SUSE-SU-2026:5016-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20265016-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5016-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:5016-1
- Upstream
CVE (12)
- CVE-2026-53016
- CVE-2026-53381
- CVE-2026-63968
- CVE-2026-64217
- CVE-2026-68426
- CVE-2026-72262
- CVE-2026-74469
- CVE-2026-74669
- CVE-2026-89544
- CVE-2026-89551
- CVE-2026-89674
- CVE-2026-98432
- Related
- Published
- 2026-11-02T09:04:52Z
- Modified
- 2026-11-03T17:24:10Z
- Summary
- Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)
- Details
-
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues:
The following security issues were fixed:
- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766).
- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837).
- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272521).
- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272874).
- CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712).
- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277679).
- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693).
- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277399).
- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280760).
- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280728).
- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280285).
- CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20265016-1/
- https://bugzilla.suse.com/1269766
- https://bugzilla.suse.com/1271837
- https://bugzilla.suse.com/1272521
- https://bugzilla.suse.com/1272874
- https://bugzilla.suse.com/1274712
- https://bugzilla.suse.com/1277399
- https://bugzilla.suse.com/1277679
- https://bugzilla.suse.com/1280285
- https://bugzilla.suse.com/1280693
- https://bugzilla.suse.com/1280728
- https://bugzilla.suse.com/1280760
- https://bugzilla.suse.com/1285686
- https://www.suse.com/security/cve/CVE-2026-53016
- https://www.suse.com/security/cve/CVE-2026-53381
- https://www.suse.com/security/cve/CVE-2026-63968
- https://www.suse.com/security/cve/CVE-2026-64217
- https://www.suse.com/security/cve/CVE-2026-68426
- https://www.suse.com/security/cve/CVE-2026-72262
- https://www.suse.com/security/cve/CVE-2026-74469
- https://www.suse.com/security/cve/CVE-2026-74669
- https://www.suse.com/security/cve/CVE-2026-89544
- https://www.suse.com/security/cve/CVE-2026-89551
- https://www.suse.com/security/cve/CVE-2026-89674
- https://www.suse.com/security/cve/CVE-2026-98432
Affected packages
SUSE:Linux Enterprise Live Patching 15 SP6 / kernel-livepatch-SLE15-SP6_Update_27
Package
- Name
- kernel-livepatch-SLE15-SP6_Update_27
- Purl
- pkg:rpm/suse/kernel-livepatch-SLE15-SP6_Update_27&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed8-150600.2.1