SUSE-SU-2026:2989-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20262989-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2989-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:2989-1
- Upstream
- Related
- Published
- 2026-07-14T15:46:15Z
- Modified
- 2026-07-15T10:00:12Z
- Summary
- Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)
- Details
-
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues
The following security issues were fixed:
- CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
- CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
- CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
- CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
- CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
- CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
- CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
- CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
- CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
- CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
- CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20262989-1/
- https://bugzilla.suse.com/1264094
- https://bugzilla.suse.com/1265117
- https://bugzilla.suse.com/1265197
- https://bugzilla.suse.com/1266015
- https://bugzilla.suse.com/1266265
- https://bugzilla.suse.com/1267206
- https://bugzilla.suse.com/1267698
- https://bugzilla.suse.com/1267723
- https://bugzilla.suse.com/1267893
- https://bugzilla.suse.com/1268662
- https://bugzilla.suse.com/1269023
- https://www.suse.com/security/cve/CVE-2026-31758
- https://www.suse.com/security/cve/CVE-2026-43037
- https://www.suse.com/security/cve/CVE-2026-43366
- https://www.suse.com/security/cve/CVE-2026-43501
- https://www.suse.com/security/cve/CVE-2026-45970
- https://www.suse.com/security/cve/CVE-2026-46120
- https://www.suse.com/security/cve/CVE-2026-46173
- https://www.suse.com/security/cve/CVE-2026-46227
- https://www.suse.com/security/cve/CVE-2026-46243
- https://www.suse.com/security/cve/CVE-2026-52909
- https://www.suse.com/security/cve/CVE-2026-52943
Affected packages
SUSE:Linux Enterprise Live Patching 15 SP5 / kernel-livepatch-SLE15-SP5_Update_40
Package
- Name
- kernel-livepatch-SLE15-SP5_Update_40
- Purl
- pkg:rpm/suse/kernel-livepatch-SLE15-SP5_Update_40&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2-150500.2.2