Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise Micro 6.0 live patch may cause system errors
published 1 month ago
Summary
The live‑patch update for SUSE Linux Enterprise Micro 6.0 addresses several flaws that could let an attacker trigger crashes, misuse network functions, or bypass security checks. These problems affect the kernel’s file‑monitoring, networking, and virtual‑machine components. Installing the latest live‑patch (Update 16) resolves the issues and restores normal protection.
What to do
- Update suse kernel-livepatch-micro-6-0_update_16 to version 11-1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.1 | suse | kernel-livepatch-micro-6-0_update_16 |
< 11-1.1 Fix: upgrade to 11-1.1
|
Original advisory text
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues:
The following security issues were fixed:
- CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388).
- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458).
- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232).
- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074).
- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202623752-1/ Vendor Advisory
- https://bugzilla.suse.com/1267388 Third Party Advisory
- https://bugzilla.suse.com/1273232 Third Party Advisory
- https://bugzilla.suse.com/1274074 Third Party Advisory
- https://bugzilla.suse.com/1274942 Third Party Advisory
- https://bugzilla.suse.com/1275458 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-46150 URL
- https://www.suse.com/security/cve/CVE-2026-64423 URL
- https://www.suse.com/security/cve/CVE-2026-64561 URL
- https://www.suse.com/security/cve/CVE-2026-64564 URL
- https://www.suse.com/security/cve/CVE-2026-68138 URL
Timeline
Published14 Sep 2026
Updated30 Sep 2026
First seen30 Sep 2026
Sources
SUSE-SU-2026:23752-1 · OSV
Track software like this
Free during beta