Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise kernel live patch can be exploited
published 2 days ago
Summary
The live‑patch update for the SUSE Linux Enterprise kernel (version 5.14.21‑150500.55.127) addresses several coding errors that could let an attacker gain higher privileges or cause a system crash. These problems affect encryption handling, networking, and file‑sharing components. Installing the provided live‑patch update resolves the issues and restores normal security.
What to do
- Update suse kernel-livepatch-sle15-sp5_update_32 to version 16-150500.2.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise Live Patching 15 SP5 | suse | kernel-livepatch-sle15-sp5_update_32 |
< 16-150500.2.1 Fix: upgrade to 16-150500.2.1
|
Original advisory text
Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.127 fixes various security issues:
The following security issues were fixed:
- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766).
- CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712).
- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277679).
- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693).
- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277399).
- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280760).
- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280728).
- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280285).
- CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20265012-1/ Vendor Advisory
- https://bugzilla.suse.com/1269766 Third Party Advisory
- https://bugzilla.suse.com/1274712 Third Party Advisory
- https://bugzilla.suse.com/1277399 Third Party Advisory
- https://bugzilla.suse.com/1277679 Third Party Advisory
- https://bugzilla.suse.com/1280285 Third Party Advisory
- https://bugzilla.suse.com/1280693 Third Party Advisory
- https://bugzilla.suse.com/1280728 Third Party Advisory
- https://bugzilla.suse.com/1280760 Third Party Advisory
- https://bugzilla.suse.com/1285686 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-53016 URL
- https://www.suse.com/security/cve/CVE-2026-68426 URL
- https://www.suse.com/security/cve/CVE-2026-72262 URL
- https://www.suse.com/security/cve/CVE-2026-74469 URL
- https://www.suse.com/security/cve/CVE-2026-74669 URL
- https://www.suse.com/security/cve/CVE-2026-89544 URL
- https://www.suse.com/security/cve/CVE-2026-89551 URL
- https://www.suse.com/security/cve/CVE-2026-89674 URL
- https://www.suse.com/security/cve/CVE-2026-98432 URL
Timeline
Published2 Nov 2026
Updated3 Nov 2026
First seen3 Nov 2026
Sources
SUSE-SU-2026:5012-1 · OSV
Track software like this
Free during beta