Security update for the Linux Kernel
| Announcement ID: | SUSE-SU-2026:2310-1 |
|---|---|
| Release Date: | 2026-06-09T08:18:37Z |
| Rating: | important |
| References: |
|
| Cross-References: |
|
| CVSS scores: |
|
| Affected Products: |
|
An update that solves 22 vulnerabilities and has five security fixes can now be installed.
Description:
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700).
- CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
- CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
- CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
- CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
- CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
- CVE-2026-43037: ip6_tunnel: clear skb2->cb in ip4ip6_err() (bsc#1263995).
- CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1264551).
- CVE-2026-43362: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989).
- CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
- CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266009).
- CVE-2026-43503: net: skbuff: propagate shared-frag marker through frag-transfer helpers (bsc#1265960).
- CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711).
- CVE-2026-45910: RDMA/rxe: Fix race condition in QP timer handlers (bsc#1266889).
- CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267205).
- CVE-2026-46004: ALSA: caiaq: Handle probe errors properly (bsc#1267222).
- CVE-2026-46021: thermal: core: Fix thermal zone governor cleanup issues (bsc#1267220).
- CVE-2026-46043: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (bsc#1266901).
- CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266969).
- CVE-2026-46114: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (bsc#1266972).
- CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (bsc#1266238).
The following non security issues were fixed:
- arm64: tlb: Allow XZR argument to TLBI ops (git-fixes).
- arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (git-fixes).
- drm/hyperv: validate resolution_count and fix WIN8 fallback (git-fixes).
- drm/hyperv: validate VMBus packet size in receive callback (git-fixes).
- net: gro: don't merge zcopy skbs (git-fixes).
- net: mana: Add NULL guards in teardown path to prevent panic on attach failure (git-fixes).
- net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414).
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (bsc#1265928).
- net: mana: hardening: Reject zero max_num_queues from GDMA_QUERY_MAX_RESOURCES (git-fixes).
- net: mana: Skip redundant detach on already-detached port (git-fixes).
- net: mana: Use kvmalloc for large RX queue and buffer allocations (bsc#1266765).
- net: mana: Use per-queue allocation for tx_qp to reduce allocation size (bsc#1266765).
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (bsc#1266402).
- RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes).
- s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1263068).
- s390/entry: Scrub r12 register on kernel entry (bsc#1263068).
- s390/syscalls: Add spectre boundary for syscall dispatch table (bsc#1263068).
- smb: client: correctly handle ErrorContextData as a flexible array (git-fixes).
Special Instructions and Notes:
- Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.6
zypper in -t patch SUSE-2026-2310=1 -
SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2310=1 -
SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2310=1 -
SUSE Linux Enterprise Live Patching 15-SP6
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-2310=1 -
SUSE Linux Enterprise High Availability Extension 15 SP6
zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-2310=1
Package List:
-
openSUSE Leap 15.6 (aarch64)
- dtb-apm-6.4.0-150600.23.115.1
- dtb-allwinner-6.4.0-150600.23.115.1
- dlm-kmp-64kb-6.4.0-150600.23.115.1
- gfs2-kmp-64kb-debuginfo-6.4.0-150600.23.115.1
