Security update for the Linux Kernel
| Announcement ID: | SUSE-SU-2026:2630-1 |
|---|---|
| Release Date: | 2026-06-25T11:55:03Z |
| Rating: | important |
| References: |
|
| Cross-References: |
|
| CVSS scores: |
|
| Affected Products: |
|
An update that solves 29 vulnerabilities and has four security fixes can now be installed.
Description:
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
- CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
- CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
- CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700).
- CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
- CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
- CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
- CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
- CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
- CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
- CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
- CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
- CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).
- CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
- CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265116).
- CVE-2026-45886: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810).
- CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267205).
- CVE-2026-45984: gfs2: Move the inode glock locking to gfs2_file_buffered_write (bsc#1267214).
- CVE-2026-46021: thermal: core: Fix thermal zone governor cleanup issues (bsc#1267220).
- CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267361).
- CVE-2026-46113: KVM: x86/mmu: Add helper to convert SPTE value to its shadow page (bsc#1266969).
- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267369).
- CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267640).
- CVE-2026-46123: Bluetooth: virtio_bt: clamp rx length before skb_put (bsc#1267621).
- CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267387).
- CVE-2026-46159: btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak (bsc#1267652).
- CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267697).
- CVE-2026-46273: ibmveth: Disable GSO for packets with small MSS (bsc#1265211 bsc#1267651).
The following non security issues were fixed:
- arm64: tlb: Allow XZR argument to TLBI ops (git-fixes).
- arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (git-fixes).
- KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} (bsc#1247954).
- KVM: x86: Remove 'return void' expression for 'void function' (bsc#1247954).
- smb: client: correctly handle ErrorContextData as a flexible array (git-fixes).
- x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer (bsc#1247954).
Special Instructions and Notes:
- Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.5
zypper in -t patch SUSE-2026-2630=1 -
SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2026-2630=1
Package List:
-
openSUSE Leap 15.5 (x86_64)
- kernel-rt-devel-debuginfo-5.14.21-150500.13.146.1
- kernel-rt-livepatch-5.14.21-150500.13.146.1
- gfs2-kmp-rt-debuginfo-5.14.21-150500.13.146.1
- dlm-kmp-rt-5.14.21-150500.13.146.1
- kernel-rt-livepatch-devel-5.14.21-150500.13.146.1
- kernel-syms-rt-5.14.21-150500.13.146.1
- kernel-rt-debuginfo-5.14.21-150500.13.146.1
- kernel-rt-extra-5.14.21-150500.13.146.1
- kernel-rt_debug-vdso-5.14.21-150500.13.146.1
- kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.146.1
- kernel-rt-vdso-5.14.21-150500.13.146.1
- kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.146.1
- cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.146.1
- ocfs2-kmp-rt-5.14.21-150500.13.146.1
- reiserfs-kmp-rt-5.14.21-150500.13.146.1
- kernel-rt-optional-5.14.21-150500.13.146.1
- gfs2-kmp-rt-5.14.21-150500.13.146.1
- reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.146.1
- cluster-md-kmp-rt-5.14.21-150500.13.146.1
- kselftests-kmp-rt-debuginfo-5.14.21-150500.13.146.1
- kernel-rt-extra-debuginfo-5.14.21-150500.13.146.1
- dlm-kmp-rt-debuginfo-5.14.21-150500.13.146.1
- kernel-rt_debug-debuginfo-5.14.21-150500.13.146.1
- kernel-rt-devel-5.14.21-150500.13.146.1
- kernel-rt-debugsource-5.14.21-150500.13.146.1
- kernel-rt_debug-debugsource-5.14.21-150500.13.146.1
