Upstream information

CVE-2026-43284 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

xfrm: esp: avoid in-place decrypt on shared skb frags

MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP
marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter(),
so later paths that may modify packet data can first make a private
copy. The IPv4/IPv6 datagram append paths did not set this flag when
splicing pages into UDP skbs.

That leaves an ESP-in-UDP packet made from shared pipe pages looking
like an ordinary uncloned nonlinear skb. ESP input then takes the no-COW
fast path for uncloned skbs without a frag_list and decrypts in place
over data that is not owned privately by the skb.

Mark IPv4/IPv6 datagram splice frags with SKBFL_SHARED_FRAG, matching
TCP. Also make ESP input fall back to skb_cow_data() when the flag is
present, so ESP does not decrypt externally backed frags in place.
Private nonlinear skb frags still use the existing fast path.

This intentionally does not change ESP output. In esp_output_head(),
the path that appends the ESP trailer to existing skb tailroom without
calling skb_cow_data() is not reachable for nonlinear skbs:
skb_tailroom() returns zero when skb->data_len is nonzero, while ESP
tailen is positive. Thus ESP output will either use the separate
destination-frag path or fall back to skb_cow_data().

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having important severity.

CVSS v3 Scores
CVSS detail CNA (CISA-ADP) SUSE
Base Score 7.8 8.8
Vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector Local Local
Attack Complexity High Low
Privileges Required Low Low
User Interaction None None
Scope Changed Changed
Confidentiality Impact High High
Integrity Impact High High
Availability Impact High High
CVSSv3 Version 3.1 3.1

Note from the SUSE Security Team on the kernel-default package

SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details.

SUSE Bugzilla entries: 1264449 [NEW], 1264459 [NEW]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Liberty Linux 8
  • bpftool >= 4.18.0-553.123.1.el8_10.1
  • kernel >= 4.18.0-553.123.1.el8_10.1
  • kernel-abi-stablelists >= 4.18.0-553.123.1.el8_10.1
  • kernel-core >= 4.18.0-553.123.1.el8_10.1
  • kernel-cross-headers >= 4.18.0-553.123.1.el8_10.1
  • kernel-debug >= 4.18.0-553.123.1.el8_10.1
  • kernel-debug-core >= 4.18.0-553.123.1.el8_10.1
  • kernel-debug-devel >= 4.18.0-553.123.1.el8_10.1
  • kernel-debug-modules >= 4.18.0-553.123.1.el8_10.1
  • kernel-debug-modules-extra >= 4.18.0-553.123.1.el8_10.1
  • kernel-devel >= 4.18.0-553.123.1.el8_10.1
  • kernel-doc >= 4.18.0-553.123.1.el8_10.1
  • kernel-headers >= 4.18.0-553.123.1.el8_10.1
  • kernel-ipaclones-internal >= 4.18.0-553.123.1.el8_10.1
  • kernel-modules >= 4.18.0-553.123.1.el8_10.1
  • kernel-modules-extra >= 4.18.0-553.123.1.el8_10.1
  • kernel-selftests-internal >= 4.18.0-553.123.1.el8_10.1
  • kernel-tools >= 4.18.0-553.123.1.el8_10.1
  • kernel-tools-libs >= 4.18.0-553.123.1.el8_10.1
  • kernel-tools-libs-devel >= 4.18.0-553.123.1.el8_10.1
  • perf >= 4.18.0-553.123.1.el8_10.1
  • python3-perf >= 4.18.0-553.123.1.el8_10.1
 Patchnames:
ESBA-2026:0090
SUSE Linux Enterprise Live Patching 15 SP7
    		Patchnames:
    SUSE-SLE-Module-Live-Patching-15-SP7-2026-1778
    SUSE Linux Enterprise Real Time 15 SP7
    SUSE Real Time Module 15 SP7
    • cluster-md-kmp-rt >= 6.4.0-150700.7.44.1
    • dlm-kmp-rt >= 6.4.0-150700.7.44.1
    • gfs2-kmp-rt >= 6.4.0-150700.7.44.1
    • kernel-devel-rt >= 6.4.0-150700.7.44.1
    • kernel-rt >= 6.4.0-150700.7.44.1
    • kernel-rt-devel >= 6.4.0-150700.7.44.1
    • kernel-source-rt >= 6.4.0-150700.7.44.1
    • kernel-syms-rt >= 6.4.0-150700.7.44.1
    • ocfs2-kmp-rt >= 6.4.0-150700.7.44.1
    		 Patchnames:
    SUSE-SLE-Module-RT-15-SP7-2026-1778