- dtb-rockchip-6.4.0-150600.23.115.1
- dtb-freescale-6.4.0-150600.23.115.1
- dlm-kmp-64kb-debuginfo-6.4.0-150600.23.115.1
- dtb-hisilicon-6.4.0-150600.23.115.1
- dtb-cavium-6.4.0-150600.23.115.1
- kernel-64kb-devel-debuginfo-6.4.0-150600.23.115.1
- kernel-64kb-debugsource-6.4.0-150600.23.115.1
- dtb-qcom-6.4.0-150600.23.115.1
- dtb-lg-6.4.0-150600.23.115.1
- cluster-md-kmp-64kb-debuginfo-6.4.0-150600.23.115.1
- gfs2-kmp-64kb-6.4.0-150600.23.115.1
- ocfs2-kmp-64kb-6.4.0-150600.23.115.1
- dtb-marvell-6.4.0-150600.23.115.1
- dtb-renesas-6.4.0-150600.23.115.1
- dtb-exynos-6.4.0-150600.23.115.1
- kernel-64kb-devel-6.4.0-150600.23.115.1
- kselftests-kmp-64kb-debuginfo-6.4.0-150600.23.115.1
- dtb-amd-6.4.0-150600.23.115.1
- kernel-64kb-extra-debuginfo-6.4.0-150600.23.115.1
- kernel-64kb-optional-debuginfo-6.4.0-150600.23.115.1
- kernel-64kb-extra-6.4.0-150600.23.115.1
- dtb-amazon-6.4.0-150600.23.115.1
- kernel-64kb-optional-6.4.0-150600.23.115.1
- reiserfs-kmp-64kb-debuginfo-6.4.0-150600.23.115.1
- dtb-xilinx-6.4.0-150600.23.115.1
- dtb-apple-6.4.0-150600.23.115.1
- dtb-mediatek-6.4.0-150600.23.115.1
- ocfs2-kmp-64kb-debuginfo-6.4.0-150600.23.115.1
- dtb-amlogic-6.4.0-150600.23.115.1
- cluster-md-kmp-64kb-6.4.0-150600.23.115.1
- dtb-socionext-6.4.0-150600.23.115.1
- dtb-broadcom-6.4.0-150600.23.115.1
- reiserfs-kmp-64kb-6.4.0-150600.23.115.1
- kernel-64kb-debuginfo-6.4.0-150600.23.115.1
- dtb-altera-6.4.0-150600.23.115.1
- kselftests-kmp-64kb-6.4.0-150600.23.115.1
- dtb-arm-6.4.0-150600.23.115.1
- dtb-sprd-6.4.0-150600.23.115.1
- dtb-nvidia-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (aarch64 nosrc)
- kernel-64kb-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (aarch64 ppc64le x86_64)
- kernel-default-base-6.4.0-150600.23.115.1.150600.12.54.1
- kernel-default-base-rebuild-6.4.0-150600.23.115.1.150600.12.54.1
- kernel-kvmsmall-devel-6.4.0-150600.23.115.1
- kernel-kvmsmall-debuginfo-6.4.0-150600.23.115.1
- kernel-kvmsmall-devel-debuginfo-6.4.0-150600.23.115.1
- kernel-kvmsmall-debugsource-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)
- kernel-obs-qa-6.4.0-150600.23.115.1
- kernel-obs-build-6.4.0-150600.23.115.1
- kernel-obs-build-debugsource-6.4.0-150600.23.115.1
- kernel-default-debugsource-6.4.0-150600.23.115.1
- kernel-default-devel-6.4.0-150600.23.115.1
- dlm-kmp-default-debuginfo-6.4.0-150600.23.115.1
- kselftests-kmp-default-debuginfo-6.4.0-150600.23.115.1
- gfs2-kmp-default-6.4.0-150600.23.115.1
- kernel-default-optional-debuginfo-6.4.0-150600.23.115.1
- kselftests-kmp-default-6.4.0-150600.23.115.1
- kernel-default-livepatch-6.4.0-150600.23.115.1
- kernel-default-extra-debuginfo-6.4.0-150600.23.115.1
- kernel-default-extra-6.4.0-150600.23.115.1
- gfs2-kmp-default-debuginfo-6.4.0-150600.23.115.1
- kernel-default-optional-6.4.0-150600.23.115.1
- kernel-syms-6.4.0-150600.23.115.1
- kernel-default-debuginfo-6.4.0-150600.23.115.1
- cluster-md-kmp-default-6.4.0-150600.23.115.1
- kernel-default-devel-debuginfo-6.4.0-150600.23.115.1
- ocfs2-kmp-default-6.4.0-150600.23.115.1
- reiserfs-kmp-default-debuginfo-6.4.0-150600.23.115.1
- dlm-kmp-default-6.4.0-150600.23.115.1
- ocfs2-kmp-default-debuginfo-6.4.0-150600.23.115.1
- reiserfs-kmp-default-6.4.0-150600.23.115.1
- cluster-md-kmp-default-debuginfo-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 nosrc)
- kernel-default-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (noarch nosrc)
- kernel-docs-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (noarch)
- kernel-macros-6.4.0-150600.23.115.1
- kernel-docs-html-6.4.0-150600.23.115.1
- kernel-devel-6.4.0-150600.23.115.1
- kernel-source-6.4.0-150600.23.115.1
- kernel-source-vanilla-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (nosrc ppc64le x86_64)
- kernel-debug-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (ppc64le x86_64)
