Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Update Linux Kernel to Fix Security Issues
published 3 months ago
Summary
SUSE Linux Enterprise 15 SP5 users should update their Linux kernel to fix multiple security issues. These issues could allow hackers to take control of your system or access sensitive information. To stay secure, install the latest kernel update.
What to do
- Update suse kernel-64kb to version 5.14.21-150500.55.177.1.
- Update suse kernel-default to version 5.14.21-150500.55.177.1.
- Update suse kernel-livepatch-sle15-sp5_update_43 to version 1-150500.11.5.1.
- Update suse kernel-default-base to version 5.14.21-150500.55.177.1.150500.6.83.2.
- Update suse kernel-source to version 5.14.21-150500.55.177.1.
- Update suse kernel-docs to version 5.14.21-150500.55.177.1.
- Update suse kernel-obs-build to version 5.14.21-150500.55.177.1.
- Update suse kernel-syms to version 5.14.21-150500.55.177.1.
- Update suse kernel-zfcpdump to version 5.14.21-150500.55.177.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | suse | kernel-64kb |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | suse | kernel-default |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Live Patching 15 SP5 | suse | kernel-default |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Live Patching 15 SP5 | suse | kernel-livepatch-sle15-sp5_update_43 |
< 1-150500.11.5.1 Fix: upgrade to 1-150500.11.5.1
|
| SUSE:Linux Enterprise Micro 5.5 | suse | kernel-default |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Micro 5.5 | suse | kernel-default-base |
< 5.14.21-150500.55.177.1.150500.6.83.2 Fix: upgrade to 5.14.21-150500.55.177.1.150500.6.83.2
|
| SUSE:Linux Enterprise Micro 5.5 | suse | kernel-source |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | suse | kernel-default-base |
< 5.14.21-150500.55.177.1.150500.6.83.2 Fix: upgrade to 5.14.21-150500.55.177.1.150500.6.83.2
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | suse | kernel-64kb |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | suse | kernel-default |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | suse | kernel-default-base |
< 5.14.21-150500.55.177.1.150500.6.83.2 Fix: upgrade to 5.14.21-150500.55.177.1.150500.6.83.2
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | suse | kernel-docs |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | suse | kernel-obs-build |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server 15 SP5-LTSS | suse | kernel-64kb |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server 15 SP5-LTSS | suse | kernel-default |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server 15 SP5-LTSS | suse | kernel-default-base |
< 5.14.21-150500.55.177.1.150500.6.83.2 Fix: upgrade to 5.14.21-150500.55.177.1.150500.6.83.2
|
| SUSE:Linux Enterprise Server 15 SP5-LTSS | suse | kernel-docs |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server 15 SP5-LTSS | suse | kernel-obs-build |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server 15 SP5-LTSS | suse | kernel-source |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server 15 SP5-LTSS | suse | kernel-syms |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | suse | kernel-default |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | suse | kernel-default-base |
< 5.14.21-150500.55.177.1.150500.6.83.2 Fix: upgrade to 5.14.21-150500.55.177.1.150500.6.83.2
|
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | suse | kernel-docs |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | suse | kernel-obs-build |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | suse | kernel-source |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | suse | kernel-syms |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | suse | kernel-docs |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | suse | kernel-obs-build |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | suse | kernel-source |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | suse | kernel-syms |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | suse | kernel-source |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | suse | kernel-syms |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
| SUSE:Linux Enterprise Server 15 SP5-LTSS | suse | kernel-zfcpdump |
< 5.14.21-150500.55.177.1 Fix: upgrade to 5.14.21-150500.55.177.1
|
Original advisory text
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2026-31771: Bluetooth: Ignore HCI_ERROR_CANCELLED_BY_HOST on adv set terminated event (bsc#1264145).
- CVE-2026-43038: ipv6: icmp: clear skb2->cb in ip6_err_gen_icmpv6_unreach() (bsc#1264097).
- CVE-2026-46090: ALSA: aloop: Fix peer runtime UAF during format-change stop (bsc#1267531).
- CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267722).
- CVE-2026-46197: drm/amdkfd: validate SVM ioctl nattr against buffer size (bsc#1267381).
- CVE-2026-46229: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567).
- CVE-2026-46253: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).
- CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268022).
- CVE-2026-46320: tap: free page on error paths in tap_get_user_xdp() (bsc#1267993).
- CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1265421).
- CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268660).
- CVE-2026-52918: Bluetooth: serialize accept_q access (bsc#1269100).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269033).
- CVE-2026-52924: sctp: purge outqueue on stale COOKIE-ECHO handling (bsc#1269036).
- CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269022).
- CVE-2026-52955: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).
- CVE-2026-52969: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (bsc#1269184).
- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269195).
