Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise Live Patch 6 may allow system compromise
published 29 days ago
Summary
The Live Patch update for SUSE Linux Enterprise 16 fixes a number of flaws in the kernel that could let attackers run code, crash services, or tamper with network traffic. These weaknesses affect the core operating system and could expose servers to security breaches. Apply the provided update as soon as possible to keep your systems protected.
What to do
- Update suse kernel-livepatch-sle16_update_6 to version 11-160000.1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.2 | suse | kernel-livepatch-sle16_update_6 |
< 11-160000.1.1 Fix: upgrade to 11-160000.1.1
|
Original advisory text
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues:
The following security issues were fixed:
- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (bsc#1273051).
- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
- CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202624101-1/ Vendor Advisory
- https://bugzilla.suse.com/1267370 Third Party Advisory
- https://bugzilla.suse.com/1272208 Third Party Advisory
- https://bugzilla.suse.com/1272283 Third Party Advisory
- https://bugzilla.suse.com/1272391 Third Party Advisory
- https://bugzilla.suse.com/1272679 Third Party Advisory
- https://bugzilla.suse.com/1272837 Third Party Advisory
- https://bugzilla.suse.com/1273003 Third Party Advisory
- https://bugzilla.suse.com/1273011 Third Party Advisory
- https://bugzilla.suse.com/1273012 Third Party Advisory
- https://bugzilla.suse.com/1273015 Third Party Advisory
- https://bugzilla.suse.com/1273051 Third Party Advisory
- https://bugzilla.suse.com/1273052 Third Party Advisory
- https://bugzilla.suse.com/1273833 Third Party Advisory
- https://bugzilla.suse.com/1273837 Third Party Advisory
- https://bugzilla.suse.com/1275162 Third Party Advisory
- https://bugzilla.suse.com/1275228 Third Party Advisory
- https://bugzilla.suse.com/1276299 Third Party Advisory
- https://bugzilla.suse.com/1276493 Third Party Advisory
- https://bugzilla.suse.com/1277409 Third Party Advisory
- https://bugzilla.suse.com/1277506 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-46116 URL
- https://www.suse.com/security/cve/CVE-2026-63802 URL
- https://www.suse.com/security/cve/CVE-2026-63888 URL
- https://www.suse.com/security/cve/CVE-2026-63912 URL
- https://www.suse.com/security/cve/CVE-2026-63917 URL
- https://www.suse.com/security/cve/CVE-2026-63920 URL
- https://www.suse.com/security/cve/CVE-2026-63921 URL
- https://www.suse.com/security/cve/CVE-2026-63944 URL
- https://www.suse.com/security/cve/CVE-2026-63971 URL
- https://www.suse.com/security/cve/CVE-2026-63994 URL
- https://www.suse.com/security/cve/CVE-2026-64000 URL
- https://www.suse.com/security/cve/CVE-2026-64011 URL
- https://www.suse.com/security/cve/CVE-2026-64114 URL
- https://www.suse.com/security/cve/CVE-2026-64121 URL
- https://www.suse.com/security/cve/CVE-2026-64189 URL
- https://www.suse.com/security/cve/CVE-2026-68121 URL
- https://www.suse.com/security/cve/CVE-2026-68202 URL
- https://www.suse.com/security/cve/CVE-2026-72217 URL
- https://www.suse.com/security/cve/CVE-2026-74394 URL
- https://www.suse.com/security/cve/CVE-2026-74612 URL
Timeline
Published6 Oct 2026
Updated10 Oct 2026
First seen10 Oct 2026
Sources
SUSE-SU-2026:24101-1 · OSV
Track software like this
Free during beta