Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise Kernel live patch could let attackers bypass security
published 1 month ago
Summary
The live‑patch update for the SUSE Linux Enterprise kernel version 6.4.0 on SLES 15 SP7 fixes several flaws that could let malicious code interfere with file monitoring, virtual machine protection, network handling, and other system functions. If left unpatched, these flaws might allow an attacker to gain higher privileges or cause instability. Apply the provided kernel live‑patch update as soon as possible to keep the system protected.
What to do
- Update suse kernel-livepatch-sle15-sp7_update_13 to version 7-150700.2.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise Live Patching 15 SP7 | suse | kernel-livepatch-sle15-sp7_update_13 |
< 7-150700.2.1 Fix: upgrade to 7-150700.2.1
|
Original advisory text
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.45 fixes various security issues:
The following security issues were fixed:
- CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388).
- CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303).
- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458).
- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232).
- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074).
- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20264258-1/ Vendor Advisory
- https://bugzilla.suse.com/1267388 Third Party Advisory
- https://bugzilla.suse.com/1270303 Third Party Advisory
- https://bugzilla.suse.com/1273232 Third Party Advisory
- https://bugzilla.suse.com/1274074 Third Party Advisory
- https://bugzilla.suse.com/1274942 Third Party Advisory
- https://bugzilla.suse.com/1275458 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-46150 URL
- https://www.suse.com/security/cve/CVE-2026-53360 URL
- https://www.suse.com/security/cve/CVE-2026-64423 URL
- https://www.suse.com/security/cve/CVE-2026-64561 URL
- https://www.suse.com/security/cve/CVE-2026-64564 URL
- https://www.suse.com/security/cve/CVE-2026-68138 URL
Timeline
Published17 Sep 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
SUSE-SU-2026:4258-1 · OSV
Track software like this
Free during beta