Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Unpatched SUSE Linux kernel may let attackers take control
published 2 months ago
Summary
The SUSE Linux Enterprise 16 kernel contains several coding errors that could let a malicious user cause crashes, bypass security checks, or potentially gain control of the server. Applying the latest live‑patch update corrects these problems and restores proper safeguards. Install the patch as soon as possible to keep your systems safe.
What to do
- Update suse kernel-livepatch-sle16-rt_update_3 to version 11-160000.1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.2 | suse | kernel-livepatch-sle16-rt_update_3 |
< 11-160000.1.1 Fix: upgrade to 11-160000.1.1
|
Original advisory text
Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues.
The following security issues were fixed:
- CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134).
- CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
- CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
- CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
- CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
- CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
- CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
- CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
- CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
- CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
- CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
- CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
- CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
- CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
- CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
The following security issues were fixed:
- CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134).
- CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
- CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
- CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
- CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
- CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
- CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
- CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
- CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
- CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
- CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
- CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
- CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
- CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
- CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202623269-1/ Vendor Advisory
- https://bugzilla.suse.com/1259134 Third Party Advisory
- https://bugzilla.suse.com/1262213 Third Party Advisory
- https://bugzilla.suse.com/1263791 Third Party Advisory
- https://bugzilla.suse.com/1264078 Third Party Advisory
- https://bugzilla.suse.com/1264483 Third Party Advisory
- https://bugzilla.suse.com/1265306 Third Party Advisory
- https://bugzilla.suse.com/1266668 Third Party Advisory
- https://bugzilla.suse.com/1267362 Third Party Advisory
- https://bugzilla.suse.com/1268281 Third Party Advisory
- https://bugzilla.suse.com/1268624 Third Party Advisory
- https://bugzilla.suse.com/1269034 Third Party Advisory
- https://bugzilla.suse.com/1269196 Third Party Advisory
- https://bugzilla.suse.com/1269282 Third Party Advisory
- https://bugzilla.suse.com/1269803 Third Party Advisory
- https://bugzilla.suse.com/1269822 Third Party Advisory
- https://bugzilla.suse.com/1269885 Third Party Advisory
- https://bugzilla.suse.com/1269903 Third Party Advisory
- https://bugzilla.suse.com/1270023 Third Party Advisory
- https://bugzilla.suse.com/1270024 Third Party Advisory
- https://bugzilla.suse.com/1270300 Third Party Advisory
- https://bugzilla.suse.com/1271543 Third Party Advisory
- https://bugzilla.suse.com/1271867 Third Party Advisory
- https://bugzilla.suse.com/1272139 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-23161 URL
- https://www.suse.com/security/cve/CVE-2026-23449 URL
- https://www.suse.com/security/cve/CVE-2026-31629 URL
- https://www.suse.com/security/cve/CVE-2026-31759 URL
- https://www.suse.com/security/cve/CVE-2026-43077 URL
- https://www.suse.com/security/cve/CVE-2026-43109 URL
- https://www.suse.com/security/cve/CVE-2026-43110 URL
- https://www.suse.com/security/cve/CVE-2026-43206 URL
- https://www.suse.com/security/cve/CVE-2026-46037 URL
- https://www.suse.com/security/cve/CVE-2026-46242 URL
- https://www.suse.com/security/cve/CVE-2026-46274 URL
- https://www.suse.com/security/cve/CVE-2026-46319 URL
- https://www.suse.com/security/cve/CVE-2026-52923 URL
- https://www.suse.com/security/cve/CVE-2026-52956 URL
- https://www.suse.com/security/cve/CVE-2026-52972 URL
- https://www.suse.com/security/cve/CVE-2026-53133 URL
- https://www.suse.com/security/cve/CVE-2026-53182 URL
- https://www.suse.com/security/cve/CVE-2026-53205 URL
- https://www.suse.com/security/cve/CVE-2026-53224 URL
- https://www.suse.com/security/cve/CVE-2026-53233 URL
- https://www.suse.com/security/cve/CVE-2026-53246 URL
- https://www.suse.com/security/cve/CVE-2026-64530 URL
- https://www.suse.com/security/cve/CVE-2026-64600 URL
Timeline
Published24 Aug 2026
Updated31 Aug 2026
First seen31 Aug 2026
Sources
SUSE-SU-2026:23269-1 · OSV
Track software like this
Free during beta