Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise 15 SP5: Security Updates for Linux Kernel
published 5 months ago
Summary
This update addresses multiple security issues in the Linux Kernel that could allow an attacker to execute malicious code or disrupt system services. Affected users should apply this update to ensure their system remains secure. The update is available for SUSE Linux Enterprise 15 SP5.
Original advisory text
Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.127 fixes various security issues
The following security issues were fixed:
- CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1258073).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252048).
- CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
- CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
- CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
- CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20261798-1/ Vendor Advisory
- https://bugzilla.suse.com/1252048 Third Party Advisory
- https://bugzilla.suse.com/1258005 Third Party Advisory
- https://bugzilla.suse.com/1258073 Third Party Advisory
- https://bugzilla.suse.com/1258655 Third Party Advisory
- https://bugzilla.suse.com/1259126 Third Party Advisory
- https://bugzilla.suse.com/1263689 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2025-38375 URL
- https://www.suse.com/security/cve/CVE-2025-39977 URL
- https://www.suse.com/security/cve/CVE-2025-71066 URL
- https://www.suse.com/security/cve/CVE-2026-23004 URL
- https://www.suse.com/security/cve/CVE-2026-23204 URL
- https://www.suse.com/security/cve/CVE-2026-31431 URL
Timeline
Published9 May 2026
Updated12 May 2026
First seen12 May 2026
Sources
SUSE-SU-2026:1798-1 · OSV
Track software like this
Free during beta