Security update for the Linux Kernel
| Announcement ID: | SUSE-SU-2026:1643-1 |
|---|---|
| Release Date: | 2026-04-28T13:27:24Z |
| Rating: | important |
| References: | |
| Cross-References: | |
| CVSS scores: |
|
| Affected Products: |
|
An update that solves 14 vulnerabilities and has five security fixes can now be installed.
Description:
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
- CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
- CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
- CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
- CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
- CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
- CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
- CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
- CVE-2026-23317: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (bsc#1260562).
- CVE-2026-23381: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260471).
- CVE-2026-23398: icmp: fix NULL pointer dereference in icmp_tag_validation() (bsc#1260730).
- CVE-2026-23412: netfilter: bpf: defer hook memory release until rcu readers are done (bsc#1261412).
- CVE-2026-23413: clsact: Fix use-after-free in init/destroy rollback asymmetry (bsc#1261498).
- CVE-2026-31788: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707).
The following non security issues were fixed:
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (bsc#1259461).
- KVM: x86/mmu: Retry fault before acquiring mmu_lock if mapping is changing (bsc#1253122).
- net: mana: fix use-after-free in add_adev() error path (git-fixes).
- net: mana: Trigger VF reset/recovery on health check failure due to HWC timeout (bsc#1259580).
- x86/platform/uv: Handle deconfigured sockets (bsc#1260347).
- xen/privcmd: unregister xenstore notifier on module exit (git-fixes).
Special Instructions and Notes:
- Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.6
zypper in -t patch SUSE-2026-1643=1 -
SUSE Linux Enterprise High Availability Extension 15 SP6
zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-1643=1 -
SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1643=1 -
SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1643=1 -
SUSE Linux Enterprise Live Patching 15-SP6
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-1643=1
Package List:
-
openSUSE Leap 15.6 (noarch nosrc)
- kernel-docs-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (noarch)
- kernel-docs-html-6.4.0-150600.23.95.1
- kernel-source-6.4.0-150600.23.95.1
- kernel-macros-6.4.0-150600.23.95.1
- kernel-source-vanilla-6.4.0-150600.23.95.1
- kernel-devel-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (nosrc ppc64le x86_64)
- kernel-debug-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (ppc64le x86_64)
- kernel-debug-devel-6.4.0-150600.23.95.1
- kernel-debug-debuginfo-6.4.0-150600.23.95.1
- kernel-debug-devel-debuginfo-6.4.0-150600.23.95.1
- kernel-debug-debugsource-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (x86_64)
- kernel-default-vdso-6.4.0-150600.23.95.1
- kernel-kvmsmall-vdso-debuginfo-6.4.0-150600.23.95.1
- kernel-default-vdso-debuginfo-6.4.0-150600.23.95.1
- kernel-debug-vdso-6.4.0-150600.23.95.1
- kernel-debug-vdso-debuginfo-6.4.0-150600.23.95.1
