Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP6)
Details
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.84 fixes various security issues
The following security issues were fixed:
CVE-2025-71120: SUNRPC: svcauthgss: avoid NULL deref on zero length gsstoken in gssreadproxy_verf (bsc#1256780).
CVE-2026-22999: net/sched: schqfq: do not free existing class in qfqchange_class() (bsc#1257238).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
CVE-2026-23111: netfilter: nftables: fix inverted genmask check in nftmapcatchallactivate() (bsc#1258183).
CVE-2026-23209: macvlan: fix error recovery in macvlancommonnewlink() (bsc#1258784).
The following non security issue was fixed:
Fix NULL pointer dereference in smb2queryserverinterfaces Livepatch for to restore a null check of
server->ops->queryserver_interfaces that was dropped by mistake. (bsc#1259896 bsc#1259962).