SUSE-SU-2026:1188-1

csafDEsuse_csaf

Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

view advisory published 2026-04-05

Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

01

describes (8)

Related CVEs.

IDseverity exploitable
CVE-2026-23209UShigh7.8—
In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice repro to crash the kernel: ip l…
CVE-2026-23111UShigh7.8Exploit
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() ha…
CVE-2026-23074UShigh7.8—
In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it is only supposed…
CVE-2026-22999USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: do not free existing class in qfq_change_class() Fixes qfq_change_class() error case. cl-…
CVE-2025-71120USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf A zero length gss_token…
CVE-2025-40159US——
In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdp_desc validation Turned out certain clearly invalid values passed in xdp_des…
CVE-2025-40018US——
In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregi…
CVE-2025-39973US——
In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assi…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • Fixedkernel-livepatch-6_4_0-150700_7_3-rt-0:13-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedkernel-livepatch-6_4_0-150700_7_3-rt-0:13-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedkernel-livepatch-6_4_0-150700_7_3-rt-0:13-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedkernel-livepatch-6_4_0-150700_7_3-rt-0:13-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedkernel-livepatch-6_4_0-150700_7_3-rt-0:13-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedkernel-livepatch-6_4_0-150700_7_3-rt-0:13-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedkernel-livepatch-6_4_0-150700_7_3-rt-0:13-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedkernel-livepatch-6_4_0-150700_7_3-rt-0:13-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan