Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise 16: Critical Security Update for Linux Kernel
published 6 months ago
Summary
This update addresses multiple security issues in the Linux kernel, which could allow attackers to bypass security checks, cause system crashes, or execute arbitrary code. Affected systems should be updated to the latest patch level to ensure security and stability. IT administrators should apply this update as soon as possible.
What to do
- Update suse kernel-livepatch-sle16-rt_update_2 to version 4-160000.1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.2 | suse | kernel-livepatch-sle16-rt_update_2 |
< 4-160000.1.1 Fix: upgrade to 4-160000.1.1
|
Original advisory text
Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues
The following security issues were fixed:
- CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
- CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
- CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
- CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
- CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
- CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202621009-1/ Vendor Advisory
- https://bugzilla.suse.com/1253404 Third Party Advisory
- https://bugzilla.suse.com/1256780 Third Party Advisory
- https://bugzilla.suse.com/1257238 Third Party Advisory
- https://bugzilla.suse.com/1258051 Third Party Advisory
- https://bugzilla.suse.com/1258183 Third Party Advisory
- https://bugzilla.suse.com/1258784 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2025-40159 URL
- https://www.suse.com/security/cve/CVE-2025-71120 URL
- https://www.suse.com/security/cve/CVE-2026-22999 URL
- https://www.suse.com/security/cve/CVE-2026-23074 URL
- https://www.suse.com/security/cve/CVE-2026-23111 URL
- https://www.suse.com/security/cve/CVE-2026-23209 URL
Timeline
Published9 Apr 2026
Updated14 Apr 2026
First seen14 Apr 2026
Sources
SUSE-SU-2026:21009-1 · OSV
Track software like this
Free during beta