    List of packages in QA

    Product(s) Package(s)
    SUSE Linux Enterprise High Availability Extension 15 SP4
    • cluster-md-kmp-default >= 5.14.21-150400.24.208.1
    • dlm-kmp-default >= 5.14.21-150400.24.208.1
    • gfs2-kmp-default >= 5.14.21-150400.24.208.1
    • ocfs2-kmp-default >= 5.14.21-150400.24.208.1
    SUSE Linux Enterprise High Availability Extension 15 SP7
    • cluster-md-kmp-default >= 6.4.0-150700.53.45.1
    • dlm-kmp-default >= 6.4.0-150700.53.45.1
    • gfs2-kmp-default >= 6.4.0-150700.53.45.1
    • ocfs2-kmp-default >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
    • kernel-64kb >= 5.14.21-150400.24.208.1
    • kernel-64kb-devel >= 5.14.21-150400.24.208.1
    • kernel-default >= 5.14.21-150400.24.208.1
    • kernel-default-base >= 5.14.21-150400.24.208.1.150400.24.106.1
    • kernel-default-devel >= 5.14.21-150400.24.208.1
    • kernel-devel >= 5.14.21-150400.24.208.1
    • kernel-docs >= 5.14.21-150400.24.208.1
    • kernel-macros >= 5.14.21-150400.24.208.1
    • kernel-obs-build >= 5.14.21-150400.24.208.1
    • kernel-source >= 5.14.21-150400.24.208.1
    • kernel-syms >= 5.14.21-150400.24.208.1
    • reiserfs-kmp-default >= 5.14.21-150400.24.208.1
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
    • kernel-64kb >= 5.14.21-150400.24.208.1
    • kernel-64kb-devel >= 5.14.21-150400.24.208.1
    • kernel-default >= 5.14.21-150400.24.208.1
    • kernel-default-base >= 5.14.21-150400.24.208.1.150400.24.106.1
    • kernel-default-devel >= 5.14.21-150400.24.208.1
    • kernel-devel >= 5.14.21-150400.24.208.1
    • kernel-docs >= 5.14.21-150400.24.208.1
    • kernel-macros >= 5.14.21-150400.24.208.1
    • kernel-obs-build >= 5.14.21-150400.24.208.1
    • kernel-source >= 5.14.21-150400.24.208.1
    • kernel-syms >= 5.14.21-150400.24.208.1
    • reiserfs-kmp-default >= 5.14.21-150400.24.208.1
    SUSE Linux Enterprise Micro 5.3
    • kernel-default >= 5.14.21-150400.24.208.1
    • kernel-default-base >= 5.14.21-150400.24.208.1.150400.24.106.1
    • kernel-macros >= 5.14.21-150400.24.208.1
    • kernel-source >= 5.14.21-150400.24.208.1
    SUSE Linux Enterprise Micro 5.4
    • kernel-default >= 5.14.21-150400.24.208.1
    • kernel-default-base >= 5.14.21-150400.24.208.1.150400.24.106.1
    • kernel-macros >= 5.14.21-150400.24.208.1
    • kernel-source >= 5.14.21-150400.24.208.1
    SUSE Linux Enterprise Micro 5.5
    • kernel-devel-rt >= 5.14.21-150500.13.133.1
    • kernel-rt >= 5.14.21-150500.13.133.1
    • kernel-source-rt >= 5.14.21-150500.13.133.1
    SUSE Linux Enterprise Module for Basesystem 15 SP7
    • kernel-64kb >= 6.4.0-150700.53.45.1
    • kernel-64kb-devel >= 6.4.0-150700.53.45.1
    • kernel-default >= 6.4.0-150700.53.45.1
    • kernel-default-base >= 6.4.0-150700.53.45.1.150700.17.29.2
    • kernel-default-devel >= 6.4.0-150700.53.45.1
    • kernel-devel >= 6.4.0-150700.53.45.1
    • kernel-macros >= 6.4.0-150700.53.45.1
    • kernel-zfcpdump >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server 15 SP7
