Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise kernel live patch 6 can be exploited
published 1 month ago
Summary
The live patch update for SUSE Linux Enterprise kernel version 6.12.0-160000.27.1 contains several flaws that could let attackers interfere with network, storage and Bluetooth functions, potentially leading to crashes or unauthorized actions. Apply the latest patch from SUSE as soon as possible to close these gaps and keep the system stable and secure.
What to do
- Update suse kernel-livepatch-sle16-rt_update_6 to version 11-160000.1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.2 | suse | kernel-livepatch-sle16-rt_update_6 |
< 11-160000.1.1 Fix: upgrade to 11-160000.1.1
|
Original advisory text
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues:
The following security issues were fixed:
- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (bsc#1273051).
- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
- CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202624003-1/ Vendor Advisory
- https://bugzilla.suse.com/1267370 Third Party Advisory
- https://bugzilla.suse.com/1272208 Third Party Advisory
- https://bugzilla.suse.com/1272283 Third Party Advisory
- https://bugzilla.suse.com/1272391 Third Party Advisory
- https://bugzilla.suse.com/1272679 Third Party Advisory
- https://bugzilla.suse.com/1272837 Third Party Advisory
- https://bugzilla.suse.com/1273003 Third Party Advisory
- https://bugzilla.suse.com/1273011 Third Party Advisory
- https://bugzilla.suse.com/1273012 Third Party Advisory
- https://bugzilla.suse.com/1273015 Third Party Advisory
- https://bugzilla.suse.com/1273051 Third Party Advisory
- https://bugzilla.suse.com/1273052 Third Party Advisory
- https://bugzilla.suse.com/1273833 Third Party Advisory
- https://bugzilla.suse.com/1273837 Third Party Advisory
- https://bugzilla.suse.com/1275162 Third Party Advisory
- https://bugzilla.suse.com/1275228 Third Party Advisory
- https://bugzilla.suse.com/1276299 Third Party Advisory
- https://bugzilla.suse.com/1276493 Third Party Advisory
- https://bugzilla.suse.com/1277409 Third Party Advisory
- https://bugzilla.suse.com/1277506 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-46116 URL
- https://www.suse.com/security/cve/CVE-2026-63802 URL
- https://www.suse.com/security/cve/CVE-2026-63888 URL
- https://www.suse.com/security/cve/CVE-2026-63912 URL
- https://www.suse.com/security/cve/CVE-2026-63917 URL
- https://www.suse.com/security/cve/CVE-2026-63920 URL
- https://www.suse.com/security/cve/CVE-2026-63921 URL
- https://www.suse.com/security/cve/CVE-2026-63944 URL
- https://www.suse.com/security/cve/CVE-2026-63971 URL
- https://www.suse.com/security/cve/CVE-2026-63994 URL
- https://www.suse.com/security/cve/CVE-2026-64000 URL
- https://www.suse.com/security/cve/CVE-2026-64011 URL
- https://www.suse.com/security/cve/CVE-2026-64114 URL
- https://www.suse.com/security/cve/CVE-2026-64121 URL
- https://www.suse.com/security/cve/CVE-2026-64189 URL
- https://www.suse.com/security/cve/CVE-2026-68121 URL
- https://www.suse.com/security/cve/CVE-2026-68202 URL
- https://www.suse.com/security/cve/CVE-2026-72217 URL
- https://www.suse.com/security/cve/CVE-2026-74394 URL
- https://www.suse.com/security/cve/CVE-2026-74612 URL
Timeline
Published2 Oct 2026
Updated7 Oct 2026
First seen7 Oct 2026
Sources
SUSE-SU-2026:24003-1 · OSV
Track software like this
Free during beta