Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise Micro 6.0 kernel live patch could be exploited
published 29 days ago
Summary
The live‑patch for SUSE Linux Enterprise Micro 6.0 kernel contains several flaws that could let an attacker cause crashes, gain unauthorized access, or bypass security checks. Applying the provided update resolves these issues and restores normal protection. Install the live‑patch update as soon as possible to keep the system secure.
What to do
- Update suse kernel-livepatch-micro-6-0-rt_update_12 to version 17-1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.0 | suse | kernel-livepatch-micro-6-0-rt_update_12 |
< 17-1.1 Fix: upgrade to 17-1.1
|
Original advisory text
Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues:
The following security issues were fixed:
- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (bsc#1273051).
- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202624072-1/ Vendor Advisory
- https://bugzilla.suse.com/1267370 Third Party Advisory
- https://bugzilla.suse.com/1272208 Third Party Advisory
- https://bugzilla.suse.com/1272283 Third Party Advisory
- https://bugzilla.suse.com/1272391 Third Party Advisory
- https://bugzilla.suse.com/1272679 Third Party Advisory
- https://bugzilla.suse.com/1272837 Third Party Advisory
- https://bugzilla.suse.com/1273003 Third Party Advisory
- https://bugzilla.suse.com/1273011 Third Party Advisory
- https://bugzilla.suse.com/1273012 Third Party Advisory
- https://bugzilla.suse.com/1273015 Third Party Advisory
- https://bugzilla.suse.com/1273051 Third Party Advisory
- https://bugzilla.suse.com/1273052 Third Party Advisory
- https://bugzilla.suse.com/1273833 Third Party Advisory
- https://bugzilla.suse.com/1273837 Third Party Advisory
- https://bugzilla.suse.com/1275162 Third Party Advisory
- https://bugzilla.suse.com/1275228 Third Party Advisory
- https://bugzilla.suse.com/1276493 Third Party Advisory
- https://bugzilla.suse.com/1277409 Third Party Advisory
- https://bugzilla.suse.com/1277506 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-46116 URL
- https://www.suse.com/security/cve/CVE-2026-63802 URL
- https://www.suse.com/security/cve/CVE-2026-63888 URL
- https://www.suse.com/security/cve/CVE-2026-63912 URL
- https://www.suse.com/security/cve/CVE-2026-63917 URL
- https://www.suse.com/security/cve/CVE-2026-63920 URL
- https://www.suse.com/security/cve/CVE-2026-63921 URL
- https://www.suse.com/security/cve/CVE-2026-63944 URL
- https://www.suse.com/security/cve/CVE-2026-63971 URL
- https://www.suse.com/security/cve/CVE-2026-63994 URL
- https://www.suse.com/security/cve/CVE-2026-64000 URL
- https://www.suse.com/security/cve/CVE-2026-64011 URL
- https://www.suse.com/security/cve/CVE-2026-64114 URL
- https://www.suse.com/security/cve/CVE-2026-64121 URL
- https://www.suse.com/security/cve/CVE-2026-64189 URL
- https://www.suse.com/security/cve/CVE-2026-68121 URL
- https://www.suse.com/security/cve/CVE-2026-68202 URL
- https://www.suse.com/security/cve/CVE-2026-74394 URL
- https://www.suse.com/security/cve/CVE-2026-74612 URL
Timeline
Published6 Oct 2026
Updated10 Oct 2026
First seen10 Oct 2026
Sources
SUSE-SU-2026:24072-1 · OSV
Track software like this
Free during beta