    • kernel-64kb >= 6.4.0-150700.53.45.1
    • kernel-64kb-devel >= 6.4.0-150700.53.45.1
    • kernel-default >= 6.4.0-150700.53.45.1
    • kernel-default-base >= 6.4.0-150700.53.45.1.150700.17.29.2
    • kernel-default-devel >= 6.4.0-150700.53.45.1
    • kernel-devel >= 6.4.0-150700.53.45.1
    • kernel-macros >= 6.4.0-150700.53.45.1
    • kernel-zfcpdump >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Desktop 15 SP7
    • kernel-64kb >= 6.4.0-150700.53.45.1
    • kernel-64kb-devel >= 6.4.0-150700.53.45.1
    • kernel-default >= 6.4.0-150700.53.45.1
    • kernel-default-base >= 6.4.0-150700.53.45.1.150700.17.29.2
    • kernel-default-devel >= 6.4.0-150700.53.45.1
    • kernel-devel >= 6.4.0-150700.53.45.1
    • kernel-macros >= 6.4.0-150700.53.45.1
    • kernel-zfcpdump >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server for SAP Applications 15 SP7
    • kernel-64kb >= 6.4.0-150700.53.45.1
    • kernel-64kb-devel >= 6.4.0-150700.53.45.1
    • kernel-default >= 6.4.0-150700.53.45.1
    • kernel-default-base >= 6.4.0-150700.53.45.1.150700.17.29.2
    • kernel-default-devel >= 6.4.0-150700.53.45.1
    • kernel-devel >= 6.4.0-150700.53.45.1
    • kernel-macros >= 6.4.0-150700.53.45.1
    • kernel-zfcpdump >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise High Performance Computing 15 SP7
    • kernel-64kb >= 6.4.0-150700.53.45.1
    • kernel-64kb-devel >= 6.4.0-150700.53.45.1
    • kernel-default >= 6.4.0-150700.53.45.1
    • kernel-default-base >= 6.4.0-150700.53.45.1.150700.17.29.2
    • kernel-default-devel >= 6.4.0-150700.53.45.1
    • kernel-devel >= 6.4.0-150700.53.45.1
    • kernel-macros >= 6.4.0-150700.53.45.1
    • kernel-zfcpdump >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Module for Development Tools 15 SP7
    • kernel-docs >= 6.4.0-150700.53.45.1
    • kernel-obs-build >= 6.4.0-150700.53.45.1
    • kernel-source >= 6.4.0-150700.53.45.1
    • kernel-syms >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server 15 SP7
    • kernel-docs >= 6.4.0-150700.53.45.1
    • kernel-obs-build >= 6.4.0-150700.53.45.1
    • kernel-source >= 6.4.0-150700.53.45.1
    • kernel-syms >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Desktop 15 SP7
    • kernel-docs >= 6.4.0-150700.53.45.1
    • kernel-obs-build >= 6.4.0-150700.53.45.1
    • kernel-source >= 6.4.0-150700.53.45.1
    • kernel-syms >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server for SAP Applications 15 SP7
    • kernel-docs >= 6.4.0-150700.53.45.1
    • kernel-obs-build >= 6.4.0-150700.53.45.1
    • kernel-source >= 6.4.0-150700.53.45.1
    • kernel-syms >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise High Performance Computing 15 SP7
    • kernel-docs >= 6.4.0-150700.53.45.1
    • kernel-obs-build >= 6.4.0-150700.53.45.1
    • kernel-source >= 6.4.0-150700.53.45.1
    • kernel-syms >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Module for Legacy 15 SP7
    • reiserfs-kmp-default >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server 15 SP7
