Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise 15 SP7 kernel patch stops crashes and data leaks
published 2 months ago
Summary
The latest patch for the SUSE Linux Enterprise Kernel addresses several flaws that could cause system instability, unexpected crashes, or expose data. These problems affect network communication, file handling, and encryption functions. Install the update as soon as possible to keep servers running safely.
What to do
- Update suse kernel-livepatch-sle15-sp7_update_16 to version 4-150700.2.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise Live Patching 15 SP7 | suse | kernel-livepatch-sle15-sp7_update_16 |
< 4-150700.2.1 Fix: upgrade to 4-150700.2.1
|
Original advisory text
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues:
The following security issues were fixed:
- CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
(bsc#1253437 bsc#1270023 bsc#1270024).
- CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
- CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
- CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20263778-1/ Vendor Advisory
- https://bugzilla.suse.com/1267362 Third Party Advisory
- https://bugzilla.suse.com/1268281 Third Party Advisory
- https://bugzilla.suse.com/1269034 Third Party Advisory
- https://bugzilla.suse.com/1269196 Third Party Advisory
- https://bugzilla.suse.com/1269822 Third Party Advisory
- https://bugzilla.suse.com/1270023 Third Party Advisory
- https://bugzilla.suse.com/1270024 Third Party Advisory
- https://bugzilla.suse.com/1270300 Third Party Advisory
- https://bugzilla.suse.com/1271543 Third Party Advisory
- https://bugzilla.suse.com/1271867 Third Party Advisory
- https://bugzilla.suse.com/1272139 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-46037 URL
- https://www.suse.com/security/cve/CVE-2026-46242 URL
- https://www.suse.com/security/cve/CVE-2026-46319 URL
- https://www.suse.com/security/cve/CVE-2026-52923 URL
- https://www.suse.com/security/cve/CVE-2026-52956 URL
- https://www.suse.com/security/cve/CVE-2026-52972 URL
- https://www.suse.com/security/cve/CVE-2026-53133 URL
- https://www.suse.com/security/cve/CVE-2026-53224 URL
- https://www.suse.com/security/cve/CVE-2026-53246 URL
- https://www.suse.com/security/cve/CVE-2026-64530 URL
- https://www.suse.com/security/cve/CVE-2026-64600 URL
Timeline
Published25 Aug 2026
Updated26 Aug 2026
First seen26 Aug 2026
Sources
SUSE-SU-2026:3778-1 · OSV
Track software like this
Free during beta