- kernel-rt-vdso-debuginfo-5.14.21-150500.13.146.1
- kernel-rt-optional-debuginfo-5.14.21-150500.13.146.1
- kselftests-kmp-rt-5.14.21-150500.13.146.1
- kernel-rt_debug-devel-5.14.21-150500.13.146.1
- ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.146.1
-
openSUSE Leap 15.5 (noarch)
- kernel-devel-rt-5.14.21-150500.13.146.1
- kernel-source-rt-5.14.21-150500.13.146.1
-
openSUSE Leap 15.5 (nosrc x86_64)
- kernel-rt-5.14.21-150500.13.146.1
- kernel-rt_debug-5.14.21-150500.13.146.1
-
SUSE Linux Enterprise Micro 5.5 (noarch)
- kernel-devel-rt-5.14.21-150500.13.146.1
- kernel-source-rt-5.14.21-150500.13.146.1
-
SUSE Linux Enterprise Micro 5.5 (nosrc x86_64)
- kernel-rt-5.14.21-150500.13.146.1
-
SUSE Linux Enterprise Micro 5.5 (x86_64)
- kernel-rt-debugsource-5.14.21-150500.13.146.1
- kernel-rt-debuginfo-5.14.21-150500.13.146.1
References:
- https://www.suse.com/security/cve/CVE-2025-10263.html
- https://www.suse.com/security/cve/CVE-2025-68324.html
- https://www.suse.com/security/cve/CVE-2026-23392.html
- https://www.suse.com/security/cve/CVE-2026-31405.html
- https://www.suse.com/security/cve/CVE-2026-31473.html
- https://www.suse.com/security/cve/CVE-2026-31500.html
- https://www.suse.com/security/cve/CVE-2026-31613.html
- https://www.suse.com/security/cve/CVE-2026-31697.html
- https://www.suse.com/security/cve/CVE-2026-31698.html
- https://www.suse.com/security/cve/CVE-2026-31699.html
- https://www.suse.com/security/cve/CVE-2026-31758.html
- https://www.suse.com/security/cve/CVE-2026-31759.html
- https://www.suse.com/security/cve/CVE-2026-43077.html
- https://www.suse.com/security/cve/CVE-2026-43198.html
- https://www.suse.com/security/cve/CVE-2026-43366.html
- https://www.suse.com/security/cve/CVE-2026-43503.html
- https://www.suse.com/security/cve/CVE-2026-45886.html
- https://www.suse.com/security/cve/CVE-2026-45970.html
- https://www.suse.com/security/cve/CVE-2026-45984.html
- https://www.suse.com/security/cve/CVE-2026-46021.html
- https://www.suse.com/security/cve/CVE-2026-46037.html
- https://www.suse.com/security/cve/CVE-2026-46113.html
- https://www.suse.com/security/cve/CVE-2026-46116.html
- https://www.suse.com/security/cve/CVE-2026-46120.html
- https://www.suse.com/security/cve/CVE-2026-46123.html
- https://www.suse.com/security/cve/CVE-2026-46150.html
- https://www.suse.com/security/cve/CVE-2026-46159.html
- https://www.suse.com/security/cve/CVE-2026-46227.html
- https://www.suse.com/security/cve/CVE-2026-46273.html
- https://bugzilla.suse.com/show_bug.cgi?id=1247954
- https://bugzilla.suse.com/show_bug.cgi?id=1255416
- https://bugzilla.suse.com/show_bug.cgi?id=1258538
- https://bugzilla.suse.com/show_bug.cgi?id=1260531
- https://bugzilla.suse.com/show_bug.cgi?id=1261700
- https://bugzilla.suse.com/show_bug.cgi?id=1262663
- https://bugzilla.suse.com/show_bug.cgi?id=1262993
- https://bugzilla.suse.com/show_bug.cgi?id=1263769
- https://bugzilla.suse.com/show_bug.cgi?id=1263879
- https://bugzilla.suse.com/show_bug.cgi?id=1263880
- https://bugzilla.suse.com/show_bug.cgi?id=1264076
- https://bugzilla.suse.com/show_bug.cgi?id=1264093
- https://bugzilla.suse.com/show_bug.cgi?id=1264116
- https://bugzilla.suse.com/show_bug.cgi?id=1264470
- https://bugzilla.suse.com/show_bug.cgi?id=1264610
- https://bugzilla.suse.com/show_bug.cgi?id=1265116
- https://bugzilla.suse.com/show_bug.cgi?id=1265211
- https://bugzilla.suse.com/show_bug.cgi?id=1265960
- https://bugzilla.suse.com/show_bug.cgi?id=1266214
- https://bugzilla.suse.com/show_bug.cgi?id=1266290
- https://bugzilla.suse.com/show_bug.cgi?id=1266810
- https://bugzilla.suse.com/show_bug.cgi?id=1266969
- https://bugzilla.suse.com/show_bug.cgi?id=1267205
- https://bugzilla.suse.com/show_bug.cgi?id=1267214
- https://bugzilla.suse.com/show_bug.cgi?id=1267220
- https://bugzilla.suse.com/show_bug.cgi?id=1267361
- https://bugzilla.suse.com/show_bug.cgi?id=1267369
- https://bugzilla.suse.com/show_bug.cgi?id=1267387
- https://bugzilla.suse.com/show_bug.cgi?id=1267621
- https://bugzilla.suse.com/show_bug.cgi?id=1267640
- https://bugzilla.suse.com/show_bug.cgi?id=1267651
- https://bugzilla.suse.com/show_bug.cgi?id=1267652
- https://bugzilla.suse.com/show_bug.cgi?id=1267697