- kernel-kvmsmall-vdso-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (aarch64 ppc64le x86_64)
- kernel-kvmsmall-devel-debuginfo-6.4.0-150600.23.95.1
- kernel-kvmsmall-debugsource-6.4.0-150600.23.95.1
- kernel-default-base-6.4.0-150600.23.95.1.150600.12.44.1
- kernel-kvmsmall-devel-6.4.0-150600.23.95.1
- kernel-kvmsmall-debuginfo-6.4.0-150600.23.95.1
- kernel-default-base-rebuild-6.4.0-150600.23.95.1.150600.12.44.1
-
openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)
- kernel-default-optional-6.4.0-150600.23.95.1
- cluster-md-kmp-default-debuginfo-6.4.0-150600.23.95.1
- kernel-default-devel-6.4.0-150600.23.95.1
- gfs2-kmp-default-6.4.0-150600.23.95.1
- reiserfs-kmp-default-debuginfo-6.4.0-150600.23.95.1
- kernel-default-extra-6.4.0-150600.23.95.1
- cluster-md-kmp-default-6.4.0-150600.23.95.1
- kernel-default-livepatch-6.4.0-150600.23.95.1
- kernel-default-debugsource-6.4.0-150600.23.95.1
- kernel-default-devel-debuginfo-6.4.0-150600.23.95.1
- kernel-default-optional-debuginfo-6.4.0-150600.23.95.1
- kselftests-kmp-default-debuginfo-6.4.0-150600.23.95.1
- kernel-obs-build-debugsource-6.4.0-150600.23.95.1
- kernel-obs-qa-6.4.0-150600.23.95.1
- dlm-kmp-default-6.4.0-150600.23.95.1
- kselftests-kmp-default-6.4.0-150600.23.95.1
- kernel-default-extra-debuginfo-6.4.0-150600.23.95.1
- kernel-obs-build-6.4.0-150600.23.95.1
- dlm-kmp-default-debuginfo-6.4.0-150600.23.95.1
- ocfs2-kmp-default-debuginfo-6.4.0-150600.23.95.1
- ocfs2-kmp-default-6.4.0-150600.23.95.1
- gfs2-kmp-default-debuginfo-6.4.0-150600.23.95.1
- reiserfs-kmp-default-6.4.0-150600.23.95.1
- kernel-default-debuginfo-6.4.0-150600.23.95.1
- kernel-syms-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 nosrc)
- kernel-default-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (ppc64le s390x x86_64)
- kernel-livepatch-6_4_0-150600_23_95-default-debuginfo-1-150600.13.3.1
- kernel-livepatch-6_4_0-150600_23_95-default-1-150600.13.3.1
- kernel-default-livepatch-devel-6.4.0-150600.23.95.1
- kernel-livepatch-SLE15-SP6_Update_22-debugsource-1-150600.13.3.1
-
openSUSE Leap 15.6 (aarch64 nosrc ppc64le x86_64)
- kernel-kvmsmall-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (nosrc s390x)
- kernel-zfcpdump-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (s390x)
- kernel-zfcpdump-debugsource-6.4.0-150600.23.95.1
- kernel-zfcpdump-debuginfo-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (nosrc)
- dtb-aarch64-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (aarch64)
- kernel-64kb-devel-6.4.0-150600.23.95.1
- dtb-nvidia-6.4.0-150600.23.95.1
- dtb-broadcom-6.4.0-150600.23.95.1
- kernel-64kb-devel-debuginfo-6.4.0-150600.23.95.1
- kernel-64kb-optional-6.4.0-150600.23.95.1
- dtb-socionext-6.4.0-150600.23.95.1
- dtb-hisilicon-6.4.0-150600.23.95.1
- kernel-64kb-debuginfo-6.4.0-150600.23.95.1
- kselftests-kmp-64kb-6.4.0-150600.23.95.1
- dtb-arm-6.4.0-150600.23.95.1
- reiserfs-kmp-64kb-debuginfo-6.4.0-150600.23.95.1
- dtb-amd-6.4.0-150600.23.95.1
- dtb-apm-6.4.0-150600.23.95.1
- dtb-cavium-6.4.0-150600.23.95.1
- kselftests-kmp-64kb-debuginfo-6.4.0-150600.23.95.1
- kernel-64kb-debugsource-6.4.0-150600.23.95.1
- gfs2-kmp-64kb-debuginfo-6.4.0-150600.23.95.1
- dtb-rockchip-6.4.0-150600.23.95.1
- dtb-altera-6.4.0-150600.23.95.1
- dtb-sprd-6.4.0-150600.23.95.1