- kernel-debug-debugsource-6.4.0-150600.23.115.1
- kernel-debug-devel-6.4.0-150600.23.115.1
- kernel-debug-debuginfo-6.4.0-150600.23.115.1
- kernel-debug-devel-debuginfo-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (x86_64)
- kernel-default-vdso-debuginfo-6.4.0-150600.23.115.1
- kernel-kvmsmall-vdso-6.4.0-150600.23.115.1
- kernel-debug-vdso-debuginfo-6.4.0-150600.23.115.1
- kernel-debug-vdso-6.4.0-150600.23.115.1
- kernel-kvmsmall-vdso-debuginfo-6.4.0-150600.23.115.1
- kernel-default-vdso-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (ppc64le s390x x86_64)
- kernel-default-livepatch-devel-6.4.0-150600.23.115.1
- kernel-livepatch-SLE15-SP6_Update_27-debugsource-1-150600.13.3.1
- kernel-livepatch-6_4_0-150600_23_115-default-debuginfo-1-150600.13.3.1
- kernel-livepatch-6_4_0-150600_23_115-default-1-150600.13.3.1
-
openSUSE Leap 15.6 (aarch64 nosrc ppc64le x86_64)
- kernel-kvmsmall-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (nosrc s390x)
- kernel-zfcpdump-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (s390x)
- kernel-zfcpdump-debugsource-6.4.0-150600.23.115.1
- kernel-zfcpdump-debuginfo-6.4.0-150600.23.115.1
-
openSUSE Leap 15.6 (nosrc)
- dtb-aarch64-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
- kernel-obs-build-6.4.0-150600.23.115.1
- kernel-default-devel-debuginfo-6.4.0-150600.23.115.1
- kernel-default-devel-6.4.0-150600.23.115.1
- gfs2-kmp-default-debuginfo-6.4.0-150600.23.115.1
- ocfs2-kmp-default-6.4.0-150600.23.115.1
- dlm-kmp-default-debuginfo-6.4.0-150600.23.115.1
- reiserfs-kmp-default-debuginfo-6.4.0-150600.23.115.1
- ocfs2-kmp-default-debuginfo-6.4.0-150600.23.115.1
- dlm-kmp-default-6.4.0-150600.23.115.1
- gfs2-kmp-default-6.4.0-150600.23.115.1
- reiserfs-kmp-default-6.4.0-150600.23.115.1
- cluster-md-kmp-default-6.4.0-150600.23.115.1
- kernel-syms-6.4.0-150600.23.115.1
- kernel-default-debuginfo-6.4.0-150600.23.115.1
- cluster-md-kmp-default-debuginfo-6.4.0-150600.23.115.1
- kernel-obs-build-debugsource-6.4.0-150600.23.115.1
- kernel-default-debugsource-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc)
- kernel-64kb-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64)
- kernel-64kb-debugsource-6.4.0-150600.23.115.1
- kernel-64kb-debuginfo-6.4.0-150600.23.115.1
- kernel-64kb-devel-debuginfo-6.4.0-150600.23.115.1
- kernel-64kb-devel-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64 nosrc)
- kernel-default-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le x86_64)
- kernel-default-base-6.4.0-150600.23.115.1.150600.12.54.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (noarch)
- kernel-source-6.4.0-150600.23.115.1
- kernel-macros-6.4.0-150600.23.115.1
- kernel-devel-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (noarch nosrc)
- kernel-docs-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (nosrc s390x)
- kernel-zfcpdump-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server 15 SP6 LTSS (s390x)
- kernel-zfcpdump-debugsource-6.4.0-150600.23.115.1
- kernel-zfcpdump-debuginfo-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
- kernel-default-debugsource-6.4.0-150600.23.115.1
- kernel-obs-build-6.4.0-150600.23.115.1
- kernel-default-devel-debuginfo-6.4.0-150600.23.115.1
- kernel-default-devel-6.4.0-150600.23.115.1
- ocfs2-kmp-default-6.4.0-150600.23.115.1
- reiserfs-kmp-default-debuginfo-6.4.0-150600.23.115.1
- dlm-kmp-default-debuginfo-6.4.0-150600.23.115.1
- gfs2-kmp-default-debuginfo-6.4.0-150600.23.115.1
- ocfs2-kmp-default-debuginfo-6.4.0-150600.23.115.1
- dlm-kmp-default-6.4.0-150600.23.115.1
- reiserfs-kmp-default-6.4.0-150600.23.115.1
- gfs2-kmp-default-6.4.0-150600.23.115.1
- kernel-default-base-6.4.0-150600.23.115.1.150600.12.54.1
- kernel-syms-6.4.0-150600.23.115.1
- kernel-default-debuginfo-6.4.0-150600.23.115.1
- cluster-md-kmp-default-debuginfo-6.4.0-150600.23.115.1
