Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Enterprise Micro live patch may allow code execution
published 1 month ago
Summary
The kernel live patch for SUSE Linux Enterprise Micro 6.0 contains fixes for several flaws that could let a malicious user cause crashes or run unwanted code on the system. Applying this update ensures those weaknesses are closed and keeps the operating system stable and secure. Install the patch as soon as possible through your normal update process.
What to do
- Update suse kernel-livepatch-micro-6-0-rt_update_18 to version 10-1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.0 | suse | kernel-livepatch-micro-6-0-rt_update_18 |
< 10-1.1 Fix: upgrade to 10-1.1
|
Original advisory text
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues:
The following security issues were fixed:
- CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388).
- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458).
- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232).
- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074).
- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202623804-1/ Vendor Advisory
- https://bugzilla.suse.com/1267388 Third Party Advisory
- https://bugzilla.suse.com/1273232 Third Party Advisory
- https://bugzilla.suse.com/1274074 Third Party Advisory
- https://bugzilla.suse.com/1274942 Third Party Advisory
- https://bugzilla.suse.com/1275458 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-46150 URL
- https://www.suse.com/security/cve/CVE-2026-64423 URL
- https://www.suse.com/security/cve/CVE-2026-64561 URL
- https://www.suse.com/security/cve/CVE-2026-64564 URL
- https://www.suse.com/security/cve/CVE-2026-68138 URL
Timeline
Published14 Sep 2026
Updated27 Sep 2026
First seen27 Sep 2026
Sources
SUSE-SU-2026:23804-1 · OSV
Track software like this
Free during beta