Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise 12 SP5 kernel live patch may cause system crashes
published 29 days ago
Summary
The live‑patch update for the SUSE Linux Enterprise 12 SP5 kernel fixes several coding errors that could let attackers cause the system to freeze, crash, or execute unwanted code. These errors affect networking, storage, and audio components of the kernel. Apply the provided patch as soon as possible to keep the operating system stable and secure.
What to do
- Update suse kgraft-patch-sle12-sp5_update_78 to version 10-2.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise Live Patching 12 SP5 | suse | kgraft-patch-sle12-sp5_update_78 |
< 10-2.1 Fix: upgrade to 10-2.1
|
Original advisory text
Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues:
The following security issues were fixed:
- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20264548-1/ Vendor Advisory
- https://bugzilla.suse.com/1267370 Third Party Advisory
- https://bugzilla.suse.com/1272391 Third Party Advisory
- https://bugzilla.suse.com/1273012 Third Party Advisory
- https://bugzilla.suse.com/1273833 Third Party Advisory
- https://bugzilla.suse.com/1275162 Third Party Advisory
- https://bugzilla.suse.com/1275228 Third Party Advisory
- https://bugzilla.suse.com/1276493 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-46116 URL
- https://www.suse.com/security/cve/CVE-2026-63888 URL
- https://www.suse.com/security/cve/CVE-2026-63920 URL
- https://www.suse.com/security/cve/CVE-2026-64011 URL
- https://www.suse.com/security/cve/CVE-2026-64114 URL
- https://www.suse.com/security/cve/CVE-2026-68121 URL
- https://www.suse.com/security/cve/CVE-2026-68202 URL
Timeline
Published6 Oct 2026
Updated7 Oct 2026
First seen7 Oct 2026
Sources
SUSE-SU-2026:4548-1 · OSV
Track software like this
Free during beta