- kernel-obs-build-debugsource-6.4.0-150600.23.115.1
- cluster-md-kmp-default-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (nosrc ppc64le x86_64)
- kernel-default-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch)
- kernel-source-6.4.0-150600.23.115.1
- kernel-macros-6.4.0-150600.23.115.1
- kernel-devel-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch nosrc)
- kernel-docs-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Live Patching 15-SP6 (nosrc)
- kernel-default-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64)
- kernel-livepatch-6_4_0-150600_23_115-default-debuginfo-1-150600.13.3.1
- kernel-default-livepatch-devel-6.4.0-150600.23.115.1
- kernel-livepatch-6_4_0-150600_23_115-default-1-150600.13.3.1
- kernel-default-debuginfo-6.4.0-150600.23.115.1
- kernel-default-livepatch-6.4.0-150600.23.115.1
- kernel-default-debugsource-6.4.0-150600.23.115.1
- kernel-livepatch-SLE15-SP6_Update_27-debugsource-1-150600.13.3.1
-
SUSE Linux Enterprise High Availability Extension 15 SP6 (nosrc)
- kernel-default-6.4.0-150600.23.115.1
-
SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64)
- kernel-default-debugsource-6.4.0-150600.23.115.1
- kernel-default-debuginfo-6.4.0-150600.23.115.1
References:
- https://www.suse.com/security/cve/CVE-2026-31405.html
- https://www.suse.com/security/cve/CVE-2026-31473.html
- https://www.suse.com/security/cve/CVE-2026-31613.html
- https://www.suse.com/security/cve/CVE-2026-31614.html
- https://www.suse.com/security/cve/CVE-2026-31629.html
- https://www.suse.com/security/cve/CVE-2026-31758.html
- https://www.suse.com/security/cve/CVE-2026-43037.html
- https://www.suse.com/security/cve/CVE-2026-43206.html
- https://www.suse.com/security/cve/CVE-2026-43284.html
- https://www.suse.com/security/cve/CVE-2026-43362.html
- https://www.suse.com/security/cve/CVE-2026-43499.html
- https://www.suse.com/security/cve/CVE-2026-43501.html
- https://www.suse.com/security/cve/CVE-2026-43503.html
- https://www.suse.com/security/cve/CVE-2026-45852.html
- https://www.suse.com/security/cve/CVE-2026-45910.html
- https://www.suse.com/security/cve/CVE-2026-45970.html
- https://www.suse.com/security/cve/CVE-2026-46004.html
- https://www.suse.com/security/cve/CVE-2026-46021.html
- https://www.suse.com/security/cve/CVE-2026-46043.html
- https://www.suse.com/security/cve/CVE-2026-46113.html
- https://www.suse.com/security/cve/CVE-2026-46114.html
- https://www.suse.com/security/cve/CVE-2026-46243.html
- https://bugzilla.suse.com/show_bug.cgi?id=1261700
- https://bugzilla.suse.com/show_bug.cgi?id=1262663
- https://bugzilla.suse.com/show_bug.cgi?id=1263068
- https://bugzilla.suse.com/show_bug.cgi?id=1263769
- https://bugzilla.suse.com/show_bug.cgi?id=1263774
- https://bugzilla.suse.com/show_bug.cgi?id=1263790
- https://bugzilla.suse.com/show_bug.cgi?id=1263995
- https://bugzilla.suse.com/show_bug.cgi?id=1264093
- https://bugzilla.suse.com/show_bug.cgi?id=1264449
- https://bugzilla.suse.com/show_bug.cgi?id=1264551
- https://bugzilla.suse.com/show_bug.cgi?id=1264989
- https://bugzilla.suse.com/show_bug.cgi?id=1265928
- https://bugzilla.suse.com/show_bug.cgi?id=1265960
- https://bugzilla.suse.com/show_bug.cgi?id=1266001
- https://bugzilla.suse.com/show_bug.cgi?id=1266009
- https://bugzilla.suse.com/show_bug.cgi?id=1266238
- https://bugzilla.suse.com/show_bug.cgi?id=1266402
- https://bugzilla.suse.com/show_bug.cgi?id=1266414
- https://bugzilla.suse.com/show_bug.cgi?id=1266711
- https://bugzilla.suse.com/show_bug.cgi?id=1266765
- https://bugzilla.suse.com/show_bug.cgi?id=1266889
- https://bugzilla.suse.com/show_bug.cgi?id=1266901
- https://bugzilla.suse.com/show_bug.cgi?id=1266969
- https://bugzilla.suse.com/show_bug.cgi?id=1266972
- https://bugzilla.suse.com/show_bug.cgi?id=1267205
- https://bugzilla.suse.com/show_bug.cgi?id=1267220
- https://bugzilla.suse.com/show_bug.cgi?id=1267222