SUSE-SU-2026:2839-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20262839-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2839-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:2839-1
Upstream
CVE (10)
Related
CVE (10)
Published
2026-07-10T09:09:30Z
Modified
2026-07-11T09:15:05Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267205).
  • CVE-2026-46090: ALSA: aloop: Fix peer runtime UAF during format-change stop (bsc#1267531).
  • CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266969).
  • CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).
  • CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1265421).
  • CVE-2026-52918: Bluetooth: serialize accept_q access (bsc#1269100).
  • CVE-2026-53253: Bluetooth: bnep: reject short frames before parsing (bsc#1269574).
  • CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270059).
References

Affected packages

SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.101-108.213.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.213.1",
            "kernel-default-base":  "3.0.101-108.213.1",
            "kernel-default-devel":  "3.0.101-108.213.1",
            "kernel-docs":  "3.0.101-108.213.1",
            "kernel-ec2":  "3.0.101-108.213.1",
            "kernel-ec2-base":  "3.0.101-108.213.1",
            "kernel-ec2-devel":  "3.0.101-108.213.1",
            "kernel-source":  "3.0.101-108.213.1",
            "kernel-syms":  "3.0.101-108.213.1",
            "kernel-trace":  "3.0.101-108.213.1",
            "kernel-trace-base":  "3.0.101-108.213.1",
            "kernel-trace-devel":  "3.0.101-108.213.1",
            "kernel-xen":  "3.0.101-108.213.1",
            "kernel-xen-base":  "3.0.101-108.213.1",
            "kernel-xen-devel":  "3.0.101-108.213.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2839-1.json"
kernel-docs

Package

Name
kernel-docs
Purl
pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.101-108.213.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.213.1",
            "kernel-default-base":  "3.0.101-108.213.1",
            "kernel-default-devel":  "3.0.101-108.213.1",
            "kernel-docs":  "3.0.101-108.213.1",
            "kernel-ec2":  "3.0.101-108.213.1",
            "kernel-ec2-base":  "3.0.101-108.213.1",
            "kernel-ec2-devel":  "3.0.101-108.213.1",
            "kernel-source":  "3.0.101-108.213.1",
            "kernel-syms":  "3.0.101-108.213.1",
            "kernel-trace":  "3.0.101-108.213.1",
            "kernel-trace-base":  "3.0.101-108.213.1",
            "kernel-trace-devel":  "3.0.101-108.213.1",
            "kernel-xen":  "3.0.101-108.213.1",
            "kernel-xen-base":  "3.0.101-108.213.1",
            "kernel-xen-devel":  "3.0.101-108.213.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2839-1.json"
kernel-ec2

Package

Name
kernel-ec2
Purl
pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.101-108.213.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.213.1",
            "kernel-default-base":  "3.0.101-108.213.1",
            "kernel-default-devel":  "3.0.101-108.213.1",
            "kernel-docs":  "3.0.101-108.213.1",
            "kernel-ec2":  "3.0.101-108.213.1",
            "kernel-ec2-base":  "3.0.101-108.213.1",
            "kernel-ec2-devel":  "3.0.101-108.213.1",
            "kernel-source":  "3.0.101-108.213.1",
            "kernel-syms":  "3.0.101-108.213.1",
            "kernel-trace":  "3.0.101-108.213.1",
            "kernel-trace-base":  "3.0.101-108.213.1",
            "kernel-trace-devel":  "3.0.101-108.213.1",
            "kernel-xen":  "3.0.101-108.213.1",
            "kernel-xen-base":  "3.0.101-108.213.1",
            "kernel-xen-devel":  "3.0.101-108.213.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2839-1.json"
kernel-source

Package

Name
kernel-source
Purl
pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.101-108.213.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.213.1",
            "kernel-default-base":  "3.0.101-108.213.1",
            "kernel-default-devel":  "3.0.101-108.213.1",
            "kernel-docs":  "3.0.101-108.213.1",
            "kernel-ec2":  "3.0.101-108.213.1",
            "kernel-ec2-base":  "3.0.101-108.213.1",
            "kernel-ec2-devel":  "3.0.101-108.213.1",
            "kernel-source":  "3.0.101-108.213.1",
            "kernel-syms":  "3.0.101-108.213.1",
            "kernel-trace":  "3.0.101-108.213.1",
            "kernel-trace-base":  "3.0.101-108.213.1",
            "kernel-trace-devel":  "3.0.101-108.213.1",
            "kernel-xen":  "3.0.101-108.213.1",
            "kernel-xen-base":  "3.0.101-108.213.1",
            "kernel-xen-devel":  "3.0.101-108.213.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2839-1.json"
kernel-syms

Package

Name
kernel-syms
Purl
pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.101-108.213.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.213.1",
            "kernel-default-base":  "3.0.101-108.213.1",
            "kernel-default-devel":  "3.0.101-108.213.1",
            "kernel-docs":  "3.0.101-108.213.1",
            "kernel-ec2":  "3.0.101-108.213.1",
            "kernel-ec2-base":  "3.0.101-108.213.1",
            "kernel-ec2-devel":  "3.0.101-108.213.1",
            "kernel-source":  "3.0.101-108.213.1",
            "kernel-syms":  "3.0.101-108.213.1",
            "kernel-trace":  "3.0.101-108.213.1",
            "kernel-trace-base":  "3.0.101-108.213.1",
            "kernel-trace-devel":  "3.0.101-108.213.1",
            "kernel-xen":  "3.0.101-108.213.1",
            "kernel-xen-base":  "3.0.101-108.213.1",
            "kernel-xen-devel":  "3.0.101-108.213.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2839-1.json"
kernel-trace

Package

Name
kernel-trace
Purl
pkg:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.101-108.213.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.213.1",
            "kernel-default-base":  "3.0.101-108.213.1",
            "kernel-default-devel":  "3.0.101-108.213.1",
            "kernel-docs":  "3.0.101-108.213.1",
            "kernel-ec2":  "3.0.101-108.213.1",
            "kernel-ec2-base":  "3.0.101-108.213.1",
            "kernel-ec2-devel":  "3.0.101-108.213.1",
            "kernel-source":  "3.0.101-108.213.1",
            "kernel-syms":  "3.0.101-108.213.1",
            "kernel-trace":  "3.0.101-108.213.1",
            "kernel-trace-base":  "3.0.101-108.213.1",
            "kernel-trace-devel":  "3.0.101-108.213.1",
            "kernel-xen":  "3.0.101-108.213.1",
            "kernel-xen-base":  "3.0.101-108.213.1",
            "kernel-xen-devel":  "3.0.101-108.213.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2839-1.json"
kernel-xen

Package

Name
kernel-xen
Purl
pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.101-108.213.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-default":  "3.0.101-108.213.1",
            "kernel-default-base":  "3.0.101-108.213.1",
            "kernel-default-devel":  "3.0.101-108.213.1",
            "kernel-docs":  "3.0.101-108.213.1",
            "kernel-ec2":  "3.0.101-108.213.1",
            "kernel-ec2-base":  "3.0.101-108.213.1",
            "kernel-ec2-devel":  "3.0.101-108.213.1",
            "kernel-source":  "3.0.101-108.213.1",
            "kernel-syms":  "3.0.101-108.213.1",
            "kernel-trace":  "3.0.101-108.213.1",
            "kernel-trace-base":  "3.0.101-108.213.1",
            "kernel-trace-devel":  "3.0.101-108.213.1",
            "kernel-xen":  "3.0.101-108.213.1",
            "kernel-xen-base":  "3.0.101-108.213.1",
            "kernel-xen-devel":  "3.0.101-108.213.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2839-1.json"