- dtb-apple-6.4.0-150600.23.95.1
- cluster-md-kmp-64kb-debuginfo-6.4.0-150600.23.95.1
- dtb-mediatek-6.4.0-150600.23.95.1
- dtb-freescale-6.4.0-150600.23.95.1
- dtb-renesas-6.4.0-150600.23.95.1
- ocfs2-kmp-64kb-6.4.0-150600.23.95.1
- dtb-exynos-6.4.0-150600.23.95.1
- kernel-64kb-optional-debuginfo-6.4.0-150600.23.95.1
- dlm-kmp-64kb-6.4.0-150600.23.95.1
- kernel-64kb-extra-debuginfo-6.4.0-150600.23.95.1
- dtb-allwinner-6.4.0-150600.23.95.1
- dtb-qcom-6.4.0-150600.23.95.1
- dtb-amazon-6.4.0-150600.23.95.1
- dtb-lg-6.4.0-150600.23.95.1
- gfs2-kmp-64kb-6.4.0-150600.23.95.1
- kernel-64kb-extra-6.4.0-150600.23.95.1
- dlm-kmp-64kb-debuginfo-6.4.0-150600.23.95.1
- reiserfs-kmp-64kb-6.4.0-150600.23.95.1
- ocfs2-kmp-64kb-debuginfo-6.4.0-150600.23.95.1
- dtb-marvell-6.4.0-150600.23.95.1
- dtb-amlogic-6.4.0-150600.23.95.1
- cluster-md-kmp-64kb-6.4.0-150600.23.95.1
- dtb-xilinx-6.4.0-150600.23.95.1
-
openSUSE Leap 15.6 (aarch64 nosrc)
- kernel-64kb-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise High Availability Extension 15 SP6 (nosrc)
- kernel-default-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64)
- kernel-default-debugsource-6.4.0-150600.23.95.1
- kernel-default-debuginfo-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
- dlm-kmp-default-debuginfo-6.4.0-150600.23.95.1
- kernel-obs-build-6.4.0-150600.23.95.1
- ocfs2-kmp-default-debuginfo-6.4.0-150600.23.95.1
- cluster-md-kmp-default-debuginfo-6.4.0-150600.23.95.1
- ocfs2-kmp-default-6.4.0-150600.23.95.1
- dlm-kmp-default-6.4.0-150600.23.95.1
- gfs2-kmp-default-debuginfo-6.4.0-150600.23.95.1
- gfs2-kmp-default-6.4.0-150600.23.95.1
- kernel-default-debugsource-6.4.0-150600.23.95.1
- kernel-default-devel-6.4.0-150600.23.95.1
- kernel-default-devel-debuginfo-6.4.0-150600.23.95.1
- reiserfs-kmp-default-6.4.0-150600.23.95.1
- reiserfs-kmp-default-debuginfo-6.4.0-150600.23.95.1
- kernel-obs-build-debugsource-6.4.0-150600.23.95.1
- kernel-default-debuginfo-6.4.0-150600.23.95.1
- cluster-md-kmp-default-6.4.0-150600.23.95.1
- kernel-syms-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc)
- kernel-64kb-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64)
- kernel-64kb-debuginfo-6.4.0-150600.23.95.1
- kernel-64kb-debugsource-6.4.0-150600.23.95.1
- kernel-64kb-devel-6.4.0-150600.23.95.1
- kernel-64kb-devel-debuginfo-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64 nosrc)
- kernel-default-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le x86_64)
- kernel-default-base-6.4.0-150600.23.95.1.150600.12.44.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (noarch)
- kernel-macros-6.4.0-150600.23.95.1
- kernel-source-6.4.0-150600.23.95.1
- kernel-devel-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (noarch nosrc)
- kernel-docs-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (nosrc s390x)
- kernel-zfcpdump-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (s390x)
- kernel-zfcpdump-debugsource-6.4.0-150600.23.95.1
- kernel-zfcpdump-debuginfo-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
- dlm-kmp-default-debuginfo-6.4.0-150600.23.95.1
- kernel-default-base-6.4.0-150600.23.95.1.150600.12.44.1
- kernel-obs-build-6.4.0-150600.23.95.1
- ocfs2-kmp-default-debuginfo-6.4.0-150600.23.95.1
- cluster-md-kmp-default-debuginfo-6.4.0-150600.23.95.1
