).
* CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-
of-bounds (bsc#1277894).
* CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on
trees without ctx->state (bsc#1275564).
* CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter
(bsc#1277889).
* CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk
(bsc#1277821).
* CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on
LPC32xx (bsc#1277310).
* CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with
tty_port_tty_get (bsc#1278313).
* CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in
skb_tx_error() (bsc#1280259).
* CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
(bsc#1280387).
* CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()
(bsc#1281058).
* CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs
block (bsc#1280966).
* CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on
zap (bsc#1281819).
* CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login
payload (bsc#1281280).
* CVE-2026-90283: hugetlbfs: release subpool on fill_super failure
(bsc#1281771).
* CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784).
* CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common
path (bsc#1282744).
* CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in
insert_dirty_subvol() (bsc#1282808).
* CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock
(bsc#1282755).
* CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock
(bsc#1282762).
* CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in
btrfs_may_alloc_data_chunk() (bsc#1282770).
* CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown
(bsc#1283142).
* CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823).
* CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in
sip_skip_whitespace() (bsc#1283979).
* CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START
(bsc#1283835).
* CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
(bsc#1284581).
* CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole
punching and reflinking (bsc#1284606).
* CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush
(bsc#1284295).
* CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement
fails (bsc#1284291).
* CVE-2026-98357: IB/isert: wait for deferred control PDU completions before
releasing the connection (bsc#1284791).
* CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered
direction (bsc#1284289).
* CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
(bsc#1284746).
* CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading
to OOB access (bsc#1284288).
* CVE-2026-99999: ipv4: validate checksum_start before completing checksum
(bsc#1285684).
The following non security issues were fixed:
* kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.
* net: add inline function skb_csum_is_sctp (bsc#1285684).
* netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
* vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF
(git-fixes).
## Special Instructions and Notes:
* Please reboot the system after installing this update.
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Live Patching 12-SP5
zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4892
* SUSE Linux Enterprise Server 12 SP5 LTSS
zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4892
* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4892
## Package List:
* SUSE Linux Enterprise Live Patching 12-SP5 (nosrc)
* kernel-default-4.12.14-122.336.1
* SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64)
* kernel-default-debugsource-4.12.14-122.336.1
* kernel-default-kgraft-4.12.14-122.336.1
* kgraft-patch-4_12_14-122_336-default-1-8.3.1
* kernel-default-kgraft-devel-4.12.14-122.336.1
* kernel-default-debuginfo-4.12.14-122.336.1
* SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64)
* kernel-default-base-debuginfo-4.12.14-122.336.1
* kernel-default-debugsource-4.12.14-122.336.1
* ocfs2-kmp-default-debuginfo-4.12.14-122.336.1
* kernel-syms-4.12.14-122.336.1
* cluster-md-kmp-default-debuginfo-4.12.14-122.336.1
