Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise Micro 6.0 kernel live patch may allow unauthorized code execution
published 16 days ago
Summary
The live‑patch update for SUSE Linux Enterprise Micro 6.0 fixes several bugs that could let attackers run code, corrupt data, or cause crashes in the operating system. These problems affect networking, virtual machine security, storage, and cloud‑storage components. Apply the provided patch as soon as possible to keep the system safe.
What to do
- Update suse kernel-livepatch-micro-6-0_update_24 to version 7-1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.0 | suse | kernel-livepatch-micro-6-0_update_24 |
< 7-1.1 Fix: upgrade to 7-1.1
|
Original advisory text
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues:
The following security issues were fixed:
- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775).
- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965).
- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136).
- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386).
- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202624341-1/ Vendor Advisory
- https://bugzilla.suse.com/1269775 Third Party Advisory
- https://bugzilla.suse.com/1271965 Third Party Advisory
- https://bugzilla.suse.com/1272136 Third Party Advisory
- https://bugzilla.suse.com/1272386 Third Party Advisory
- https://bugzilla.suse.com/1276303 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-53131 URL
- https://www.suse.com/security/cve/CVE-2026-63794 URL
- https://www.suse.com/security/cve/CVE-2026-63795 URL
- https://www.suse.com/security/cve/CVE-2026-63887 URL
- https://www.suse.com/security/cve/CVE-2026-68158 URL
Timeline
Published19 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
SUSE-SU-2026:24341-1 · OSV
Track software like this
Free during beta