- ocfs2-kmp-default-6.4.0-150600.23.95.1
- dlm-kmp-default-6.4.0-150600.23.95.1
- gfs2-kmp-default-debuginfo-6.4.0-150600.23.95.1
- gfs2-kmp-default-6.4.0-150600.23.95.1
- kernel-default-debugsource-6.4.0-150600.23.95.1
- kernel-default-devel-6.4.0-150600.23.95.1
- kernel-default-devel-debuginfo-6.4.0-150600.23.95.1
- reiserfs-kmp-default-6.4.0-150600.23.95.1
- reiserfs-kmp-default-debuginfo-6.4.0-150600.23.95.1
- kernel-obs-build-debugsource-6.4.0-150600.23.95.1
- kernel-default-debuginfo-6.4.0-150600.23.95.1
- cluster-md-kmp-default-6.4.0-150600.23.95.1
- kernel-syms-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (nosrc ppc64le x86_64)
- kernel-default-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch)
- kernel-macros-6.4.0-150600.23.95.1
- kernel-source-6.4.0-150600.23.95.1
- kernel-devel-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch nosrc)
- kernel-docs-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Live Patching 15-SP6 (nosrc)
- kernel-default-6.4.0-150600.23.95.1
-
SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64)
- kernel-livepatch-SLE15-SP6_Update_22-debugsource-1-150600.13.3.1
- kernel-livepatch-6_4_0-150600_23_95-default-debuginfo-1-150600.13.3.1
- kernel-default-livepatch-6.4.0-150600.23.95.1
- kernel-default-livepatch-devel-6.4.0-150600.23.95.1
- kernel-livepatch-6_4_0-150600_23_95-default-1-150600.13.3.1
- kernel-default-debugsource-6.4.0-150600.23.95.1
- kernel-default-debuginfo-6.4.0-150600.23.95.1
References:
- https://www.suse.com/security/cve/CVE-2025-39998.html
- https://www.suse.com/security/cve/CVE-2026-23103.html
- https://www.suse.com/security/cve/CVE-2026-23231.html
- https://www.suse.com/security/cve/CVE-2026-23243.html
- https://www.suse.com/security/cve/CVE-2026-23272.html
- https://www.suse.com/security/cve/CVE-2026-23274.html
- https://www.suse.com/security/cve/CVE-2026-23278.html
- https://www.suse.com/security/cve/CVE-2026-23293.html
- https://www.suse.com/security/cve/CVE-2026-23317.html
- https://www.suse.com/security/cve/CVE-2026-23381.html
- https://www.suse.com/security/cve/CVE-2026-23398.html
- https://www.suse.com/security/cve/CVE-2026-23412.html
- https://www.suse.com/security/cve/CVE-2026-23413.html
- https://www.suse.com/security/cve/CVE-2026-31788.html
- https://bugzilla.suse.com/show_bug.cgi?id=1252073
- https://bugzilla.suse.com/show_bug.cgi?id=1253122
- https://bugzilla.suse.com/show_bug.cgi?id=1257506
- https://bugzilla.suse.com/show_bug.cgi?id=1257773
- https://bugzilla.suse.com/show_bug.cgi?id=1259188
- https://bugzilla.suse.com/show_bug.cgi?id=1259461
- https://bugzilla.suse.com/show_bug.cgi?id=1259580
- https://bugzilla.suse.com/show_bug.cgi?id=1259707
- https://bugzilla.suse.com/show_bug.cgi?id=1259797
- https://bugzilla.suse.com/show_bug.cgi?id=1259998
- https://bugzilla.suse.com/show_bug.cgi?id=1260005
- https://bugzilla.suse.com/show_bug.cgi?id=1260009
- https://bugzilla.suse.com/show_bug.cgi?id=1260347
- https://bugzilla.suse.com/show_bug.cgi?id=1260471
- https://bugzilla.suse.com/show_bug.cgi?id=1260486
- https://bugzilla.suse.com/show_bug.cgi?id=1260562
- https://bugzilla.suse.com/show_bug.cgi?id=1260730
- https://bugzilla.suse.com/show_bug.cgi?id=1261412
- https://bugzilla.suse.com/show_bug.cgi?id=1261498