* cluster-md-kmp-default-4.12.14-122.336.1
* gfs2-kmp-default-debuginfo-4.12.14-122.336.1
* kernel-default-base-4.12.14-122.336.1
* dlm-kmp-default-debuginfo-4.12.14-122.336.1
* ocfs2-kmp-default-4.12.14-122.336.1
* gfs2-kmp-default-4.12.14-122.336.1
* kernel-default-devel-4.12.14-122.336.1
* dlm-kmp-default-4.12.14-122.336.1
* kernel-default-debuginfo-4.12.14-122.336.1
* SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 nosrc ppc64le s390x
x86_64)
* kernel-default-4.12.14-122.336.1
* SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64)
* kernel-default-devel-debuginfo-4.12.14-122.336.1
* SUSE Linux Enterprise Server 12 SP5 LTSS (noarch)
* kernel-source-4.12.14-122.336.1
* kernel-macros-4.12.14-122.336.1
* kernel-devel-4.12.14-122.336.1
* SUSE Linux Enterprise Server 12 SP5 LTSS (s390x)
* kernel-default-man-4.12.14-122.336.1
* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64)
* kernel-default-base-debuginfo-4.12.14-122.336.1
* kernel-default-devel-debuginfo-4.12.14-122.336.1
* kernel-default-debugsource-4.12.14-122.336.1
* ocfs2-kmp-default-debuginfo-4.12.14-122.336.1
* kernel-syms-4.12.14-122.336.1
* cluster-md-kmp-default-debuginfo-4.12.14-122.336.1
* cluster-md-kmp-default-4.12.14-122.336.1
* gfs2-kmp-default-debuginfo-4.12.14-122.336.1
* kernel-default-base-4.12.14-122.336.1
* dlm-kmp-default-debuginfo-4.12.14-122.336.1
* ocfs2-kmp-default-4.12.14-122.336.1
* gfs2-kmp-default-4.12.14-122.336.1
* kernel-default-devel-4.12.14-122.336.1
* dlm-kmp-default-4.12.14-122.336.1
* kernel-default-debuginfo-4.12.14-122.336.1
* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (nosrc x86_64)
* kernel-default-4.12.14-122.336.1
* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch)
* kernel-source-4.12.14-122.336.1
* kernel-macros-4.12.14-122.336.1
* kernel-devel-4.12.14-122.336.1
## References:
* https://www.suse.com/security/cve/CVE-2022-50578.html
* https://www.suse.com/security/cve/CVE-2023-54158.html
* https://www.suse.com/security/cve/CVE-2023-54180.html
* https://www.suse.com/security/cve/CVE-2025-68358.html
* https://www.suse.com/security/cve/CVE-2026-43299.html
* https://www.suse.com/security/cve/CVE-2026-63948.html
* https://www.suse.com/security/cve/CVE-2026-63983.html
* https://www.suse.com/security/cve/CVE-2026-64012.html
* https://www.suse.com/security/cve/CVE-2026-64280.html
* https://www.suse.com/security/cve/CVE-2026-64422.html
* https://www.suse.com/security/cve/CVE-2026-64456.html
* https://www.suse.com/security/cve/CVE-2026-64593.html
* https://www.suse.com/security/cve/CVE-2026-68106.html
* https://www.suse.com/security/cve/CVE-2026-68233.html
* https://www.suse.com/security/cve/CVE-2026-68236.html
* https://www.suse.com/security/cve/CVE-2026-68303.html
* https://www.suse.com/security/cve/CVE-2026-68323.html
* https://www.suse.com/security/cve/CVE-2026-68430.html
* https://www.suse.com/security/cve/CVE-2026-72015.html
* https://www.suse.com/security/cve/CVE-2026-72236.html
* https://www.suse.com/security/cve/CVE-2026-72319.html
* https://www.suse.com/security/cve/CVE-2026-72476.html
* https://www.suse.com/security/cve/CVE-2026-72493.html
* https://www.suse.com/security/cve/CVE-2026-74408.html
* https://www.suse.com/security/cve/CVE-2026-74544.html
* https://www.suse.com/security/cve/CVE-2026-74578.html
* https://www.suse.com/security/cve/CVE-2026-74583.html
* https://www.suse.com/security/cve/CVE-2026-74587.html
* https://www.suse.com/security/cve/CVE-2026-74653.html
* https://www.suse.com/security/cve/CVE-2026-74675.html
* https://www.suse.com/security/cve/CVE-2026-80977.html
* https://www.suse.com/security/cve/CVE-2026-89542.html
* https://www.suse.com/security/cve/CVE-2026-89726.html
* https://www.suse.com/security/cve/CVE-2026-89778.html
* https://www.suse.com/security/cve/CVE-2026-89987.html
* https://www.suse.com/security/cve/CVE-2026-90011.html
* https://www.suse.com/security/cve/CVE-2026-90283.html
* https://www.suse.com/security/cve/CVE-2026-93252.html
* https://www.suse.com/security/cve/CVE-2026-93287.html