- CVE-2026-52993: tipc: fix double-free in tipc_buf_append() (bsc#1269193).
- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269090).
- CVE-2026-53041: ocfs2: fix listxattr handling when the buffer is full (bsc#1269398).
- CVE-2026-53053: iommu/amd: Fix clone_alias() to use the original device's devid (bsc#1269310).
- CVE-2026-53071: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (bsc#1269678).
- CVE-2026-53072: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (bsc#1269681).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269821).
- CVE-2026-53253: Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (bsc#1269574).
- CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270059).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20263089-1/ Vendor Advisory
- https://bugzilla.suse.com/1264097 Third Party Advisory
- https://bugzilla.suse.com/1264145 Third Party Advisory
- https://bugzilla.suse.com/1265421 Third Party Advisory
- https://bugzilla.suse.com/1267381 Third Party Advisory
- https://bugzilla.suse.com/1267531 Third Party Advisory
- https://bugzilla.suse.com/1267567 Third Party Advisory
- https://bugzilla.suse.com/1267635 Third Party Advisory
- https://bugzilla.suse.com/1267684 Third Party Advisory
- https://bugzilla.suse.com/1267722 Third Party Advisory
- https://bugzilla.suse.com/1267918 Third Party Advisory
- https://bugzilla.suse.com/1267993 Third Party Advisory
- https://bugzilla.suse.com/1268022 Third Party Advisory
- https://bugzilla.suse.com/1268660 Third Party Advisory
- https://bugzilla.suse.com/1269022 Third Party Advisory
- https://bugzilla.suse.com/1269033 Third Party Advisory
- https://bugzilla.suse.com/1269036 Third Party Advisory
- https://bugzilla.suse.com/1269090 Third Party Advisory
- https://bugzilla.suse.com/1269100 Third Party Advisory
- https://bugzilla.suse.com/1269159 Third Party Advisory
- https://bugzilla.suse.com/1269184 Third Party Advisory
- https://bugzilla.suse.com/1269193 Third Party Advisory
- https://bugzilla.suse.com/1269195 Third Party Advisory
- https://bugzilla.suse.com/1269310 Third Party Advisory
- https://bugzilla.suse.com/1269398 Third Party Advisory
- https://bugzilla.suse.com/1269574 Third Party Advisory
- https://bugzilla.suse.com/1269678 Third Party Advisory
- https://bugzilla.suse.com/1269681 Third Party Advisory
- https://bugzilla.suse.com/1269821 Third Party Advisory
- https://bugzilla.suse.com/1270059 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-31771 URL
- https://www.suse.com/security/cve/CVE-2026-43038 URL
- https://www.suse.com/security/cve/CVE-2026-46090 URL
- https://www.suse.com/security/cve/CVE-2026-46173 URL
- https://www.suse.com/security/cve/CVE-2026-46197 URL
- https://www.suse.com/security/cve/CVE-2026-46229 URL
- https://www.suse.com/security/cve/CVE-2026-46253 URL
- https://www.suse.com/security/cve/CVE-2026-46266 URL
- https://www.suse.com/security/cve/CVE-2026-46274 URL
- https://www.suse.com/security/cve/CVE-2026-46319 URL
- https://www.suse.com/security/cve/CVE-2026-46320 URL
- https://www.suse.com/security/cve/CVE-2026-46331 URL
- https://www.suse.com/security/cve/CVE-2026-52909 URL
- https://www.suse.com/security/cve/CVE-2026-52918 URL
- https://www.suse.com/security/cve/CVE-2026-52923 URL
- https://www.suse.com/security/cve/CVE-2026-52924 URL
- https://www.suse.com/security/cve/CVE-2026-52943 URL
- https://www.suse.com/security/cve/CVE-2026-52955 URL
- https://www.suse.com/security/cve/CVE-2026-52969 URL
- https://www.suse.com/security/cve/CVE-2026-52972 URL
- https://www.suse.com/security/cve/CVE-2026-52993 URL
- https://www.suse.com/security/cve/CVE-2026-53016 URL
- https://www.suse.com/security/cve/CVE-2026-53041 URL
- https://www.suse.com/security/cve/CVE-2026-53053 URL
- https://www.suse.com/security/cve/CVE-2026-53071 URL
- https://www.suse.com/security/cve/CVE-2026-53072 URL
- https://www.suse.com/security/cve/CVE-2026-53133 URL
- https://www.suse.com/security/cve/CVE-2026-53253 URL
- https://www.suse.com/security/cve/CVE-2026-53359 URL
Timeline
Published17 Jul 2026
Updated18 Jul 2026
First seen18 Jul 2026
Sources
SUSE-SU-2026:3089-1 · OSV
Track software like this
Free during beta