SUSE-SU-2026:4938-1: important: Security update for the Linux Kernel
SLE-SECURITY-UPDATES
null at suse.de
Thu Oct 29 20:34:28 UTC 2026
# Security update for the Linux Kernel
Announcement ID: SUSE-SU-2026:4938-1
Release Date: 2026-10-29T13:39:41Z
Rating: important
References:
* bsc#1275510
* bsc#1275564
* bsc#1276951
* bsc#1277357
* bsc#1277599
* bsc#1277742
* bsc#1277821
* bsc#1280251
* bsc#1280259
* bsc#1280387
* bsc#1280743
* bsc#1281280
* bsc#1281397
* bsc#1283835
* bsc#1283851
* bsc#1283894
* bsc#1283946
* bsc#1283963
* bsc#1284064
* bsc#1284408
* bsc#1284518
* bsc#1284713
* bsc#1284746
* bsc#1284790
* bsc#1284791
* bsc#1285684
* bsc#1285685
Cross-References:
* CVE-2026-72041
* CVE-2026-72110
* CVE-2026-72301
* CVE-2026-72493
* CVE-2026-74578
* CVE-2026-74587
* CVE-2026-74624
* CVE-2026-80977
* CVE-2026-89528
* CVE-2026-89542
* CVE-2026-89669
* CVE-2026-90011
* CVE-2026-90088
* CVE-2026-97555
* CVE-2026-97564
* CVE-2026-98015
* CVE-2026-98016
* CVE-2026-98041
* CVE-2026-98130
* CVE-2026-98248
* CVE-2026-98253
* CVE-2026-98260
* CVE-2026-98323
* CVE-2026-98357
* CVE-2026-98359
* CVE-2026-98432
* CVE-2026-99999
CVSS scores:
* CVE-2026-72041 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72110 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
* CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
* CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
* CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-97555 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
* CVE-2026-97564 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98015 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98016 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98248 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98260 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98323 ( SUSE ): 9.2
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98359 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98432 ( SUSE ): 9.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-99999 ( SUSE ): 9.3
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.5
* SUSE Linux Enterprise Micro 5.5
An update that solves 27 vulnerabilities can now be installed.
## Description:
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security
issues:
The following security issues were fixed:
* CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send
(bsc#1275510).
* CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it
(bsc#1277357).
* CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and
bytes_get (bsc#1277742).
* CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog()
(bsc#1276951).
* CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on
trees without ctx->state (bsc#1275564).
* CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk
(bsc#1277821).
* CVE-2026-74624: netfilter: conntrack: work around exceeded receive window
(bsc#1277599).
* CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in
skb_tx_error() (bsc#1280259).
* CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget
(bsc#1280743).
* CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
(bsc#1280387).
* CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state
(bsc#1280251).
* CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login
payload (bsc#1281280).
* CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to
prevent infinite loop (bsc#1281397).
* CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite
(bsc#1283851).
* CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions
(bsc#1283946).
* CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in
mlx5_eswitch_termtbl_put (bsc#1283963).
* CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put()
(bsc#1283894).
* CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons
(bsc#1284064).
* CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START
(bsc#1283835).
* CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU
atomic operations (bsc#1284518).
* CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure
(bsc#1284790).
* CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread()
(bsc#1284408).
* CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining
length (bsc#1284713).
* CVE-2026-98357: IB/isert: wait for deferred control PDU completions before
releasing the connection (bsc#1284791).
* CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
(bsc#1284746).
* CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period
(bsc#1285685).
* CVE-2026-99999: ipv4: validate checksum_start before completing checksum
(bsc#1285684).
The following non security issue was fixed:
* netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
## Special Instructions and Notes:
* Please reboot the system after installing this update.
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.5
zypper in -t patch SUSE-2026-4938
* SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2026-4938
## Package List:
* openSUSE Leap 15.5 (x86_64)
* kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.167.2
* kernel-rt_debug-devel-5.14.21-150500.13.167.2