    • reiserfs-kmp-default >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server for SAP Applications 15 SP7
    • reiserfs-kmp-default >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise High Performance Computing 15 SP7
    • reiserfs-kmp-default >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Module for Public Cloud 15 SP7
    • kernel-azure >= 6.4.0-150700.53.45.1
    • kernel-azure-devel >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server 15 SP7
    • kernel-azure >= 6.4.0-150700.53.45.1
    • kernel-azure-devel >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server for SAP Applications 15 SP7
    • kernel-azure >= 6.4.0-150700.53.45.1
    • kernel-azure-devel >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise High Performance Computing 15 SP7
    • kernel-azure >= 6.4.0-150700.53.45.1
    • kernel-azure-devel >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server 12 SP5-LTSS
    • cluster-md-kmp-default >= 4.12.14-122.305.1
    • dlm-kmp-default >= 4.12.14-122.305.1
    • gfs2-kmp-default >= 4.12.14-122.305.1
    • kernel-default >= 4.12.14-122.305.1
    • kernel-default-base >= 4.12.14-122.305.1
    • kernel-default-devel >= 4.12.14-122.305.1
    • kernel-default-man >= 4.12.14-122.305.1
    • kernel-devel >= 4.12.14-122.305.1
    • kernel-macros >= 4.12.14-122.305.1
    • kernel-source >= 4.12.14-122.305.1
    • kernel-syms >= 4.12.14-122.305.1
    • ocfs2-kmp-default >= 4.12.14-122.305.1
    SUSE Linux Enterprise Server 12 SP5-LTSS
    • cluster-md-kmp-default >= 4.12.14-122.305.1
    • dlm-kmp-default >= 4.12.14-122.305.1
    • gfs2-kmp-default >= 4.12.14-122.305.1
    • kernel-default >= 4.12.14-122.305.1
    • kernel-default-base >= 4.12.14-122.305.1
    • kernel-default-devel >= 4.12.14-122.305.1
    • kernel-default-man >= 4.12.14-122.305.1
    • kernel-devel >= 4.12.14-122.305.1
    • kernel-macros >= 4.12.14-122.305.1
    • kernel-source >= 4.12.14-122.305.1
    • kernel-syms >= 4.12.14-122.305.1
    • ocfs2-kmp-default >= 4.12.14-122.305.1
    SUSE Linux Enterprise Server 15 SP4-LTSS
    • kernel-64kb >= 5.14.21-150400.24.208.1
    • kernel-64kb-devel >= 5.14.21-150400.24.208.1
    • kernel-default >= 5.14.21-150400.24.208.1
    • kernel-default-base >= 5.14.21-150400.24.208.1.150400.24.106.1
    • kernel-default-devel >= 5.14.21-150400.24.208.1
    • kernel-devel >= 5.14.21-150400.24.208.1
    • kernel-docs >= 5.14.21-150400.24.208.1
    • kernel-macros >= 5.14.21-150400.24.208.1
    • kernel-obs-build >= 5.14.21-150400.24.208.1
    • kernel-source >= 5.14.21-150400.24.208.1
    • kernel-syms >= 5.14.21-150400.24.208.1
    • kernel-zfcpdump >= 5.14.21-150400.24.208.1
    • reiserfs-kmp-default >= 5.14.21-150400.24.208.1
    SUSE Linux Enterprise Server 15 SP4-LTSS
    • kernel-64kb >= 5.14.21-150400.24.208.1
    • kernel-64kb-devel >= 5.14.21-150400.24.208.1
    • kernel-default >= 5.14.21-150400.24.208.1
    • kernel-default-base >= 5.14.21-150400.24.208.1.150400.24.106.1
    • kernel-default-devel >= 5.14.21-150400.24.208.1
