Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise Micro 6.0 kernel live patch could allow code execution
published 16 days ago
Summary
The live‑patch update for SUSE Linux Enterprise Micro 6.0 fixes several bugs that could let an attacker run unauthorized code or cause crashes in network, storage, and virtualization components. Until the patch is applied, these weaknesses could be exploited to disrupt services or gain control of the system. Install the provided live‑patch update as soon as possible to close the gaps.
What to do
- Update suse kernel-livepatch-micro-6-0_update_23 to version 8-1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.1 | suse | kernel-livepatch-micro-6-0_update_23 |
< 8-1.1 Fix: upgrade to 8-1.1
|
Original advisory text
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues:
The following security issues were fixed:
- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775).
- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965).
- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136).
- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386).
- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202624296-1/ Vendor Advisory
- https://bugzilla.suse.com/1269775 Third Party Advisory
- https://bugzilla.suse.com/1271965 Third Party Advisory
- https://bugzilla.suse.com/1272136 Third Party Advisory
- https://bugzilla.suse.com/1272386 Third Party Advisory
- https://bugzilla.suse.com/1276303 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-53131 URL
- https://www.suse.com/security/cve/CVE-2026-63794 URL
- https://www.suse.com/security/cve/CVE-2026-63795 URL
- https://www.suse.com/security/cve/CVE-2026-63887 URL
- https://www.suse.com/security/cve/CVE-2026-68158 URL
Timeline
Published19 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
SUSE-SU-2026:24296-1 · OSV
Track software like this
Free during beta