* gfs2-kmp-rt-debuginfo-5.14.21-150500.13.167.2
* cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.167.2
* cluster-md-kmp-rt-5.14.21-150500.13.167.2
* kernel-syms-rt-5.14.21-150500.13.167.1
* kernel-rt-devel-5.14.21-150500.13.167.2
* kselftests-kmp-rt-5.14.21-150500.13.167.2
* reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.167.2
* reiserfs-kmp-rt-5.14.21-150500.13.167.2
* dlm-kmp-rt-debuginfo-5.14.21-150500.13.167.2
* kernel-rt-debugsource-5.14.21-150500.13.167.2
* kernel-rt-livepatch-devel-5.14.21-150500.13.167.2
* kernel-rt-vdso-5.14.21-150500.13.167.2
* kernel-rt-optional-debuginfo-5.14.21-150500.13.167.2
* kernel-rt-devel-debuginfo-5.14.21-150500.13.167.2
* dlm-kmp-rt-5.14.21-150500.13.167.2
* kernel-rt-extra-5.14.21-150500.13.167.2
* kernel-rt-livepatch-5.14.21-150500.13.167.2
* kernel-rt_debug-debugsource-5.14.21-150500.13.167.2
* kernel-rt-vdso-debuginfo-5.14.21-150500.13.167.2
* kernel-rt_debug-vdso-5.14.21-150500.13.167.2
* kernel-rt-debuginfo-5.14.21-150500.13.167.2
* kernel-rt-extra-debuginfo-5.14.21-150500.13.167.2
* kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.167.2
* ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.167.2
* gfs2-kmp-rt-5.14.21-150500.13.167.2
* kselftests-kmp-rt-debuginfo-5.14.21-150500.13.167.2
* ocfs2-kmp-rt-5.14.21-150500.13.167.2
* kernel-rt-optional-5.14.21-150500.13.167.2
* kernel-rt_debug-debuginfo-5.14.21-150500.13.167.2
* openSUSE Leap 15.5 (noarch)
* kernel-devel-rt-5.14.21-150500.13.167.2
* kernel-source-rt-5.14.21-150500.13.167.2
* openSUSE Leap 15.5 (nosrc x86_64)
* kernel-rt-5.14.21-150500.13.167.2
* kernel-rt_debug-5.14.21-150500.13.167.2
* SUSE Linux Enterprise Micro 5.5 (noarch)
* kernel-devel-rt-5.14.21-150500.13.167.2
* kernel-source-rt-5.14.21-150500.13.167.2
* SUSE Linux Enterprise Micro 5.5 (nosrc x86_64)
* kernel-rt-5.14.21-150500.13.167.2
* SUSE Linux Enterprise Micro 5.5 (x86_64)
* kernel-rt-debuginfo-5.14.21-150500.13.167.2
* kernel-rt-debugsource-5.14.21-150500.13.167.2
## References:
* https://www.suse.com/security/cve/CVE-2026-72041.html
* https://www.suse.com/security/cve/CVE-2026-72110.html
* https://www.suse.com/security/cve/CVE-2026-72301.html
* https://www.suse.com/security/cve/CVE-2026-72493.html
* https://www.suse.com/security/cve/CVE-2026-74578.html
* https://www.suse.com/security/cve/CVE-2026-74587.html
* https://www.suse.com/security/cve/CVE-2026-74624.html
* https://www.suse.com/security/cve/CVE-2026-80977.html
* https://www.suse.com/security/cve/CVE-2026-89528.html
* https://www.suse.com/security/cve/CVE-2026-89542.html
* https://www.suse.com/security/cve/CVE-2026-89669.html
* https://www.suse.com/security/cve/CVE-2026-90011.html
* https://www.suse.com/security/cve/CVE-2026-90088.html
* https://www.suse.com/security/cve/CVE-2026-97555.html
* https://www.suse.com/security/cve/CVE-2026-97564.html
* https://www.suse.com/security/cve/CVE-2026-98015.html
* https://www.suse.com/security/cve/CVE-2026-98016.html
* https://www.suse.com/security/cve/CVE-2026-98041.html
* https://www.suse.com/security/cve/CVE-2026-98130.html
* https://www.suse.com/security/cve/CVE-2026-98248.html
* https://www.suse.com/security/cve/CVE-2026-98253.html
* https://www.suse.com/security/cve/CVE-2026-98260.html
* https://www.suse.com/security/cve/CVE-2026-98323.html
* https://www.suse.com/security/cve/CVE-2026-98357.html
* https://www.suse.com/security/cve/CVE-2026-98359.html
* https://www.suse.com/security/cve/CVE-2026-98432.html
* https://www.suse.com/security/cve/CVE-2026-99999.html
* https://bugzilla.suse.com/show_bug.cgi?id=1275510
* https://bugzilla.suse.com/show_bug.cgi?id=1275564
* https://bugzilla.suse.com/show_bug.cgi?id=1276951
* https://bugzilla.suse.com/show_bug.cgi?id=1277357
* https://bugzilla.suse.com/show_bug.cgi?id=1277599
* https://bugzilla.suse.com/show_bug.cgi?id=1277742
* https://bugzilla.suse.com/show_bug.cgi?id=1277821
* https://bugzilla.suse.com/show_bug.cgi?id=1280251
* https://bugzilla.suse.com/show_bug.cgi?id=1280259
* https://bugzilla.suse.com/show_bug.cgi?id=1280387
* https://bugzilla.suse.com/show_bug.cgi?id=1280743
* https://bugzilla.suse.com/show_bug.cgi?id=1281280
* https://bugzilla.suse.com/show_bug.cgi?id=1281397
* https://bugzilla.suse.com/show_bug.cgi?id=1283835
* https://bugzilla.suse.com/show_bug.cgi?id=1283851
* https://bugzilla.suse.com/show_bug.cgi?id=1283894
* https://bugzilla.suse.com/show_bug.cgi?id=1283946
* https://bugzilla.suse.com/show_bug.cgi?id=1283963
* https://bugzilla.suse.com/show_bug.cgi?id=1284064
* https://bugzilla.suse.com/show_bug.cgi?id=1284408
* https://bugzilla.suse.com/show_bug.cgi?id=1284518
* https://bugzilla.suse.com/show_bug.cgi?id=1284713
* https://bugzilla.suse.com/show_bug.cgi?id=1284746
* https://bugzilla.suse.com/show_bug.cgi?id=1284790
* https://bugzilla.suse.com/show_bug.cgi?id=1284791
* https://bugzilla.suse.com/show_bug.cgi?id=1285684
* https://bugzilla.suse.com/show_bug.cgi?id=1285685
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20261029/082baa65/attachment.htm>
More information about the sle-security-updates
mailing list