* https://www.suse.com/security/cve/CVE-2026-93800.html
* https://www.suse.com/security/cve/CVE-2026-93820.html
* https://www.suse.com/security/cve/CVE-2026-93822.html
* https://www.suse.com/security/cve/CVE-2026-97416.html
* https://www.suse.com/security/cve/CVE-2026-97491.html
* https://www.suse.com/security/cve/CVE-2026-98010.html
* https://www.suse.com/security/cve/CVE-2026-98077.html
* https://www.suse.com/security/cve/CVE-2026-98130.html
* https://www.suse.com/security/cve/CVE-2026-98252.html
* https://www.suse.com/security/cve/CVE-2026-98269.html
* https://www.suse.com/security/cve/CVE-2026-98347.html
* https://www.suse.com/security/cve/CVE-2026-98354.html
* https://www.suse.com/security/cve/CVE-2026-98357.html
* https://www.suse.com/security/cve/CVE-2026-98358.html
* https://www.suse.com/security/cve/CVE-2026-98359.html
* https://www.suse.com/security/cve/CVE-2026-98365.html
* https://www.suse.com/security/cve/CVE-2026-99999.html
* https://bugzilla.suse.com/show_bug.cgi?id=1252519
* https://bugzilla.suse.com/show_bug.cgi?id=1255531
* https://bugzilla.suse.com/show_bug.cgi?id=1255995
* https://bugzilla.suse.com/show_bug.cgi?id=1256076
* https://bugzilla.suse.com/show_bug.cgi?id=1264851
* https://bugzilla.suse.com/show_bug.cgi?id=1272670
* https://bugzilla.suse.com/show_bug.cgi?id=1273040
* https://bugzilla.suse.com/show_bug.cgi?id=1273288
* https://bugzilla.suse.com/show_bug.cgi?id=1273290
* https://bugzilla.suse.com/show_bug.cgi?id=1273599
* https://bugzilla.suse.com/show_bug.cgi?id=1273764
* https://bugzilla.suse.com/show_bug.cgi?id=1274497
* https://bugzilla.suse.com/show_bug.cgi?id=1274653
* https://bugzilla.suse.com/show_bug.cgi?id=1274853
* https://bugzilla.suse.com/show_bug.cgi?id=1275080
* https://bugzilla.suse.com/show_bug.cgi?id=1275564
* https://bugzilla.suse.com/show_bug.cgi?id=1275644
* https://bugzilla.suse.com/show_bug.cgi?id=1275659
* https://bugzilla.suse.com/show_bug.cgi?id=1275964
* https://bugzilla.suse.com/show_bug.cgi?id=1276273
* https://bugzilla.suse.com/show_bug.cgi?id=1276387
* https://bugzilla.suse.com/show_bug.cgi?id=1276791
* https://bugzilla.suse.com/show_bug.cgi?id=1276844
* https://bugzilla.suse.com/show_bug.cgi?id=1276951
* https://bugzilla.suse.com/show_bug.cgi?id=1277310
* https://bugzilla.suse.com/show_bug.cgi?id=1277614
* https://bugzilla.suse.com/show_bug.cgi?id=1277821
* https://bugzilla.suse.com/show_bug.cgi?id=1277889
* https://bugzilla.suse.com/show_bug.cgi?id=1277894
* https://bugzilla.suse.com/show_bug.cgi?id=1278313
* https://bugzilla.suse.com/show_bug.cgi?id=1280259
* https://bugzilla.suse.com/show_bug.cgi?id=1280387
* https://bugzilla.suse.com/show_bug.cgi?id=1280966
* https://bugzilla.suse.com/show_bug.cgi?id=1281058
* https://bugzilla.suse.com/show_bug.cgi?id=1281280
* https://bugzilla.suse.com/show_bug.cgi?id=1281771
* https://bugzilla.suse.com/show_bug.cgi?id=1281819
* https://bugzilla.suse.com/show_bug.cgi?id=1282744
* https://bugzilla.suse.com/show_bug.cgi?id=1282755
* https://bugzilla.suse.com/show_bug.cgi?id=1282762
* https://bugzilla.suse.com/show_bug.cgi?id=1282770
* https://bugzilla.suse.com/show_bug.cgi?id=1282784
* https://bugzilla.suse.com/show_bug.cgi?id=1282808
* https://bugzilla.suse.com/show_bug.cgi?id=1283142
* https://bugzilla.suse.com/show_bug.cgi?id=1283823
* https://bugzilla.suse.com/show_bug.cgi?id=1283835
* https://bugzilla.suse.com/show_bug.cgi?id=1283979
* https://bugzilla.suse.com/show_bug.cgi?id=1284288
* https://bugzilla.suse.com/show_bug.cgi?id=1284289
* https://bugzilla.suse.com/show_bug.cgi?id=1284291
* https://bugzilla.suse.com/show_bug.cgi?id=1284295
* https://bugzilla.suse.com/show_bug.cgi?id=1284581
* https://bugzilla.suse.com/show_bug.cgi?id=1284606
* https://bugzilla.suse.com/show_bug.cgi?id=1284746
* https://bugzilla.suse.com/show_bug.cgi?id=1284791
* https://bugzilla.suse.com/show_bug.cgi?id=1285684
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20261023/0ef5f02a/attachment.htm>
More information about the sle-security-updates
mailing list