    • kernel-devel >= 5.14.21-150400.24.208.1
    • kernel-docs >= 5.14.21-150400.24.208.1
    • kernel-macros >= 5.14.21-150400.24.208.1
    • kernel-obs-build >= 5.14.21-150400.24.208.1
    • kernel-source >= 5.14.21-150400.24.208.1
    • kernel-syms >= 5.14.21-150400.24.208.1
    • kernel-zfcpdump >= 5.14.21-150400.24.208.1
    • reiserfs-kmp-default >= 5.14.21-150400.24.208.1
    SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
    • cluster-md-kmp-default >= 4.12.14-122.305.1
    • dlm-kmp-default >= 4.12.14-122.305.1
    • gfs2-kmp-default >= 4.12.14-122.305.1
    • kernel-default >= 4.12.14-122.305.1
    • kernel-default-base >= 4.12.14-122.305.1
    • kernel-default-devel >= 4.12.14-122.305.1
    • kernel-devel >= 4.12.14-122.305.1
    • kernel-macros >= 4.12.14-122.305.1
    • kernel-source >= 4.12.14-122.305.1
    • kernel-syms >= 4.12.14-122.305.1
    • ocfs2-kmp-default >= 4.12.14-122.305.1
    SUSE Linux Enterprise Server for SAP Applications 15 SP4
    • kernel-default >= 5.14.21-150400.24.208.1
    • kernel-default-base >= 5.14.21-150400.24.208.1.150400.24.106.1
    • kernel-default-devel >= 5.14.21-150400.24.208.1
    • kernel-devel >= 5.14.21-150400.24.208.1
    • kernel-docs >= 5.14.21-150400.24.208.1
    • kernel-macros >= 5.14.21-150400.24.208.1
    • kernel-obs-build >= 5.14.21-150400.24.208.1
    • kernel-source >= 5.14.21-150400.24.208.1
    • kernel-syms >= 5.14.21-150400.24.208.1
    • reiserfs-kmp-default >= 5.14.21-150400.24.208.1
    SUSE Linux Enterprise Workstation Extension 15 SP7
    • kernel-default-extra >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server 15 SP7
    • kernel-default-extra >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Server for SAP Applications 15 SP7
    • kernel-default-extra >= 6.4.0-150700.53.45.1
    SUSE Linux Enterprise Desktop 15 SP7
    • kernel-default-extra >= 6.4.0-150700.53.45.1
    SUSE Manager Proxy LTS 4.3
    • kernel-default >= 5.14.21-150400.24.208.1
    • kernel-default-base >= 5.14.21-150400.24.208.1.150400.24.106.1
    • kernel-default-devel >= 5.14.21-150400.24.208.1
    • kernel-devel >= 5.14.21-150400.24.208.1
    • kernel-macros >= 5.14.21-150400.24.208.1
    • kernel-source >= 5.14.21-150400.24.208.1
    • kernel-syms >= 5.14.21-150400.24.208.1
    SUSE Manager Retail Branch Server LTS 4.3
    • kernel-default >= 5.14.21-150400.24.208.1
    • kernel-default-base >= 5.14.21-150400.24.208.1.150400.24.106.1
    • kernel-default-devel >= 5.14.21-150400.24.208.1
    • kernel-devel >= 5.14.21-150400.24.208.1
    • kernel-macros >= 5.14.21-150400.24.208.1
    SUSE Manager Server LTS 4.3
    • kernel-default >= 5.14.21-150400.24.208.1
    • kernel-default-base >= 5.14.21-150400.24.208.1.150400.24.106.1
    • kernel-default-devel >= 5.14.21-150400.24.208.1
    • kernel-devel >= 5.14.21-150400.24.208.1
    • kernel-macros >= 5.14.21-150400.24.208.1
    • kernel-source >= 5.14.21-150400.24.208.1
    • kernel-syms >= 5.14.21-150400.24.208.1
    • kernel-zfcpdump >= 5.14.21-150400.24.208.1

