SUSE-SU-2026:4892-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20264892-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4892-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:4892-1
Upstream
CVE (56)
Related
CVE (56)
Published
2026-10-23T10:48:07Z
Modified
2026-10-24T17:23:26Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076).
  • CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288).
  • CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).
  • CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659).
  • CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964).
  • CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313).
  • CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
  • CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
  • CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058).
  • CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).
  • CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).
  • CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784).
  • CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744).
  • CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).
  • CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755).
  • CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762).
  • CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770).
  • CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142).
  • CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823).
  • CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979).
  • CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
  • CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581).
  • CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606).
  • CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295).
  • CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291).
  • CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
  • CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289).
  • CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
  • CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288).
  • CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

  • kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.
  • net: add inline function skb_csum_is_sctp (bsc#1285684).
  • netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
  • vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).
References

Affected packages

SUSE:Linux Enterprise Live Patching 12 SP5
kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.336.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default-kgraft": "4.12.14-122.336.1",
            "kernel-default-kgraft-devel": "4.12.14-122.336.1",
            "kgraft-patch-4_12_14-122_336-default": "1-8.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4892-1.json"
kgraft-patch-SLE12-SP5_Update_89

Package

Name
kgraft-patch-SLE12-SP5_Update_89
Purl
pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_89&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1-8.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default-kgraft": "4.12.14-122.336.1",
            "kernel-default-kgraft-devel": "4.12.14-122.336.1",
            "kgraft-patch-4_12_14-122_336-default": "1-8.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4892-1.json"
SUSE:Linux Enterprise Server 12 SP5-LTSS
kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.336.1

Ecosystem specific 

{
    "binaries": [
        {
            "cluster-md-kmp-default": "4.12.14-122.336.1",
            "dlm-kmp-default": "4.12.14-122.336.1",
            "gfs2-kmp-default": "4.12.14-122.336.1",
            "kernel-default": "4.12.14-122.336.1",
            "kernel-default-base": "4.12.14-122.336.1",
            "kernel-default-devel": "4.12.14-122.336.1",
            "kernel-default-man": "4.12.14-122.336.1",
            "kernel-devel": "4.12.14-122.336.1",
            "kernel-macros": "4.12.14-122.336.1",
            "kernel-source": "4.12.14-122.336.1",
            "kernel-syms": "4.12.14-122.336.1",
            "ocfs2-kmp-default": "4.12.14-122.336.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4892-1.json"
kernel-source

Package

Name
kernel-source
Purl
pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.336.1

Ecosystem specific 

{
    "binaries": [
        {
            "cluster-md-kmp-default": "4.12.14-122.336.1",
            "dlm-kmp-default": "4.12.14-122.336.1",
            "gfs2-kmp-default": "4.12.14-122.336.1",
            "kernel-default": "4.12.14-122.336.1",
            "kernel-default-base": "4.12.14-122.336.1",
            "kernel-default-devel": "4.12.14-122.336.1",
            "kernel-default-man": "4.12.14-122.336.1",
            "kernel-devel": "4.12.14-122.336.1",
            "kernel-macros": "4.12.14-122.336.1",
            "kernel-source": "4.12.14-122.336.1",
            "kernel-syms": "4.12.14-122.336.1",
            "ocfs2-kmp-default": "4.12.14-122.336.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4892-1.json"
kernel-syms

Package

Name
kernel-syms
Purl
pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.336.1

Ecosystem specific 

{
    "binaries": [
        {
            "cluster-md-kmp-default": "4.12.14-122.336.1",
            "dlm-kmp-default": "4.12.14-122.336.1",
            "gfs2-kmp-default": "4.12.14-122.336.1",
            "kernel-default": "4.12.14-122.336.1",
            "kernel-default-base": "4.12.14-122.336.1",
            "kernel-default-devel": "4.12.14-122.336.1",
            "kernel-default-man": "4.12.14-122.336.1",
            "kernel-devel": "4.12.14-122.336.1",
            "kernel-macros": "4.12.14-122.336.1",
            "kernel-source": "4.12.14-122.336.1",
            "kernel-syms": "4.12.14-122.336.1",
            "ocfs2-kmp-default": "4.12.14-122.336.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4892-1.json"
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.336.1

Ecosystem specific 

{
    "binaries": [
        {
            "cluster-md-kmp-default": "4.12.14-122.336.1",
            "dlm-kmp-default": "4.12.14-122.336.1",
            "gfs2-kmp-default": "4.12.14-122.336.1",
            "kernel-default": "4.12.14-122.336.1",
            "kernel-default-base": "4.12.14-122.336.1",
            "kernel-default-devel": "4.12.14-122.336.1",
            "kernel-devel": "4.12.14-122.336.1",
            "kernel-macros": "4.12.14-122.336.1",
            "kernel-source": "4.12.14-122.336.1",
            "kernel-syms": "4.12.14-122.336.1",
            "ocfs2-kmp-default": "4.12.14-122.336.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4892-1.json"
kernel-source

Package

Name
kernel-source
Purl
pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.336.1

Ecosystem specific 

{
    "binaries": [
        {
            "cluster-md-kmp-default": "4.12.14-122.336.1",
            "dlm-kmp-default": "4.12.14-122.336.1",
            "gfs2-kmp-default": "4.12.14-122.336.1",
            "kernel-default": "4.12.14-122.336.1",
            "kernel-default-base": "4.12.14-122.336.1",
            "kernel-default-devel": "4.12.14-122.336.1",
            "kernel-devel": "4.12.14-122.336.1",
            "kernel-macros": "4.12.14-122.336.1",
            "kernel-source": "4.12.14-122.336.1",
            "kernel-syms": "4.12.14-122.336.1",
            "ocfs2-kmp-default": "4.12.14-122.336.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4892-1.json"
kernel-syms

Package

Name
kernel-syms
Purl
pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.336.1

Ecosystem specific 

{
    "binaries": [
        {
            "cluster-md-kmp-default": "4.12.14-122.336.1",
            "dlm-kmp-default": "4.12.14-122.336.1",
            "gfs2-kmp-default": "4.12.14-122.336.1",
            "kernel-default": "4.12.14-122.336.1",
            "kernel-default-base": "4.12.14-122.336.1",
            "kernel-default-devel": "4.12.14-122.336.1",
            "kernel-devel": "4.12.14-122.336.1",
            "kernel-macros": "4.12.14-122.336.1",
            "kernel-source": "4.12.14-122.336.1",
            "kernel-syms": "4.12.14-122.336.1",
            "ocfs2-kmp-default": "4.12.14-122.336.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4892-1.json"