Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

SUSE Linux Enterprise Micro 6.0 kernel update blocks crashes and data leaks

published 2 months ago

Summary

The latest live‑patch for the SUSE Linux Enterprise kernel addresses several flaws that could cause system crashes, unauthorized data access, or network problems. Applying this update keeps the operating system stable and protects confidential information. Install the patch as soon as possible using your normal update process.

What to do

Update suse kernel-livepatch-micro-6-0_update_18 to version 8-1.1.

Affected software

Ecosystem	Vendor	Product	Affected versions
SUSE:Linux Micro 6.0	suse	kernel-livepatch-micro-6-0_update_18	< 8-1.1 Fix: upgrade to 8-1.1

Original advisory text

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues:

The following security issues were fixed:

- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023)
- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
- CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
- CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
- CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
- CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
- CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
- CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
- CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
- CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
- CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
- CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
- CVE-2026-23240: Amend fix ("tls: Fix race condition in tls_sw_cancel_work_tx()") (bsc#1262404).

References

https://www.suse.com/support/update/announcement/2026/suse-su-202623390-1/ Vendor Advisory
https://bugzilla.suse.com/1262213 Third Party Advisory
https://bugzilla.suse.com/1262404 Third Party Advisory
https://bugzilla.suse.com/1263791 Third Party Advisory
https://bugzilla.suse.com/1264483 Third Party Advisory
https://bugzilla.suse.com/1265306 Third Party Advisory
https://bugzilla.suse.com/1267362 Third Party Advisory
https://bugzilla.suse.com/1268281 Third Party Advisory
https://bugzilla.suse.com/1268624 Third Party Advisory
https://bugzilla.suse.com/1269034 Third Party Advisory
https://bugzilla.suse.com/1269196 Third Party Advisory
https://bugzilla.suse.com/1269282 Third Party Advisory
https://bugzilla.suse.com/1269822 Third Party Advisory
https://bugzilla.suse.com/1269885 Third Party Advisory
https://bugzilla.suse.com/1270023 Third Party Advisory
https://bugzilla.suse.com/1270024 Third Party Advisory
https://bugzilla.suse.com/1270300 Third Party Advisory
https://bugzilla.suse.com/1271543 Third Party Advisory
https://bugzilla.suse.com/1271867 Third Party Advisory
https://bugzilla.suse.com/1272139 Third Party Advisory
https://www.suse.com/security/cve/CVE-2026-23240 URL
https://www.suse.com/security/cve/CVE-2026-23449 URL
https://www.suse.com/security/cve/CVE-2026-31629 URL
https://www.suse.com/security/cve/CVE-2026-43077 URL
https://www.suse.com/security/cve/CVE-2026-43109 URL
https://www.suse.com/security/cve/CVE-2026-43110 URL
https://www.suse.com/security/cve/CVE-2026-46037 URL
https://www.suse.com/security/cve/CVE-2026-46242 URL
https://www.suse.com/security/cve/CVE-2026-46274 URL
https://www.suse.com/security/cve/CVE-2026-46319 URL
https://www.suse.com/security/cve/CVE-2026-52923 URL
https://www.suse.com/security/cve/CVE-2026-52956 URL
https://www.suse.com/security/cve/CVE-2026-52972 URL
https://www.suse.com/security/cve/CVE-2026-53133 URL
https://www.suse.com/security/cve/CVE-2026-53182 URL
https://www.suse.com/security/cve/CVE-2026-53224 URL
https://www.suse.com/security/cve/CVE-2026-53246 URL
https://www.suse.com/security/cve/CVE-2026-64530 URL
https://www.suse.com/security/cve/CVE-2026-64600 URL

Timeline

Published31 Aug 2026

Updated10 Sep 2026

First seen10 Sep 2026

Sources

SUSE-SU-2026:23390-1 · OSV

Track software like this

Free during beta