    Status of this issue by product and package

    Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

    Product(s) Source package State
    Products under general support and receiving all security fixes.
    SUSE Linux Enterprise Desktop 15 SP7 kernel-64kb In progress
    SUSE Linux Enterprise Desktop 15 SP7 kernel-default In progress
    SUSE Linux Enterprise Desktop 15 SP7 kernel-default-base In progress
    SUSE Linux Enterprise Desktop 15 SP7 kernel-docs In progress
    SUSE Linux Enterprise Desktop 15 SP7 kernel-obs-build In progress
    SUSE Linux Enterprise Desktop 15 SP7 kernel-source In progress
    SUSE Linux Enterprise Desktop 15 SP7 kernel-syms In progress
    SUSE Linux Enterprise Desktop 15 SP7 kernel-zfcpdump In progress
    SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-default In progress
    SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-64kb In progress
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-azure In progress
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-default In progress
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-default-base In progress
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-docs In progress
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-obs-build In progress
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-source In progress
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-syms In progress
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-zfcpdump In progress
    SUSE Linux Enterprise Live Patching 15 SP7 kernel-default Affected
    SUSE Linux Enterprise Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_13 Released
    SUSE Linux Enterprise Live Patching 15 SP7 kernel-source Affected
    SUSE Linux Enterprise Micro 5.3 kernel-default In progress
    SUSE Linux Enterprise Micro 5.3 kernel-default-base In progress
    SUSE Linux Enterprise Micro 5.3 kernel-rt Affected
    SUSE Linux Enterprise Micro 5.3 kernel-source In progress
    SUSE Linux Enterprise Micro 5.3 kernel-source-rt Affected
    SUSE Linux Enterprise Micro 5.4 kernel-default In progress
    SUSE Linux Enterprise Micro 5.4 kernel-default-base In progress
    SUSE Linux Enterprise Micro 5.4 kernel-rt Affected
    SUSE Linux Enterprise Micro 5.4 kernel-source In progress
    SUSE Linux Enterprise Micro 5.4 kernel-source-rt Affected
    SUSE Linux Enterprise Micro 5.5 kernel-default Affected
    SUSE Linux Enterprise Micro 5.5 kernel-rt In progress
    SUSE Linux Enterprise Micro 5.5 kernel-source Affected
    SUSE Linux Enterprise Micro 5.5 kernel-source-rt In progress
    SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-64kb In progress
    SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-default In progress
    SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-default-base In progress
    SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-source In progress
    SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-zfcpdump In progress
    SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-default Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-docs In progress
    SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-obs-build In progress
    SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-source In progress
    SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-syms In progress
    SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-default In progress
    SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-source Affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-azure In progress
    SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-default Affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-source Affected
    SUSE Linux Enterprise Real Time 15 SP7 kernel-rt Released
    SUSE Linux Enterprise Real Time 15 SP7 kernel-source-rt Released
    SUSE Linux Enterprise Real Time 15 SP7 kernel-syms-rt Released
    SUSE Linux Enterprise Server 15 SP7 kernel-64kb In progress
    SUSE Linux Enterprise Server 15 SP7 kernel-azure In progress
    SUSE Linux Enterprise Server 15 SP7 kernel-default In progress
    SUSE Linux Enterprise Server 15 SP7 kernel-default-base In progress
    SUSE Linux Enterprise Server 15 SP7 kernel-docs In progress
    SUSE Linux Enterprise Server 15 SP7 kernel-obs-build In progress
    SUSE Linux Enterprise Server 15 SP7 kernel-source In progress
    SUSE Linux Enterprise Server 15 SP7 kernel-syms In progress
    SUSE Linux Enterprise Server 15 SP7 kernel-zfcpdump In progress
    SUSE Linux Enterprise Server 16.0 kernel-default Affected
    SUSE Linux Enterprise Server 16.0 kernel-source In progress
    SUSE Linux Enterprise Server 16.1 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-64kb In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-azure In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-default In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-default-base In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-docs In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-obs-build In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-source In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-syms In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-zfcpdump In progress
    SUSE Linux Enterprise Server for SAP applications 16.0 kernel-default Affected
    SUSE Linux Enterprise Server for SAP applications 16.0 kernel-source In progress
    SUSE Linux Enterprise Server for SAP applications 16.1 kernel-source Affected
    SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-default In progress
    SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-source Affected
    SUSE Linux Micro 6.0 kernel-default Affected
    SUSE Linux Micro 6.0 kernel-source Affected
    SUSE Linux Micro 6.0 kernel-source-rt Affected
    SUSE Linux Micro 6.1 kernel-default Affected
    SUSE Linux Micro 6.1 kernel-source Affected
    SUSE Linux Micro 6.1 kernel-source-rt Affected
    SUSE Linux Micro 6.2 kernel-default Affected
    SUSE Linux Micro 6.2 kernel-source In progress
    SUSE Real Time Module 15 SP7 kernel-rt Released
    SUSE Real Time Module 15 SP7 kernel-source-rt Released
    SUSE Real Time Module 15 SP7 kernel-syms-rt Released
    Products under Long Term Service Pack support and receiving important and critical security fixes.
    SUSE Linux Enterprise High Availability Extension 15 SP4 kernel-default In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-64kb In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-base In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-docs In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-obs-build In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-syms In progress
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-source Affected
    SUSE Linux Enterprise Live Patching 12 SP5 kernel-default Affected
    SUSE Linux Enterprise Live Patching 12 SP5 kernel-source Affected
    SUSE Linux Enterprise Live Patching 15 SP4 kernel-default Affected
    SUSE Linux Enterprise Live Patching 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Live Patching 15 SP5 kernel-default Affected
    SUSE Linux Enterprise Live Patching 15 SP5 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source Affected
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP5 kernel-source Affected
    SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default In progress
    SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source In progress
    SUSE Linux Enterprise Server 12 SP5-LTSS kernel-syms In progress
    SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-default Affected
    SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-source Affected
    SUSE Linux Enterprise Server 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-64kb In progress
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default In progress
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default-base In progress
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-docs In progress
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-obs-build In progress
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source In progress
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-syms In progress
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-zfcpdump In progress
    SUSE Linux Enterprise Server 15 SP5 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 15 SP5-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 15 SP6 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP6-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 15 SP6-LTSS kernel-source Affected
    SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-default In progress
    SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-source In progress
    SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-syms In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source Affected
    SUSE Manager Proxy 4.3 kernel-source Affected
    SUSE Manager Proxy LTS 4.3 kernel-default In progress
    SUSE Manager Proxy LTS 4.3 kernel-default-base In progress
    SUSE Manager Proxy LTS 4.3 kernel-source In progress
    SUSE Manager Proxy LTS 4.3 kernel-syms In progress
    SUSE Manager Retail Branch Server 4.3 kernel-source Affected
    SUSE Manager Retail Branch Server LTS 4.3 kernel-default In progress
    SUSE Manager Retail Branch Server LTS 4.3 kernel-default-base In progress
    SUSE Manager Retail Branch Server LTS 4.3 kernel-source In progress
    SUSE Manager Server 4.3 kernel-source Affected
    SUSE Manager Server LTS 4.3 kernel-default In progress
    SUSE Manager Server LTS 4.3 kernel-default-base In progress
    SUSE Manager Server LTS 4.3 kernel-source In progress
    SUSE Manager Server LTS 4.3 kernel-syms In progress
    SUSE Manager Server LTS 4.3 kernel-zfcpdump In progress
    Products past their end of life and not receiving proactive updates anymore.
    SUSE CaaS Platform 4.0 kernel-source Affected
    SUSE Enterprise Storage 6 kernel-source Affected
    SUSE Enterprise Storage 7 kernel-source Affected
    SUSE Enterprise Storage 7.1 kernel-source Affected
    SUSE Linux Enterprise Desktop 11 SP4 kernel-source Not affected
    SUSE Linux Enterprise Desktop 12 SP4 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP5 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP6 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP1 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-64kb In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default-base In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-docs In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-obs-build In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-syms In progress
    SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source Affected
    SUSE Linux Enterprise Micro 5.0 kernel-default Affected
    SUSE Linux Enterprise Micro 5.1 kernel-default Affected
    SUSE Linux Enterprise Micro 5.2 kernel-default Affected
    SUSE Linux Enterprise Micro 5.2 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source-rt Affected
    SUSE Linux Enterprise Real Time 15 SP5 kernel-source-rt Affected
    SUSE Linux Enterprise Server 11 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP4 kernel-source Affected
    SUSE Linux Enterprise Server 12 SP4-ESPOS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP1-BCL kernel-source Affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-source Affected
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-base In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-docs In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-obs-build In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-syms In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source Affected
    SUSE Manager Proxy 4.0 kernel-source Affected
    SUSE Manager Proxy 4.1 kernel-source Affected
    SUSE Manager Proxy 4.2 kernel-source Affected
    SUSE Manager Retail Branch Server 4.0 kernel-source Affected
    SUSE Manager Retail Branch Server 4.1 kernel-source Affected
    SUSE Manager Retail Branch Server 4.2 kernel-source Affected
    SUSE Manager Server 4.0 kernel-source Affected
    SUSE Manager Server 4.1 kernel-source Affected
    SUSE Manager Server 4.2 kernel-source Affected
    SUSE OpenStack Cloud 9 kernel-source Affected
    SUSE OpenStack Cloud Crowbar 9 kernel-source Affected
    SUSE Real Time Module 15 SP4 kernel-source-rt Affected
    SUSE Real Time Module 15 SP5 kernel-source-rt Affected
    openSUSE Leap 15.3 kernel-source Affected
    openSUSE Leap 15.4 kernel-source Affected
    openSUSE Leap 15.4 kernel-source-rt Affected
    openSUSE Leap 15.5 kernel-source Affected
    openSUSE Leap 15.5 kernel-source-rt Affected
    openSUSE Leap 15.6 kernel-source Affected

    SUSE Timeline for this CVE

    CVE page created: Fri May 8 12:09:00 2026
    CVE page last modified: Fri May 8 21:25:07 2026